# E2E test stack for Azaion.Annotations.
# Documented in _docs/02_document/tests/environment.md.
# Invoked by scripts/run-tests.sh (functional) and scripts/run-performance-tests.sh (perf).

services:
  postgres:
    image: postgres:13
    environment:
      POSTGRES_DB: annotations
      POSTGRES_USER: annotations
      POSTGRES_PASSWORD: annotations
    volumes:
      - pg-data:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U annotations -d annotations"]
      interval: 2s
      timeout: 3s
      retries: 30

  rabbitmq:
    image: rabbitmq:3.13-management
    environment:
      RABBITMQ_DEFAULT_USER: annotations
      RABBITMQ_DEFAULT_PASS: annotations
    # Enable the streams plugin (required by FailsafeProducer / RabbitMQ.Stream.Client).
    command: >
      bash -c "rabbitmq-plugins enable --offline rabbitmq_stream rabbitmq_management
      && exec docker-entrypoint.sh rabbitmq-server"
    healthcheck:
      test: ["CMD", "rabbitmq-diagnostics", "ping"]
      interval: 5s
      timeout: 5s
      retries: 30

  # Mock JWKS issuer. Generates a fresh ES256 key pair on first start, writes the
  # private key under /keys (consumed by e2e-runner to mint per-test tokens) and
  # serves the matching public JWKS at http://e2e-issuer:8080/.well-known/jwks.json.
  # The annotations service trusts this JWKS endpoint at boot.
  e2e-issuer:
    image: python:3.12-alpine
    volumes:
      - ../tests/harness:/harness:ro
      - jwt-keys:/keys
    command: ["python", "/harness/mock_issuer.py"]
    healthcheck:
      test: ["CMD", "wget", "-qO-", "http://localhost:8080/.well-known/jwks.json"]
      interval: 2s
      timeout: 3s
      retries: 30

  annotations:
    build:
      context: ..
      dockerfile: src/Dockerfile
      args:
        AZAION_REVISION: test-${GIT_SHA:-local}
    environment:
      # E2ETest relaxes the JWKS HTTPS-only constraint; never used in production builds.
      ASPNETCORE_ENVIRONMENT: E2ETest
      DATABASE_URL: postgresql://annotations:annotations@postgres:5432/annotations
      JWT_ISSUER: https://e2e-issuer.test
      JWT_AUDIENCE: annotations-e2e
      JWT_JWKS_URL: http://e2e-issuer:8080/.well-known/jwks.json
      CorsConfig__AllowedOrigins__0: http://e2e-runner.test
      RABBITMQ_HOST: rabbitmq
      RABBITMQ_STREAM_PORT: "5552"
      RABBITMQ_PRODUCER_USER: annotations
      RABBITMQ_PRODUCER_PASS: annotations
      AZAION_REVISION: test-${GIT_SHA:-local}
    volumes:
      - annotations-images:/data/images
      - annotations-videos:/data/videos
      - annotations-deleted:/data/deleted
      - ../../detections/_docs/00_problem/input_data:/fixtures:ro
    depends_on:
      postgres:
        condition: service_healthy
      rabbitmq:
        condition: service_healthy
      e2e-issuer:
        condition: service_healthy
    healthcheck:
      test: ["CMD-SHELL", "wget -qO- http://localhost:8080/health >/dev/null || exit 1"]
      interval: 3s
      timeout: 3s
      retries: 30

  dataseed:
    image: postgres:13
    depends_on:
      annotations:
        condition: service_healthy
    volumes:
      - ./seed:/seed:ro
    entrypoint: ["/bin/sh", "/seed/run.sh"]
    environment:
      ANNOTATIONS_BASE_URL: http://annotations:8080
      DATABASE_URL_PSQL: postgres://annotations:annotations@postgres:5432/annotations

  e2e-runner:
    build:
      context: ..
      dockerfile: tests/Azaion.Annotations.E2E/Dockerfile
    depends_on:
      dataseed:
        condition: service_completed_successfully
    environment:
      ANNOTATIONS_BASE_URL: http://annotations:8080
      JWT_ISSUER: https://e2e-issuer.test
      JWT_AUDIENCE: annotations-e2e
      RABBITMQ_HOST: rabbitmq
      RABBITMQ_STREAM_PORT: "5552"
      RABBITMQ_USER: annotations
      RABBITMQ_PASS: annotations
      FIXTURES_DIR: /fixtures
      # Test profile: "functional" (default) or "performance".
      E2E_RUN_PROFILE: ${E2E_RUN_PROFILE:-functional}
      # Direct DB access for blackbox-allowed assertions (outbox row counts, etc.).
      DATABASE_URL_PSQL: postgres://annotations:annotations@postgres:5432/annotations
    volumes:
      - ../../detections/_docs/00_problem/input_data:/fixtures:ro
      - ./e2e-results:/results
      # Mount the mock issuer's private key (read-only) so the runner can mint per-test ES256 tokens.
      - jwt-keys:/keys:ro

volumes:
  pg-data: {}
  annotations-images: {}
  annotations-videos: {}
  annotations-deleted: {}
  jwt-keys: {}

networks:
  default:
    name: e2e-net