mkdir -p cookest/{app-db,food-db,pdfs,imports,ollama}
cd cookest

# JWT signing key — paste into .env below
openssl rand -hex 32

# ─── SYSTEM ──────────────────────────────────────────────
SELF_HOSTED=true

# ─── SECURITY ────────────────────────────────────────────
# Paste the output of: openssl rand -hex 32
JWT_SECRET=<your-64-char-hex-secret>

# ─── DATA SOURCES ────────────────────────────────────────
# local   → use only local PostgreSQL (no external APIs)
# hybrid  → query local first, fall back to FatSecret if you have keys
# fatsecret → use FatSecret exclusively (requires FS_CLIENT_ID / FS_CLIENT_SECRET)
FOOD_DATA_SOURCE=local

# Optional: FatSecret API keys (only needed for hybrid/fatsecret mode)
# FS_CLIENT_ID=
# FS_CLIENT_SECRET=

# ─── NETWORKING ──────────────────────────────────────────
# Set this to your domain or LAN address so CORS is correct
CORS_ORIGIN=http://localhost:3000

# ─── LOCAL AI (OLLAMA) ───────────────────────────────────
# If Ollama runs in a separate container (docker-compose handles it below):
OLLAMA_URL=http://ollama:11434
# If Ollama runs on the Docker host machine:
# OLLAMA_URL=http://host.docker.internal:11434
OLLAMA_MODEL=llama3.1:8b
OLLAMA_VISION_MODEL=qwen2.5vl:7b
# Increase if receipt scanning times out on slow hardware
OLLAMA_VISION_TIMEOUT_SECS=120

# ─── OPTIONAL FEATURES ───────────────────────────────────
# RESEND_API_KEY=          # email delivery (registration confirmations)
# RESEND_FROM_EMAIL=noreply@yourdomain.com
# IMAGE_GEN_URL=           # AI image generation microservice

name: cookest

services:
  # ── Databases ────────────────────────────────────────────
  app-db:
    image: pgvector/pgvector:pg16
    container_name: cookest_app_db
    restart: unless-stopped
    environment:
      POSTGRES_USER: postgres
      POSTGRES_PASSWORD: postgres
      POSTGRES_DB: cookest_app
    volumes:
      - ./app-db:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U postgres -d cookest_app"]
      interval: 5s
      timeout: 5s
      retries: 5

  food-db:
    image: postgres:16-alpine
    container_name: cookest_food_db
    restart: unless-stopped
    environment:
      POSTGRES_USER: postgres
      POSTGRES_PASSWORD: postgres
      POSTGRES_DB: cookest_food
    volumes:
      - ./food-db:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U postgres -d cookest_food"]
      interval: 5s
      timeout: 5s
      retries: 5

  # ── Food API ──────────────────────────────────────────────
  food-api:
    image: ghcr.io/cookest/food-api:latest
    container_name: cookest_food_api
    restart: unless-stopped
    env_file: .env
    environment:
      FOOD_DATABASE_URL: postgresql://postgres:postgres@food-db:5432/cookest_food
      FOOD_HOST: 0.0.0.0
      FOOD_PORT: 8081
      FOOD_CORS_ORIGIN: "*"
      FOOD_DATA_SOURCE: ${FOOD_DATA_SOURCE:-local}
    volumes:
      - ./imports:/data/imports:ro
    depends_on:
      food-db:
        condition: service_healthy

  # ── App API ───────────────────────────────────────────────
  app-api:
    image: ghcr.io/cookest/app-api:latest
    container_name: cookest_app_api
    restart: unless-stopped
    env_file: .env
    environment:
      APP_DATABASE_URL: postgresql://postgres:postgres@app-db:5432/cookest_app
      HOST: 0.0.0.0
      PORT: 8080
      FOOD_API_URL: http://food-api:8081
      PDF_UPLOAD_DIR: /data/pdfs
      SELF_HOSTED: "true"
    ports:
      - "8080:8080"
    volumes:
      - ./pdfs:/data/pdfs
      - ./imports:/data/imports:ro
    depends_on:
      app-db:
        condition: service_healthy
      food-api:
        condition: service_started

  # ── Admin Panel ───────────────────────────────────────────
  admin:
    image: ghcr.io/cookest/admin:latest
    container_name: cookest_admin
    restart: unless-stopped
    environment:
      NEXT_PUBLIC_APP_API_URL: http://app-api:8080
      APP_API_INTERNAL_URL: http://app-api:8080
    ports:
      - "3000:3000"
    depends_on:
      - app-api

  # ── Ollama (Local AI) ─────────────────────────────────────
  # Remove this service if you run Ollama on the host or a separate machine
  ollama:
    image: ollama/ollama:latest
    container_name: cookest_ollama
    restart: unless-stopped
    volumes:
      - ./ollama:/root/.ollama
    ports:
      - "11434:11434"
    # Uncomment to enable NVIDIA GPU passthrough:
    # deploy:
    #   resources:
    #     reservations:
    #       devices:
    #         - driver: nvidia
    #           count: all
    #           capabilities: [gpu]

docker compose up -d

docker compose logs -f --tail=50

# Wait for Ollama to start, then pull models
docker compose exec ollama ollama pull llama3.1:8b
docker compose exec ollama ollama pull qwen2.5vl:7b

chmod +x deploy/setup-ollama.sh
sudo ./deploy/setup-ollama.sh