# Isolated candidate ingress. Use only with a modelforge-validation-* Compose project and the
# production overlay after scripts/rc_isolation_preflight.py approves the rendered plan.
# The backend network is project-private; an existing reverse proxy may be attached
# only to the project-scoped ingress network after the stack passes its preflight.
services:
  postgres:
    networks:
      - backend
  redis:
    networks:
      - backend
  migrate:
    networks:
      - backend
  api:
    networks:
      - backend
      - ingress
  web:
    networks:
      - ingress

networks:
  backend:
    internal: true
  ingress: {}