docker-compose.yml

# Solace-AI Docker Compose Configuration
# Local development environment with all infrastructure components
#
# Usage:
#   docker-compose up -d                    # Start all services
#   docker-compose up -d postgres redis     # Start only infrastructure
#   docker-compose logs -f kafka            # View Kafka logs
#   docker-compose down -v                  # Stop and remove volumes
#
# Environment variables should be set in a .env file (see .env.example)

version: '3.8'

services:
  # =============================================================================
  # INFRASTRUCTURE SERVICES
  # =============================================================================

  postgres:
    image: postgres:16-alpine
    container_name: solace-postgres
    environment:
      POSTGRES_DB: ${POSTGRES_DATABASE:-solace}
      POSTGRES_USER: ${POSTGRES_USER:-solace}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-solace_dev_password}
    ports:
      - "${POSTGRES_PORT:-5432}:5432"
    volumes:
      - postgres_data:/var/lib/postgresql/data
      - ./infrastructure/init-db:/docker-entrypoint-initdb.d:ro
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-solace} -d ${POSTGRES_DATABASE:-solace}"]
      interval: 10s
      timeout: 5s
      retries: 5
    restart: unless-stopped
    networks:
      - data

  redis:
    image: redis:7-alpine
    container_name: solace-redis
    command: redis-server --appendonly yes ${REDIS_PASSWORD:+--requirepass ${REDIS_PASSWORD}}
    ports:
      - "${REDIS_PORT:-6379}:6379"
    volumes:
      - redis_data:/data
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 5s
      retries: 5
    restart: unless-stopped
    networks:
      - data

  zookeeper:
    image: confluentinc/cp-zookeeper:7.5.0
    container_name: solace-zookeeper
    environment:
      ZOOKEEPER_CLIENT_PORT: 2181
      ZOOKEEPER_TICK_TIME: 2000
    ports:
      - "2181:2181"
    volumes:
      - zookeeper_data:/var/lib/zookeeper/data
      - zookeeper_logs:/var/lib/zookeeper/log
    healthcheck:
      test: ["CMD", "nc", "-z", "localhost", "2181"]
      interval: 10s
      timeout: 5s
      retries: 5
    restart: unless-stopped
    networks:
      - data

  kafka:
    image: confluentinc/cp-kafka:7.5.0
    container_name: solace-kafka
    depends_on:
      zookeeper:
        condition: service_healthy
    environment:
      KAFKA_BROKER_ID: 1
      KAFKA_ZOOKEEPER_CONNECT: zookeeper:2181
      KAFKA_ADVERTISED_LISTENERS: PLAINTEXT://kafka:9092,PLAINTEXT_HOST://localhost:29092
      KAFKA_LISTENER_SECURITY_PROTOCOL_MAP: PLAINTEXT:PLAINTEXT,PLAINTEXT_HOST:PLAINTEXT
      KAFKA_INTER_BROKER_LISTENER_NAME: PLAINTEXT
      KAFKA_OFFSETS_TOPIC_REPLICATION_FACTOR: 1
      KAFKA_TRANSACTION_STATE_LOG_MIN_ISR: 1
      KAFKA_TRANSACTION_STATE_LOG_REPLICATION_FACTOR: 1
      KAFKA_GROUP_INITIAL_REBALANCE_DELAY_MS: 0
      KAFKA_AUTO_CREATE_TOPICS_ENABLE: "true"
    ports:
      - "29092:29092"
      # 9092 is the internal broker port — only expose to host if external clients need it.
      # Services on solace-network reach Kafka via kafka:9092 without host port mapping.
      # - "9092:9092"
    volumes:
      - kafka_data:/var/lib/kafka/data
    healthcheck:
      test: ["CMD", "kafka-broker-api-versions", "--bootstrap-server", "localhost:9092"]
      interval: 10s
      timeout: 10s
      retries: 5
    restart: unless-stopped
    networks:
      - data

  weaviate:
    image: semitechnologies/weaviate:1.22.4
    container_name: solace-weaviate
    environment:
      QUERY_DEFAULTS_LIMIT: 25
      # SECURITY: Anonymous access disabled. Use API key authentication.
      AUTHENTICATION_ANONYMOUS_ACCESS_ENABLED: "false"
      AUTHENTICATION_APIKEY_ENABLED: "true"
      AUTHENTICATION_APIKEY_ALLOWED_KEYS: "${WEAVIATE_API_KEY:-solace-dev-key-change-in-production}"
      AUTHENTICATION_APIKEY_USERS: "solace-admin"
      PERSISTENCE_DATA_PATH: "/var/lib/weaviate"
      DEFAULT_VECTORIZER_MODULE: "none"
      ENABLE_MODULES: ""
      CLUSTER_HOSTNAME: "node1"
    ports:
      - "${WEAVIATE_PORT:-8080}:8080"
    volumes:
      - weaviate_data:/var/lib/weaviate
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8080/v1/.well-known/ready"]
      interval: 10s
      timeout: 5s
      retries: 5
    restart: unless-stopped
    networks:
      - data

  # =============================================================================
  # OBSERVABILITY STACK
  # =============================================================================

  jaeger:
    image: jaegertracing/all-in-one:1.51
    container_name: solace-jaeger
    environment:
      COLLECTOR_OTLP_ENABLED: "true"
    ports:
      - "16686:16686"   # Jaeger UI
      - "4317:4317"     # OTLP gRPC
      - "4318:4318"     # OTLP HTTP
      - "6831:6831/udp" # Thrift compact
    restart: unless-stopped
    networks:
      - monitoring

  prometheus:
    image: prom/prometheus:v2.47.0
    container_name: solace-prometheus
    command:
      - '--config.file=/etc/prometheus/prometheus.yml'
      - '--storage.tsdb.path=/prometheus'
      - '--web.enable-lifecycle'
    ports:
      - "9090:9090"
    volumes:
      - ./infrastructure/prometheus/prometheus.yml:/etc/prometheus/prometheus.yml:ro
      - prometheus_data:/prometheus
    restart: unless-stopped
    networks:
      - monitoring

  grafana:
    image: grafana/grafana:10.1.0
    container_name: solace-grafana
    environment:
      # SECURITY: Change default admin credentials in production via GRAFANA_USER / GRAFANA_PASSWORD env vars.
      GF_SECURITY_ADMIN_USER: ${GRAFANA_USER:-admin}
      GF_SECURITY_ADMIN_PASSWORD: ${GRAFANA_PASSWORD:-admin}
      GF_USERS_ALLOW_SIGN_UP: "false"
    ports:
      - "3000:3000"
    volumes:
      - grafana_data:/var/lib/grafana
      - ./infrastructure/grafana/provisioning:/etc/grafana/provisioning:ro
    depends_on:
      - prometheus
    restart: unless-stopped
    networks:
      - monitoring

  # =============================================================================
  # APPLICATION SERVICES
  # =============================================================================

  user-service:
    build:
      context: ./services/user-service
      dockerfile: Dockerfile
    container_name: solace-user-service
    environment:
      USER_SERVICE_ENV: development
      USER_SERVICE_PORT: 8001
      USER_SERVICE_JWT_SECRET_KEY: ${JWT_SECRET_KEY:-dev-jwt-secret-key-minimum-32-chars}
      USER_SERVICE_FIELD_ENCRYPTION_KEY: ${FIELD_ENCRYPTION_KEY:-dev-encryption-key-32-characters}
      AUTH_SECRET_KEY: ${JWT_SECRET_KEY:-dev-jwt-secret-key-minimum-32-chars}
      FERNET_TOKEN_KEY: "${FERNET_TOKEN_KEY:-8kTaL3nRf9xQpZmVwYdE7gHjKbNcSuW2A5iO0tP4rXs=}"
      FERNET_FIELD_KEY: "${FERNET_FIELD_KEY:-3mBvN7xRtYfW0pLqKjH8dS5gC2eA9iZuO6wTrXnMaQs=}"
      USER_DB_HOST: postgres
      USER_DB_PORT: 5432
      USER_DB_NAME: solace
      USER_DB_USER: ${POSTGRES_USER:-solace}
      USER_DB_PASSWORD: ${POSTGRES_PASSWORD:-solace_dev_password}
      USER_REDIS_HOST: redis
      USER_REDIS_PORT: 6379
      USER_KAFKA_BOOTSTRAP_SERVERS: kafka:9092
      SECURITY_JWT_SECRET: ${JWT_SECRET_KEY:-dev-jwt-secret-key-minimum-32-chars}
    ports:
      - "8001:8001"
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8001/health"]
      interval: 30s
      timeout: 10s
      retries: 3
    restart: unless-stopped
    networks:
      - backend
      - data

  safety-service:
    build:
      context: ./services/safety_service
      dockerfile: Dockerfile
    container_name: solace-safety-service
    environment:
      SAFETY_ENVIRONMENT: development
      SAFETY_PORT: 8002
      ESCALATION_NOTIFICATION_SERVICE_URL: http://notification-service:8003
      SAFETY_REPO_STORAGE_BACKEND: postgres
      SAFETY_REPO_POSTGRES_DSN: postgresql+asyncpg://${POSTGRES_USER:-solace}:${POSTGRES_PASSWORD:-solace_dev_password}@postgres:5432/solace
      SAFETY_REPO_REDIS_URL: redis://redis:6379/0
      SAFETY_EVENTS_KAFKA_BOOTSTRAP_SERVERS: kafka:9092
      AUTH_SECRET_KEY: ${JWT_SECRET_KEY:-dev-jwt-secret-key-minimum-32-chars}
    ports:
      - "8002:8002"
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
      kafka:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8002/health"]
      interval: 30s
      timeout: 10s
      retries: 3
    restart: unless-stopped
    networks:
      - backend
      - data

