all these changes

docker-compose.yml

@@ -1,25 +1,11 @@
-version: '3.8'
-
-networks:
-  proxy:
-    external: true
-  turftracker:
-    driver: bridge
-
 services:
   frontend:
+    image: turftracking-frontend:${RELEASE_VERSION:-1.26.1}
     build:
       context: ./frontend
       dockerfile: Dockerfile
-    environment:
-      - REACT_APP_API_URL=https://turftracker.kaspers.us/api
-      - CHOKIDAR_USEPOLLING=true
-      - WATCHPACK_POLLING=true
-      - WDS_SOCKET_PORT=443
-      - DANGEROUSLY_DISABLE_HOST_CHECK=true
-    volumes:
-      - ./frontend:/app
-      - /app/node_modules
+      args:
+        VITE_API_URL: /api
     depends_on:
       - backend
     networks:
@@ -30,17 +16,20 @@ services:
       - "traefik.http.routers.turftracker-frontend.rule=Host(`turftracker.kaspers.us`)"
       - "traefik.http.routers.turftracker-frontend.entrypoints=websecure"
       - "traefik.http.routers.turftracker-frontend.tls.certresolver=letsencrypt"
-      - "traefik.http.services.turftracker-frontend.loadbalancer.server.port=3000"
+      - "traefik.http.services.turftracker-frontend.loadbalancer.server.port=80"
       - "traefik.docker.network=proxy"
       - "traefik.constraint=proxy-public"
     restart: unless-stopped
 
   backend:
+    image: turftracking-backend:${RELEASE_VERSION:-1.26.1}
     build:
       context: ./backend
       dockerfile: Dockerfile
+      args:
+        NODE_ENV: production
     environment:
-      - NODE_ENV=development
+      - NODE_ENV=production
       - DB_HOST=db
       - DB_PORT=5432
       - DB_NAME=${DB_NAME:-turftracker}
@@ -52,10 +41,14 @@ services:
       - AUTHENTIK_BASE_URL=${AUTHENTIK_BASE_URL:-}
       - AUTHENTIK_CALLBACK_URL=${AUTHENTIK_CALLBACK_URL:-https://turftracker.kaspers.us/api/auth/authentik/callback}
       - WEATHER_API_KEY=${WEATHER_API_KEY:-}
+      - GMAIL_OAUTH_USER=${GMAIL_OAUTH_USER:-}
+      - GMAIL_OAUTH_CLIENT_ID=${GMAIL_OAUTH_CLIENT_ID:-}
+      - GMAIL_OAUTH_CLIENT_SECRET=${GMAIL_OAUTH_CLIENT_SECRET:-}
+      - GMAIL_OAUTH_REFRESH_TOKEN=${GMAIL_OAUTH_REFRESH_TOKEN:-}
+      - GMAIL_OAUTH_REDIRECT_URI=${GMAIL_OAUTH_REDIRECT_URI:-https://developers.google.com/oauthplayground}
+      - EMAIL_FROM_NAME=${EMAIL_FROM_NAME:-TurfTracking}
+      - EMAIL_FROM_ADDRESS=${EMAIL_FROM_ADDRESS:-}
       - FRONTEND_URL=https://turftracker.kaspers.us
-    volumes:
-      - ./backend:/app
-      - /app/node_modules
     depends_on:
       db:
         condition: service_healthy
@@ -79,7 +72,6 @@ services:
       - POSTGRES_DB=${DB_NAME:-turftracker}
     volumes:
       - postgres_data:/var/lib/postgresql/data
-      - ./database/init.sql:/docker-entrypoint-initdb.d/init.sql
     healthcheck:
       test: ["CMD-SHELL", "pg_isready -U ${DB_USER:-turftracker} -d ${DB_NAME:-turftracker} -h 127.0.0.1 -p 5432"]
       interval: 5s
@@ -88,17 +80,16 @@ services:
     networks:
       - turftracker
     restart: unless-stopped
-    # Database should not be exposed to proxy network for security
 
   flyway:
     image: flyway/flyway:9
     depends_on:
-      - db
+      db:
+        condition: service_healthy
     environment:
       - FLYWAY_URL=jdbc:postgresql://db:5432/${DB_NAME:-turftracker}
       - FLYWAY_USER=${DB_USER:-turftracker}
       - FLYWAY_PASSWORD=${DB_PASSWORD:-password123}
-      # Uncomment if you need to baseline an existing DB without schema history
       - FLYWAY_BASELINE_ON_MIGRATE=true
       - FLYWAY_LOCATIONS=filesystem:/migrations
     command: migrate
@@ -106,7 +97,14 @@ services:
       - ./database/migrations:/migrations:ro
     networks:
       - turftracker
-    # Not started automatically; run with: docker compose run --rm flyway migrate
+    profiles:
+      - migrate
+
+networks:
+  proxy:
+    external: true
+  turftracker:
+    driver: bridge
 
 volumes:
   postgres_data: