# Disposable tests ONLY. Known test credentials are intentionally not production secrets.
# No published ports: tests run on this isolated network, including in nested Gitea jobs.
services:
  postgres:
    image: postgres:18.0-bookworm
    environment:
      POSTGRES_PASSWORD: disposable-test
    tmpfs: ["/var/lib/postgresql"]
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U postgres"]
      interval: 2s
      timeout: 3s
      retries: 30
  rustfs:
    image: rustfs/rustfs:1.0.0
    environment:
      RUSTFS_ACCESS_KEY: disposable-test
      RUSTFS_SECRET_KEY: disposable-test-secret
      RUSTFS_CONSOLE_ENABLE: "false"
      RUSTFS_OBS_LOG_DIRECTORY: /logs
    command: ["/data"]
    tmpfs:
      - /data:uid=10001,gid=10001
      - /logs:uid=10001,gid=10001
  tests:
    image: python:3.12.12-slim-bookworm
    working_dir: /app
    environment:
      PYTHONPATH: /app/src
      TEST_PGHOST: postgres
      TEST_PGPORT: "5432"
      TEST_PGUSER: postgres
      TEST_PGPASSWORD: disposable-test
      TEST_S3_ENDPOINT_URL: http://rustfs:9000
      TEST_S3_ACCESS_KEY: disposable-test
      TEST_S3_SECRET_KEY: disposable-test-secret
    command:
      - /bin/sh
      - -c
      - >-
        pip install --disable-pip-version-check --require-hashes -r requirements-test.lock &&
        python scripts/wait-test-infrastructure.py &&
        python -m pytest -q