x-no-sms-secrets: &no-sms-secrets
  SMS_DATABASE_URL: ""
  SMS_SERVICE_TOKEN: ""
  KEYCLOAK_SMS_SERVICE_TOKEN: ""
  IDGTL_SMS_API_KEY: ""
  IDGTL_SMS_CALLBACK_USERNAME: ""
  IDGTL_SMS_CALLBACK_PASSWORD: ""

services:
  migrate-api:
    image: ${API_BACKEND_IMAGE:-han-chat-api-backend:local}
    profiles: ["ops"]
    env_file:
      - path: ../.env
        required: false
    environment: *no-sms-secrets
    entrypoint: []
    command: ["alembic", "upgrade", "head"]
    volumes:
      - ${PG_CA_HOST_PATH}:/run/secrets/pg-ca.pem:ro
    networks: [backend, egress]
    restart: "no"
    security_opt: ["no-new-privileges:true"]

  migrate-bitrix-local:
    image: ${BITRIX_LOCAL_APP_IMAGE:-han-chat-bitrix-local-app:local}
    profiles: ["ops"]
    env_file:
      - path: ../.env
        required: false
    environment: *no-sms-secrets
    entrypoint: []
    command: ["alembic", "upgrade", "head"]
    volumes:
      - ${PG_CA_HOST_PATH}:/run/secrets/pg-ca.pem:ro
    networks: [backend, egress]
    restart: "no"
    security_opt: ["no-new-privileges:true"]

  migrate-bitrix-sync:
    image: ${BITRIX_SYNC_IMAGE:-han-chat-bitrix-sync:local}
    profiles: ["ops"]
    env_file:
      - path: ../.env
        required: false
    environment: *no-sms-secrets
    entrypoint: []
    command: ["alembic", "upgrade", "head"]
    volumes:
      - ${PG_CA_HOST_PATH}:/run/secrets/pg-ca.pem:ro
    networks: [backend, egress]
    restart: "no"
    security_opt: ["no-new-privileges:true"]

  migrate-sms:
    image: ${SMS_SERVICE_IMAGE:-han-chat-sms-service:local}
    profiles: ["ops"]
    environment:
      SMS_DATABASE_URL: ${SMS_DATABASE_URL}
      SMS_SERVICE_TOKEN: ${SMS_SERVICE_TOKEN}
      IDGTL_SMS_BASE_URL: ${IDGTL_SMS_BASE_URL:-https://direct.i-dgtl.ru}
      IDGTL_SMS_CALLBACK_PUBLIC_URL: ${IDGTL_SMS_CALLBACK_PUBLIC_URL}
      IDGTL_SMS_CALLBACK_USERNAME: ${IDGTL_SMS_CALLBACK_USERNAME}
      IDGTL_SMS_CALLBACK_PASSWORD: ${IDGTL_SMS_CALLBACK_PASSWORD}
    entrypoint: []
    command: ["alembic", "upgrade", "head"]
    volumes:
      - ${PG_CA_HOST_PATH}:/run/secrets/pg-ca.pem:ro
    networks: [backend, egress]
    restart: "no"
    security_opt: ["no-new-privileges:true"]

  seed-settings:
    image: ${API_BACKEND_IMAGE:-han-chat-api-backend:local}
    profiles: ["ops"]
    env_file:
      - path: ../.env
        required: false
    environment: *no-sms-secrets
    entrypoint: []
    command:
      - /bin/sh
      - -ec
      - >-
        python -m app.cli.seed_settings
        --file /deployment/app-settings.production-like.yaml
        && python -m app.cli.validate_settings
    volumes:
      - ${PG_CA_HOST_PATH}:/run/secrets/pg-ca.pem:ro
      - ./app-settings.production-like.yaml:/deployment/app-settings.production-like.yaml:ro
    networks: [backend, egress]
    restart: "no"
    security_opt: ["no-new-privileges:true"]

  toolbox:
    image: curlimages/curl:8.11.1
    profiles: ["ops"]
    entrypoint: ["sleep", "infinity"]
    networks: [backend, observability, egress]
    restart: "no"
    cap_drop: ["ALL"]
    security_opt: ["no-new-privileges:true"]