name: core-infra

secrets:
  db_password:
    file: ./secrets/db_password.txt

services:
  # Zentrale Postgres Datenbank für Paperless, Gitea, etc.
  database:
    image: postgres:16-alpine
    container_name: postgres-core
    restart: always
    environment:
      POSTGRES_USER: admin
      POSTGRES_DB: main_db
      # Docker Secret Magic: Liest das Passwort aus der Datei
      POSTGRES_PASSWORD_FILE: /run/secrets/db_password
    secrets:
      - db_password
    volumes:
      - db_data:/var/lib/postgresql/data
    networks:
      - core_net

  # Zentrale Redis Instanz (Cache für Paperless, Immich etc.)
  redis:
    image: redis:alpine
    container_name: redis-core
    restart: always
    networks:
      - core_net

volumes:
  db_data:

networks:
  core_net:
    name: core_net
    driver: bridge