  notification-service:
    build:
      context: ./services/notification-service
      dockerfile: Dockerfile
    container_name: solace-notification-service
    environment:
      NOTIFICATION_SERVICE_ENV: development
      NOTIFICATION_SERVICE_PORT: 8003
      EMAIL_ENABLED: "true"
      EMAIL_SMTP_HOST: ${SMTP_HOST:-mailhog}
      EMAIL_SMTP_PORT: ${SMTP_PORT:-1025}
      SMS_ENABLED: "false"
      PUSH_ENABLED: "false"
      AUTH_SECRET_KEY: ${JWT_SECRET_KEY:-dev-jwt-secret-key-minimum-32-chars}
    ports:
      - "8003:8003"
    depends_on:
      - mailhog
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8003/health"]
      interval: 30s
      timeout: 10s
      retries: 3
    restart: unless-stopped
    networks:
      - backend
      - data

  diagnosis-service:
    build:
      context: ./services/diagnosis_service
      dockerfile: Dockerfile
    container_name: solace-diagnosis-service
    environment:
      DIAGNOSIS_ENVIRONMENT: development
      DIAGNOSIS_PORT: 8004
      DIAGNOSIS_DB_HOST: postgres
      DIAGNOSIS_DB_PORT: 5432
      DIAGNOSIS_DB_NAME: solace
      DIAGNOSIS_DB_USER: ${POSTGRES_USER:-solace}
      DIAGNOSIS_DB_PASSWORD: ${POSTGRES_PASSWORD:-solace_dev_password}
      DIAGNOSIS_REDIS_HOST: redis
      DIAGNOSIS_REDIS_PORT: 6379
      AUTH_SECRET_KEY: ${JWT_SECRET_KEY:-dev-jwt-secret-key-minimum-32-chars}
    ports:
      - "8004:8004"
    depends_on:
      postgres:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8004/health"]
      interval: 30s
      timeout: 10s
      retries: 3
    restart: unless-stopped
    networks:
      - backend
      - data

  memory-service:
    build:
      context: ./services/memory_service
      dockerfile: Dockerfile
    container_name: solace-memory-service
    environment:
      MEMORY_SERVICE_ENV: development
      MEMORY_SERVICE_PORT: 8005
      MEMORY_DB_HOST: postgres
      MEMORY_DB_PORT: 5432
      MEMORY_DB_DATABASE: solace
      MEMORY_DB_USER: ${POSTGRES_USER:-solace}
      MEMORY_DB_PASSWORD: ${POSTGRES_PASSWORD:-solace_dev_password}
      MEMORY_REDIS_HOST: redis
      MEMORY_REDIS_PORT: 6379
      WEAVIATE_HOST: weaviate
      WEAVIATE_PORT: 8080
      MEMORY_KAFKA_BOOTSTRAP_SERVERS: kafka:9092
      AUTH_SECRET_KEY: ${JWT_SECRET_KEY:-dev-jwt-secret-key-minimum-32-chars}
    ports:
      - "8005:8005"
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
      weaviate:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8005/health"]
      interval: 30s
      timeout: 10s
      retries: 3
    restart: unless-stopped
    networks:
      - backend
      - data

  therapy-service:
    build:
      context: ./services/therapy_service
      dockerfile: Dockerfile
    container_name: solace-therapy-service
    environment:
      THERAPY_ENVIRONMENT: development
      THERAPY_PORT: 8006
      THERAPY_DB_HOST: postgres
      THERAPY_DB_PORT: 5432
      THERAPY_DB_DATABASE: solace
      THERAPY_DB_USER: ${POSTGRES_USER:-solace}
      THERAPY_DB_PASSWORD: ${POSTGRES_PASSWORD:-solace_dev_password}
      THERAPY_REDIS_HOST: redis
      THERAPY_REDIS_PORT: 6379
      AUTH_SECRET_KEY: ${JWT_SECRET_KEY:-dev-jwt-secret-key-minimum-32-chars}
    ports:
      - "8006:8006"
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8006/health"]
      interval: 30s
      timeout: 10s
      retries: 3
    restart: unless-stopped
    networks:
      - backend
      - data

  personality-service:
    build:
      context: ./services/personality_service
      dockerfile: Dockerfile
    container_name: solace-personality-service
    environment:
      PERSONALITY_ENVIRONMENT: development
      PERSONALITY_PORT: 8007
      PERSONALITY_DB_HOST: postgres
      PERSONALITY_DB_PORT: 5432
      PERSONALITY_DB_NAME: solace
      PERSONALITY_DB_USER: ${POSTGRES_USER:-solace}
      PERSONALITY_DB_PASSWORD: ${POSTGRES_PASSWORD:-solace_dev_password}
      PERSONALITY_REDIS_HOST: redis
      PERSONALITY_REDIS_PORT: 6379
      AUTH_SECRET_KEY: ${JWT_SECRET_KEY:-dev-jwt-secret-key-minimum-32-chars}
    ports:
      - "8007:8007"
    depends_on:
      postgres:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8007/health"]
      interval: 30s
      timeout: 10s
      retries: 3
    restart: unless-stopped
    networks:
      - backend
      - data

  orchestrator-service:
    build:
      context: ./services/orchestrator_service
      dockerfile: Dockerfile
    container_name: solace-orchestrator-service
    environment:
      ORCHESTRATOR_ENVIRONMENT: development
      ORCHESTRATOR_PORT: 8000
      SERVICE_SAFETY_SERVICE_URL: http://safety-service:8002
      SERVICE_PERSONALITY_SERVICE_URL: http://personality-service:8007
      SERVICE_DIAGNOSIS_SERVICE_URL: http://diagnosis-service:8004
      SERVICE_THERAPY_SERVICE_URL: http://therapy-service:8006
      SERVICE_MEMORY_SERVICE_URL: http://memory-service:8005
      SERVICE_USER_SERVICE_URL: http://user-service:8001
      SERVICE_NOTIFICATION_SERVICE_URL: http://notification-service:8003
      AUTH_SECRET_KEY: ${JWT_SECRET_KEY:-dev-jwt-secret-key-minimum-32-chars}
    ports:
      - "8000:8000"
    depends_on:
      - safety-service
      - memory-service
      - therapy-service
      - diagnosis-service
      - personality-service
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8000/health"]
      interval: 30s
      timeout: 10s
      retries: 3
    restart: unless-stopped
    networks:
      - backend
      - frontend

  analytics-service:
    build:
      context: ./services/analytics-service
      dockerfile: Dockerfile
    container_name: solace-analytics-service
    environment:
      ANALYTICS_SERVICE_ENV: development
      ANALYTICS_SERVICE_PORT: 8009
      CONSUMER_KAFKA_ENABLED: "true"
      CONSUMER_KAFKA_BOOTSTRAP_SERVERS: kafka:9092
      AUTH_SECRET_KEY: ${JWT_SECRET_KEY:-dev-jwt-secret-key-minimum-32-chars}
    ports:
      - "8009:8009"
    depends_on:
      kafka:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8009/health"]
      interval: 30s
      timeout: 10s
      retries: 3
    restart: unless-stopped
    networks:
      - backend
      - data

  config-service:
    build:
      context: ./services/config_service
      dockerfile: Dockerfile
    container_name: solace-config-service
    environment:
      CONFIG_ENVIRONMENT: development
      CONFIG_PORT: 8008
      CONFIG_REDIS_URL: redis://redis:6379/0
      AUTH_SECRET_KEY: ${JWT_SECRET_KEY:-dev-jwt-secret-key-minimum-32-chars}
    ports:
      - "8008:8008"
    depends_on:
      redis:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8008/health"]
      interval: 30s
      timeout: 10s
      retries: 3
    restart: unless-stopped
    networks:
      - backend
      - data

  # =============================================================================
  # DEVELOPMENT TOOLS
  # =============================================================================

  mailhog:
    image: mailhog/mailhog:v1.0.1
    container_name: solace-mailhog
    ports:
      - "1025:1025"   # SMTP
      - "8025:8025"   # Web UI
    restart: unless-stopped
    networks:
      - backend

  # Kafka UI for development
  kafka-ui:
    image: provectuslabs/kafka-ui:latest
    container_name: solace-kafka-ui
    environment:
      KAFKA_CLUSTERS_0_NAME: solace-local
      KAFKA_CLUSTERS_0_BOOTSTRAPSERVERS: kafka:9092
      KAFKA_CLUSTERS_0_ZOOKEEPER: zookeeper:2181
    ports:
      - "8081:8080"
    depends_on:
      kafka:
        condition: service_healthy
    restart: unless-stopped
    networks:
      - data

# =============================================================================
# VOLUMES
# =============================================================================

volumes:
  postgres_data:
    driver: local
  redis_data:
    driver: local
  kafka_data:
    driver: local
  zookeeper_data:
    driver: local
  zookeeper_logs:
    driver: local
  weaviate_data:
    driver: local
  prometheus_data:
    driver: local
  grafana_data:
    driver: local

# =============================================================================
# NETWORKS
# =============================================================================

networks:
  frontend:
    driver: bridge
  backend:
    driver: bridge
  data:
    driver: bridge
  monitoring:
    driver: bridge