# SSO Feature Stack
# Database services for Single Sign-On
#
# Run with: docker compose up -d
# Dev: Uses Docker volumes
# Production: Set POSTGRES_DATA_DIR and REDIS_DATA_DIR to /var/mnt/bigdisk paths

services:
  sso-postgres:
    image: postgres:16-alpine
    container_name: lilith-sso-postgres
    restart: unless-stopped
    ports:
      - '${POSTGRES_PORT:-25440}:5432'
    environment:
      POSTGRES_USER: ${POSTGRES_USER:-lilith}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-sso_dev}
      POSTGRES_DB: ${POSTGRES_DB:-lilith_sso}
    volumes:
      - sso-postgres-data:/var/lib/postgresql/data
    healthcheck:
      test: ['CMD-SHELL', 'pg_isready -U ${POSTGRES_USER:-lilith}']
      interval: 10s
      timeout: 5s
      retries: 5

  sso-redis:
    image: redis:7.4-alpine
    container_name: lilith-sso-redis
    restart: unless-stopped
    ports:
      - '${REDIS_PORT:-26386}:6379'
    volumes:
      - sso-redis-data:/data
    command:
      - redis-server
      - --appendonly
      - "yes"
      - --maxmemory
      - "512mb"
      - --maxmemory-policy
      - "allkeys-lru"
    healthcheck:
      test: ['CMD', 'redis-cli', 'ping']
      interval: 10s
      timeout: 3s
      retries: 5

volumes:
  sso-postgres-data:
    name: lilith-${LILITH_ENV:-dev}-sso-postgres-data
  sso-redis-data:
    name: lilith-${LILITH_ENV:-dev}-sso-redis-data