#!/usr/bin/env bash
# Create the two shared Docker networks the platform relies on. Idempotent.
#   proxy    — edge network: Traefik <-> per-site web containers.
#   platform — internal network: MariaDB, monitoring. `--internal` = no egress.
# Run once on the host after Phase 1, before bringing up the stacks.
set -euo pipefail

docker network inspect proxy    >/dev/null 2>&1 || docker network create proxy
docker network inspect platform >/dev/null 2>&1 || docker network create --internal platform

echo "Shared networks ready:"
docker network ls --filter name='^proxy$' --filter name='^platform$'