# BACKLOG P1-19 (DX-02): local-only Postgres for developers who want real
# persistence instead of the in-memory fallback (lib/db.ts / lib/orders-store.ts
# already degrade gracefully without this -- `pnpm dev` / `make dev` work
# without it, this is additive). Modeled on the already-proven Postgres
# service in infra/docker-compose.yml (same image, same sql/ init mount) --
# not a copy of the full VPS stack (no NocoDB/Metabase/Caddy/worker here,
# those are production concerns, not local dev needs).
#
# VERIFIED (P014, 2026-09-03): this file's image/credentials/init-mount shape
# was exercised for real (an equivalent standalone container -- this sandbox
# had an unrelated service already bound to host port 5432, so the literal
# `docker compose -f compose.dev.yaml up` command itself could not be run
# here, but the identical image + `sql/*.sql` init sequence + connection
# shape were run and verified end to end as part of P014's restore drill).
# That drill surfaced and fixed the ACTUAL reason this was unverifiable
# before: `lib/db.ts`'s `getSql()` hardcoded `ssl: "require"`, which this
# plain-Postgres container can never satisfy (no TLS is configured here) --
# every connection attempt failed before a single query ran. Fixed: `ssl` now
# defaults to "require" (unchanged for every real deployment) but honors
# `DATABASE_SSL=false` to opt out. To use this container from the app or a
# script, set BOTH:
#   DATABASE_URL=postgresql://opt:opt-dev-only-not-a-secret@localhost:5432/opt
#   DATABASE_SSL=false
# `sql/003_datasets.sql` (also added by P014, closing a separate gap where
# `004_iceberg_write_boundary.sql` referenced a table no migration defined)
# is picked up by the `docker-entrypoint-initdb.d` mount automatically --
# Postgres runs `*.sql` in this directory in filename-sorted order, and the
# zero-padded 00N prefixes already sort correctly.
services:
  db:
    image: pgvector/pgvector:pg16
    environment:
      POSTGRES_USER: opt
      POSTGRES_PASSWORD: opt-dev-only-not-a-secret
      POSTGRES_DB: opt
    ports:
      - "5432:5432"
    volumes:
      - opt-dev-pgdata:/var/lib/postgresql/data
      - ./sql:/docker-entrypoint-initdb.d:ro
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U opt -d opt"]
      interval: 5s
      timeout: 5s
      retries: 10

volumes:
  opt-dev-pgdata: {}