services:
  migrate-api:
    image: ${API_BACKEND_IMAGE:-han-chat-api-backend:local}
    profiles: ["ops"]
    env_file:
      - path: ../.env
        required: false
    entrypoint: []
    command: ["alembic", "upgrade", "head"]
    volumes:
      - ${PG_CA_HOST_PATH}:/run/secrets/pg-ca.pem:ro
    networks: [backend]
    restart: "no"
    security_opt: ["no-new-privileges:true"]

  migrate-bitrix-local:
    image: ${BITRIX_LOCAL_APP_IMAGE:-han-chat-bitrix-local-app:local}
    profiles: ["ops"]
    env_file:
      - path: ../.env
        required: false
    entrypoint: []
    command: ["alembic", "upgrade", "head"]
    volumes:
      - ${PG_CA_HOST_PATH}:/run/secrets/pg-ca.pem:ro
    networks: [backend]
    restart: "no"
    security_opt: ["no-new-privileges:true"]

  migrate-bitrix-sync:
    image: ${BITRIX_SYNC_IMAGE:-han-chat-bitrix-sync:local}
    profiles: ["ops"]
    env_file:
      - path: ../.env
        required: false
    entrypoint: []
    command: ["alembic", "upgrade", "head"]
    volumes:
      - ${PG_CA_HOST_PATH}:/run/secrets/pg-ca.pem:ro
    networks: [backend]
    restart: "no"
    security_opt: ["no-new-privileges:true"]

  seed-settings:
    image: ${API_BACKEND_IMAGE:-han-chat-api-backend:local}
    profiles: ["ops"]
    env_file:
      - path: ../.env
        required: false
    entrypoint: []
    command:
      - /bin/sh
      - -ec
      - >-
        python -m app.cli.seed_settings
        --file /deployment/app-settings.production-like.yaml
        && python -m app.cli.validate_settings
    volumes:
      - ${PG_CA_HOST_PATH}:/run/secrets/pg-ca.pem:ro
      - ./app-settings.production-like.yaml:/deployment/app-settings.production-like.yaml:ro
    networks: [backend]
    restart: "no"
    security_opt: ["no-new-privileges:true"]

  toolbox:
    image: curlimages/curl:8.11.1
    profiles: ["ops"]
    entrypoint: ["sleep", "infinity"]
    networks: [backend, observability]
    restart: "no"
    cap_drop: ["ALL"]
    security_opt: ["no-new-privileges:true"]