docker-compose.yml

services:
  mta:
    build: .
    image: srmta:latest
    # Use host networking so the MTA can bind to port 25 and make outbound
    # SMTP connections on port 25 without NAT (required for real mail delivery).
    network_mode: host
    restart: unless-stopped
    env_file:
      - ./deploy/systemd/srmta.env.example   # copy and fill in real secrets
    volumes:
      - ./configs/config.example.yaml:/etc/srmta/config.yaml:ro
      - ./configs/config.d:/etc/srmta/config.d:ro
      - srmta-spool:/var/spool/srmta
      - srmta-logs:/var/log/srmta
      - srmta-dkim:/etc/srmta/dkim
    depends_on:
      postgres:
        condition: service_healthy

  # Admin API (Node.js / Fastify)
  api:
    build:
      context: ./web/api
      dockerfile: Dockerfile
    image: srmta-api:latest
    network_mode: host
    restart: unless-stopped
    environment:
      - NODE_ENV=production
      - PORT=3000
    env_file:
      - ./deploy/systemd/srmta.env.example
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_started

  postgres:
    image: postgres:16-alpine
    restart: unless-stopped
    environment:
      POSTGRES_USER: srmta
      POSTGRES_DB: srmta
      POSTGRES_PASSWORD: ${DB_PASSWORD:-changeme}
    volumes:
      - postgres-data:/var/lib/postgresql/data
      - ./migrations/init_postgres.sql:/docker-entrypoint-initdb.d/init.sql:ro
    ports:
      - "5432:5432"
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U srmta"]
      interval: 5s
      timeout: 5s
      retries: 10

  redis:
    image: redis:7-alpine
    restart: unless-stopped
    ports:
      - "6379:6379"

volumes:
  postgres-data:
  srmta-spool:
  srmta-logs:
  srmta-dkim: