# Production compose skeleton — NOT for daily local coding.
# Activate only when images/Dockerfiles exist for a release.
# Policy: .ai/deployment.md · .ai/docker.md
#
# Example (uncomment and set registry tags when shipping):
#
# services:
#   api:
#     image: registry.example.com/yuxingu-api:${TAG:-v0.0.0}
#     env_file: [.env.prod]
#     ports: ["8080:8080"]
#   web:
#     image: registry.example.com/yuxingu-user-h5:${TAG:-v0.0.0}
#     ports: ["80:80"]

services:
  # Keeps file valid; profile "prod" must be enabled explicitly — never default local.
  postgres:
    profiles: ["prod"]
    image: postgres:16-alpine
    environment:
      POSTGRES_USER: yuxingu
      POSTGRES_PASSWORD: change-me
      POSTGRES_DB: yuxingu
    # Do not expose 5432 publicly in real prod without network policy.