docker-compose.yml

services:
  # --- BACKEND SERVICE (Python API) ---
  backend:
    container_name: intune_backend
    build:
      context: ./Backend
      dockerfile: Dockerfile
    restart: unless-stopped
    
    # SECURITY: Only expose port 8000 internally to the Docker network.
    # The host machine cannot access this directly, only the frontend can.
    expose:
      - "8000"
      
    volumes:
      - app_data:/app/data
    environment:
      - PYTHONUNBUFFERED=1
    networks:
      - intune_net
      
    # HEALTHCHECK: Pings the API every 10s to see if it's ready.
    # The frontend will NOT start until this passes.
    healthcheck:
      test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:8000/health')"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 300s # Gives the heavy sync script time to run first

  # --- FRONTEND SERVICE (React + Nginx) ---
  frontend:
    container_name: intune_frontend
    build:
      context: ./frontend
      dockerfile: Dockerfile
    restart: unless-stopped
    
    # ACCESS: This is the ONLY port exposed to your network.
    # Point your Reverse Proxy / Load Balancer here (e.g., http://10.10.10.10:8090)
    ports:
      - "8090:80"
      
    # DEPENDENCY: Waits for backend to be "Healthy" (not just running)
    depends_on:
      backend:
        condition: service_healthy
        
    networks:
      - intune_net

# --- NETWORKS ---
networks:
  intune_net:
    driver: bridge

# --- VOLUMES ---
volumes:
  app_data: