services:
  # OpenWRT LuCI container — web UI for Playwright E2E tests
  # Uses the pre-imported zt-gateway-luci:dev image (OpenWrt 25.12.4 rootfs
  # with LuCI + zt-gateway application overlay). No docker build needed.
  openwrt-luci:
    image: zt-gateway-luci:dev
    container_name: openwrt-luci
    privileged: true
    cap_add:
      - NET_ADMIN
      - SYS_ADMIN
    ports:
      - "8080:80"
    networks:
      zt-exit-net:
        ipv4_address: "10.99.12.2"
    environment:
      ZTG_SKIP_PERSIST: "1"
      ZTG_PING_IFACE: "br-zt"
      ZTG_WIBLAN_CIDR: "10.99.13.0/24"
    entrypoint: ["/entrypoint.sh"]
    volumes:
      # Overlay fixed application files (rpcd backend, LuCI view, config, menu, acl)
      - ./root/usr/share/rpcd/ucode/zt-gateway.uc:/usr/share/rpcd/ucode/zt-gateway.uc:ro
      - ./root/usr/share/rpcd/ucode/system.uc:/usr/share/rpcd/ucode/system.uc:ro
      - ./root/usr/share/ucode/luci/runtime.uc:/usr/share/ucode/luci/runtime.uc:ro
      - ./root/usr/share/luci/menu.d/luci-app-zt-gateway.json:/usr/share/luci/menu.d/luci-app-zt-gateway.json:ro
      - ./root/usr/share/rpcd/acl.d/luci-app-zt-gateway.json:/usr/share/rpcd/acl.d/luci-app-zt-gateway.json:ro
      # Stage host config so the entrypoint can copy it into the writable overlay.
      - ./root/etc/config:/host-config:ro
      - ./htdocs/luci-static/resources/view/zt-gateway/overview.js:/www/luci-static/resources/view/zt-gateway/overview.js:ro
      - ./docker/openwrt-luci-entrypoint.sh:/entrypoint.sh:ro

  # Arch-based router — CLI routing tests
  openwrt-router:
    build:
      context: .
      dockerfile: Dockerfile.router
    image: zt-gateway-router:dev
    container_name: openwrt-router
    privileged: true
    cap_add:
      - NET_ADMIN
      - SYS_ADMIN
    networks:
      zt-gateway-lan:
        ipv4_address: "10.99.13.1"
      zt-exit-net:
        ipv4_address: "10.99.12.1"
    environment:
      ZTG_SKIP_PERSIST: "1"
      ZTG_PING_IFACE: "br-zt"
      ZTG_WIBLAN_CIDR: "10.99.13.0/24"

  wiblan-client:
    image: archlinux:latest
    container_name: wiblan-client
    networks:
      zt-gateway-lan:
        ipv4_address: "10.99.13.10"
    cap_add:
      - NET_ADMIN
    command: ["sleep", "infinity"]

  zt-gw-amsterdam:
    image: archlinux:latest
    container_name: zt-gw-amsterdam
    privileged: true
    cap_add:
      - NET_ADMIN
    networks:
      zt-exit-net:
        ipv4_address: "10.99.12.3"
    volumes:
      - ./docker/gw-entrypoint.sh:/usr/local/bin/gw-entrypoint.sh:ro
    entrypoint: ["/bin/sh", "/usr/local/bin/gw-entrypoint.sh", "10.99.12.3", "10.99.12.1"]

  zt-gw-tirunelveli:
    image: archlinux:latest
    container_name: zt-gw-tirunelveli
    privileged: true
    cap_add:
      - NET_ADMIN
    networks:
      zt-exit-net:
        ipv4_address: "10.99.12.5"
    volumes:
      - ./docker/gw-entrypoint.sh:/usr/local/bin/gw-entrypoint.sh:ro
    entrypoint: ["/bin/sh", "/usr/local/bin/gw-entrypoint.sh", "10.99.12.5", "10.99.12.1"]

networks:
  zt-gateway-lan:
    driver: bridge
    ipam:
      config:
        - subnet: "10.99.13.0/24"
          gateway: "10.99.13.1"
  zt-exit-net:
    driver: bridge
    ipam:
      config:
        - subnet: "10.99.12.0/24"
          gateway: "10.99.12.1"