services:
  # linux-eng@psi.ch
  nginx:
    image: gitea.psi.ch/images/nginx:1.29.8
    container_name: nginx_proxy
    restart: always
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - /etc/letsencrypt/live:/etc/letsencrypt/live:ro
      - /etc/letsencrypt/archive:/etc/letsencrypt/archive:ro
      - /etc/pki/tls/certs:/etc/nginx/certs:ro
      - /etc/pki/tls/private:/etc/nginx/private:ro
      - /etc/nginx/nginx.conf:/etc/nginx/nginx.conf:ro
      - /etc/nginx/conf.d:/etc/nginx/conf.d:ro
      - /opt/webcontent/sinqstatus:/opt/webcontent/sinqstatus:ro
      - /mount/actris:/opt/webcontent/actris:ro
      - /opt/webcontent/DMZ:/opt/webcontent/DMZ:rw
    networks:
      - public
      - backend

  # rfwtools
  # gfa-status-test
  apache:
    image: gitea.psi.ch/images/php-apache:latest
    container_name: apache_app
    restart: always
    volumes:
      - /opt/webcontent/DMZ/rfmwtools:/var/www/rfmwtools:ro
      - /opt/webcontent/DMZ/fluid-eos:/var/www/fluid-eos:rw
      - /opt/webcontent/DMZ/omny:/var/www/omny:rw
      - /opt/webcontent/DMZ/cas-status:/var/www/cas_status:rw
      - /mount/srem/webhosting:/var/www/srem:rw
      - /mount/webhosting_dmz_write/tcpwiki:/var/www/tcpwiki:rw
      - /mount/webhosting_dmz_write/dokuwiki-core:/var/www/dokuwiki-core:r
      - ./apache/conf:/etc/apache2/sites-enabled:ro
    networks:
      - backend

  # MCDA Calculator Huang He <river.huang@psi.ch>
  mcda-calculator:
    image: gitea.psi.ch/images/mcda-calculator:1.0.3
    container_name: mcda-calculator
    restart: always
    networks: 
      - backend

  # MCDA DSS Huang He <river.huang@psi.ch>
  mcda-dss:
    image: gitea.psi.ch/images/mcda-dss:0.5.0
    container_name: mcda-dss
    restart: always
    networks:
      - backend

  # MCDA SRF Huang He <river.huang@psi.ch>
  mcda-srf:
    image: gitea.psi.ch/images/mcda-srf:0.5.0
    container_name: mcda-srf
    restart: always
    networks:
      - backend

  # River Huang <river.huang@psi.ch>
  # UP-MAVT-Suite
  up-mavt-suite-mongo:
    image: mongo:7.0
    container_name: up-mavt-suite-mongo
    environment:
      MONGO_INITDB_DATABASE: elicitation
    volumes:
      - /opt/webcontent/up-mavt-suite/mongo-data:/data/db
    networks:
      - up_mavt_suite_network
    restart: always

  up-mavt-suite-backend:
    image: gitea.psi.ch/images/up-mavt-suite-backend:0.9.5
    container_name: up-mavt-suite-backend
    environment:
      MONGO_URI: mongodb://up-mavt-suite-mongo:27017/elicitation
      FLASK_ENV: production
      ADMIN_PASSWORD: ${MCDA_UP_ADMIN_PASSWORD}
      OAUTH2_CLIENT_SECRET: ${MCDA_UP_OAUTH2_SECRET}
      SMTP_HOST: smtp.office365.com
      SMTP_PORT: 587
      SMTP_USER: mcda@psi.ch
      EMAIL_AUTH_MODE: oauth2
      OAUTH2_TENANT_ID: 50f89ee2-f910-47c5-9913-a6ea08928f11
      OAUTH2_CLIENT_ID: 201ba262-3c76-41fb-8942-dcefb7729caa
      OAUTH2_SCOPE: https://outlook.office365.com/.default
      OAUTH2_USERNAME: mcda@psi.ch
      SMTP_USE_TLS: true
      EMAIL_FROM: mcda@psi.ch
      APP_BASE_URL: https://mcda-up.psi.ch/
    depends_on:
      - up-mavt-suite-mongo
    networks:
      - up_mavt_suite_network
      - backend
    restart: always

  up-mavt-suite-worker:
    image: gitea.psi.ch/images/up-mavt-suite-worker:0.9.5
    container_name: up-mavt-suite-worker
    environment:
      MONGO_URI: mongodb://up-mavt-suite-mongo:27017/elicitation
    depends_on:
      - up-mavt-suite-mongo
    networks:
      - up_mavt_suite_network
    restart: always

  up-mavt-suite-frontend:
    image: gitea.psi.ch/images/up-mavt-suite-frontend:0.9.5
    container_name: up-mavt-suite-frontend
    depends_on:
      - up-mavt-suite-backend
    networks:
      - up_mavt_suite_network
      - backend
    restart: always


  # Romain Sacchi <romain.sacchi@psi.ch>
  swiss-ecargo:
    image: gitea.psi.ch/sacchi_r/swiss-ecargo:0.1.2
    container_name: swiss-ecargo
    restart: always
    environment:
      - HOSTED_API_KEY=${ecargo_api_key}
    networks:
      - backend


  # Lange Clemens <clemens.lange@psi.ch>
  # summer-project-selection.psi.ch
  summer-project-selection:
    image: gitea.psi.ch/lange_c/summer-project-selection:latest
    container_name: summer-project-selection
    restart: always
    volumes:
      - /mount/webhosting_dmz_write/summer-project-selection/data:/app/data
      - /opt/webcontent/DMZ/summer-project-selection/projects:/app/projects
      - /opt/webcontent/DMZ/summer-project-selection/applicants:/app/applicants
    networks:
      - backend

  # PEPISCO <andras.boedi@psi.ch> <patrick.hemberger@psi.ch>
  # PhotoElectron PhotoIon Spectral COmpendium
  pepisco:
    image: gitea.psi.ch/images/pepisco:v2026.03.13
    container_name: pepisco
    restart: always
    networks:
      - backend

networks:
  public:
  backend:
  up_mavt_suite_network: