docker-compose.yml

# This file describes the local dev environment for Kleinkram
# It is intended to be run using docker compose up --build --watch
services:
    base:
        image: kleinkram-base
        build:
            context: .
            dockerfile: docker/base.Dockerfile
            args:
                USER_ID: ${USER_ID:-1000}
                GROUP_ID: ${GROUP_ID:-1000}

    api-server:
        container_name: kleinkram-api-server

        build:
            context: .
            dockerfile: docker/backend.Dockerfile
            target: development
            args:
                USER_ID: ${USER_ID:-1000}
                GROUP_ID: ${GROUP_ID:-1000}
            additional_contexts:
                kleinkram-base: service:base

        develop:
            watch:
                - action: sync
                  path: ./packages
                  target: /app/packages
                  ignore:
                      - node_modules/
                      - dist/
                - action: sync
                  path: ./backend
                  target: /app/backend
                  ignore:
                      - node_modules/
                      - dist/
                      - tests/
                # Backend config files
                - action: rebuild
                  path: ./backend/package.json
                - action: rebuild
                  path: ./backend/tsconfig.json
                - action: rebuild
                  path: ./backend/tsconfig.build.json
                - action: rebuild
                  path: ./backend/nest-cli.json
                - action: rebuild
                  path: ./backend/webpack.config.js
                # Shared packages config files
                - action: rebuild
                  path: ./packages/shared/package.json
                - action: rebuild
                  path: ./packages/shared/tsconfig.json
                - action: rebuild
                  path: ./packages/backend-common/package.json
                - action: rebuild
                  path: ./packages/backend-common/tsconfig.json
                - action: rebuild
                  path: ./packages/api-dto/package.json
                - action: rebuild
                  path: ./packages/api-dto/tsconfig.json
                - action: rebuild
                  path: ./packages/validation/package.json
                - action: rebuild
                  path: ./packages/validation/tsconfig.json
                # Root lockfile
                - action: rebuild
                  path: ./pnpm-lock.yaml

        ports:
            - 127.0.0.1:${SERVER_PORT}:${SERVER_PORT}

        env_file:
            - .env

        networks:
            - public-network
            - private-network

        environment:
            DEVBUILD: 'true'
            S3_ENDPOINT_INTERNAL: 'seaweedfs'
            REDIS_HOST: redis

        depends_on:
            database:
                condition: service_started
            seaweedfs:
                condition: service_healthy
            redis:
                condition: service_started
            base:
                condition: service_started

        volumes:
            - ./backend:/app/backend
            - backend_node_modules:/app/backend/node_modules
            - ./packages:/app/packages
            - ./cli:/app/cli
            - ./cli/tests/generate_test_data.py:/app/common/cli/tests/generate_test_data.py
            # Mask host node_modules with anonymous volumes to avoid broken symlinks
            - /app/packages/api-dto/node_modules
            - /app/packages/backend-common/node_modules
            - /app/packages/shared/node_modules
            - /app/packages/validation/node_modules
            - ./docs:/app/docs

    database:
        image: postgres:17

        container_name: kleinkram-postgres

        command: postgres -c log_min_messages=ERROR -c log_min_error_statement=ERROR

        ports:
            - '5432:5432'

        networks:
            - private-network

        environment:
            POSTGRES_DB: ${DB_DATABASE}
            POSTGRES_USER: ${DB_USER}
            POSTGRES_PASSWORD: ${DB_PASSWORD}

        volumes:
            - db_data:/var/lib/postgresql/data

    seaweedfs:
        image: chrislusf/seaweedfs:latest

        container_name: kleinkram-seaweedfs

        command: server -dir=/data -s3 -s3.port=9000

        volumes:
            - seaweedfs_data:/data
            - ./docker/seaweedfs-entrypoint.sh:/docker-entrypoint.sh:ro

        environment:
            S3_DATA_BUCKET_NAME: ${S3_DATA_BUCKET_NAME}
            S3_DB_BUCKET_NAME: ${S3_DB_BUCKET_NAME}
            S3_ARTIFACTS_BUCKET_NAME: ${S3_ARTIFACTS_BUCKET_NAME}
            S3_ACCESS_KEY: ${S3_ACCESS_KEY}
            S3_SECRET_KEY: ${S3_SECRET_KEY}

        entrypoint: ['/docker-entrypoint.sh']

        ports:
            - '127.0.0.1:9000:9000'
            - '127.0.0.1:9333:9333'

        healthcheck:
            test: ['CMD', 'curl', '-f', 'http://localhost:9333/cluster/status']
            interval: 30s
            timeout: 20s
            retries: 3

        networks:
            - public-network
            - private-network

    frontend:
        container_name: kleinkram-frontend

        build:
            context: .
            dockerfile: docker/frontend.Dockerfile
            target: development
            args:
                - BACKEND_URL=${BACKEND_URL}
                - USER_ID=${USER_ID:-1000}
                - GROUP_ID=${GROUP_ID:-1000}
            additional_contexts:
                kleinkram-base: service:base

        ports:
            - '8003:8003'

        volumes:
            - ./frontend:/app/frontend
            - ./.git:/app/.git:ro
            - frontend_node_modules:/app/frontend/node_modules
            - ./packages:/app/packages

        env_file:
            - .env

        environment:
            BACKEND_URL: ${BACKEND_URL}

        develop:
            watch:
                - action: sync
                  path: ./frontend
                  target: /app/frontend
                  ignore:
                      - node_modules/
                      - dist/
                - action: sync
                  path: ./packages
                  target: /app/packages
                  ignore:
                      - node_modules/
                      - dist/
                - action: rebuild
                  path: ./frontend/package.json
                - action: rebuild
                  path: ./frontend/pnpm-lock.yaml
                - action: rebuild
                  path: ./frontend/tsconfig.json
                - action: rebuild
                  path: ./frontend/quasar.config.ts
                # Shared packages config files
                - action: rebuild
                  path: ./packages/shared/package.json
                - action: rebuild
                  path: ./packages/shared/tsconfig.json
                - action: rebuild
                  path: ./packages/backend-common/package.json
                - action: rebuild
                  path: ./packages/backend-common/tsconfig.json
                - action: rebuild
                  path: ./packages/api-dto/package.json
                - action: rebuild
                  path: ./packages/api-dto/tsconfig.json
                - action: rebuild
                  path: ./packages/validation/package.json
                - action: rebuild
                  path: ./packages/validation/tsconfig.json
                # Root lockfile
                - action: rebuild
                  path: ./pnpm-lock.yaml

        depends_on:
            - seaweedfs

        networks:
            - public-network

    redis:
        image: redis:latest

        container_name: kleinkram-redis

        command: redis-server --loglevel warning

        ports:
            - '6379:6379'

        networks:
            - private-network

    queue-consumer:
        container_name: kleinkram-queue-consumer

        build:
            context: .
            dockerfile: docker/queue-consumer.Dockerfile
            target: development
            args:
                USER_ID: ${USER_ID:-1000}
                GROUP_ID: ${GROUP_ID:-1000}
            additional_contexts:
                kleinkram-base: service:base
                artifact-uploader: service:artifact-uploader

        volumes:
            - ./queueConsumer:/app/queueConsumer
            - queue_consumer_node_modules:/app/queueConsumer/node_modules
            - ./packages:/app/packages
            # mount docker socket to access docker from within the container
            - /var/run/docker.sock:/var/run/docker.sock
            - ./google-service-account.json:/app/queueConsumer/google-service-account.json:ro
            # Mask host node_modules with anonymous volumes to avoid broken symlinks
            - /app/packages/api-dto/node_modules
            - /app/packages/backend-common/node_modules
            - /app/packages/shared/node_modules
            - /app/packages/validation/node_modules

        # Add docker group to allow access to docker socket
        group_add:
            - ${DOCKER_GID:-999}

        develop:
            watch:
                - action: sync
                  path: ./queueConsumer
                  target: /app/queueConsumer
                  ignore:
                      - node_modules/
                      - dist/
                - action: sync
                  path: ./packages
                  target: /app/packages
                  ignore:
                      - node_modules/
                      - dist/
                # QueueConsumer config files
                - action: rebuild
                  path: ./queueConsumer/package.json
                - action: rebuild
                  path: ./queueConsumer/tsconfig.json
                - action: rebuild
                  path: ./queueConsumer/tsconfig.build.json
                - action: rebuild
                  path: ./queueConsumer/nest-cli.json
                - action: rebuild
                  path: ./queueConsumer/webpack.config.js
                # Shared packages config files
                - action: rebuild
                  path: ./packages/shared/package.json
                - action: rebuild
                  path: ./packages/shared/tsconfig.json
                - action: rebuild
                  path: ./packages/backend-common/package.json
                - action: rebuild
                  path: ./packages/backend-common/tsconfig.json
                - action: rebuild
                  path: ./packages/api-dto/package.json
                - action: rebuild
                  path: ./packages/api-dto/tsconfig.json
                - action: rebuild
                  path: ./packages/validation/package.json
                - action: rebuild
                  path: ./packages/validation/tsconfig.json
                # Root lockfile
                - action: rebuild
                  path: ./pnpm-lock.yaml

        env_file:
            - .env

        environment:
            REDIS_HOST: redis

        networks:
            - private-network

        depends_on:
            - database
            - redis
            - base

    prometheus:
        image: prom/prometheus
        container_name: kleinkram-prometheus
        volumes:
            - ./observability/prometheus/prometheus.yml:/etc/prometheus/prometheus.yml
            - logging-prometheus-storage:/prometheus
        command:
            - '--config.file=/etc/prometheus/prometheus.yml'
            - '--storage.tsdb.path=/prometheus'
            - '--web.enable-remote-write-receiver'
            - '--enable-feature=exemplar-storage'
            - '--enable-feature=native-histograms'
            - '--log.level=error'
        ports:
            - '9099:9090'
        networks:
            - private-network
            - public-network

    tempo:
        user: '0:0'
        image: grafana/tempo:latest
        container_name: kleinkram-tempo
        command: ['-config.file=/etc/tempo/tempo.yml']
        volumes:
            - ./observability/tempo/tempo.yml:/etc/tempo/tempo.yml
            - logging-tempo-data:/tmp/tempo
        ports:
            - '3200:3200' # tempo
            - '4317' # otlp grpc
            - '4318' # otlp http
        networks:
            - private-network
            - public-network

    loki:
        image: grafana/loki
        container_name: kleinkram-loki
        ports:
            - '3100:3100'
        command:
            - --config.file=/mnt/config/loki-config.yml
            - -log.level=error
        volumes:
            - ./observability/loki/loki-config.yml:/mnt/config/loki-config.yml:ro
        networks:
            - private-network
            - public-network

    grafana:
        image: grafana/grafana
        container_name: kleinkram-grafana
        volumes:
            - logging-grafana-storage:/var/lib/grafana
            - ./observability/grafana/provisioning:/etc/grafana/provisioning
            - ./observability/grafana/dashboards:/etc/dashboards

        environment:
            # since this is a local dev environment, we disable login form and enable anonymous access
            - GF_AUTH_ANONYMOUS_ENABLED=true
            - GF_AUTH_ANONYMOUS_ORG_ROLE=Admin
            - GF_AUTH_DISABLE_LOGIN_FORM=true
            # to keep our logs clean, we only log critical messages
            - GF_LOG_LEVEL=critical
        ports:
            - '9050:3000' # localhost:9050 for accessing grafana
        networks:
            - private-network
            - public-network

    docs:
        container_name: kleinkram-docs
        depends_on:
            - api-server
        build:
            context: .
            dockerfile: docker/docs.Dockerfile
            target: development
        environment:
            DEVBUILD: 'true'
        ports:
            - '4000:4000'
        volumes:
            - ./docs:/app/docs
            - vitepress_dist:/app/docs/.vitepress/dist
            - node_modules:/app/docs/node_modules
            - ./backend/docs:/app/docs/docs/
            - ./tsconfig.base.json:/app/tsconfig.base.json
            - ./packages:/app/packages

        command: sh -c "ln -sf /app/docs/scripts /app/scripts && npm run docs:dev /app/docs"

    artifact-uploader:
        container_name: kleinkram-artifact-uploader
        image: rslethz/kleinkram:artifact-uploader-latest
        build:
            context: queueConsumer/src/artifactUpload
            dockerfile: Dockerfile
        environment:
            KLEINKRAM_ACTION_UUID: 'dev-action-uuid'

    postgres-exporter:
        image: prometheuscommunity/postgres-exporter
        container_name: kleinkram-postgres-exporter
        ports:
            - '9187:9187'
        env_file:
            - .env
        links:
            - database
            - prometheus
        networks:
            - private-network

    fake-oauth:
        build: dev-oauth
        ports:
            - '8004:5000'
        networks:
            - private-network
            - public-network
volumes:
    db_data:
    seaweedfs_data:
    logging-prometheus-storage:
    logging-grafana-storage:
    logging-tempo-data:
    vitepress_dist:
    node_modules:
    backend_node_modules:
    frontend_node_modules:
    queue_consumer_node_modules:

networks:
    public-network:
    private-network: