services:
  db:
    volumes:
      - test_db_data:/var/lib/mysql

  wordpress:
    volumes:
      - test_wordpress_data:/var/www/html

  wp-cli:
    environment:
      WP_URL: http://azionelab.org
      WP_ADMIN_USER: test-admin
      WP_ADMIN_PASSWORD: test-only-password-not-for-production
      WP_ADMIN_EMAIL: test@example.org
    volumes:
      - test_wordpress_data:/var/www/html
      - ./wp-cli/bootstrap.sh:/scripts/bootstrap.sh:ro

  proxy:
    networks:
      web:
        aliases:
          - azionelab.org

  functional-tests:
    build:
      context: ./tests/functional
    init: true
    environment:
      BASE_URL: http://azionelab.org
      INVALID_HOST_URL: http://proxy
      CI: "true"
    depends_on:
      proxy:
        condition: service_healthy
    profiles: ["test"]
    networks:
      - web
    shm_size: 1gb
    security_opt:
      - no-new-privileges:true
    pids_limit: 200

  security-tests:
    image: wordpress:cli-2.12.0-php8.3
    init: true
    user: "33:33"
    command: ["/bin/sh", "/workspace/tests/security/check-compose.sh"]
    working_dir: /workspace
    volumes:
      - .:/workspace:ro
    profiles: ["test"]
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    pids_limit: 50

volumes:
  test_db_data:
  test_wordpress_data: