docker-compose.prod.yml

version: '3.8'

# Production compose — uses pre-built images from GHCR.
# Required .env variables (written by the deploy workflow):
#   IMAGE_BASE  e.g. ghcr.io/your-org/open-wes
#   IMAGE_TAG   git SHA of the deployed commit
#   HOST_IP     server's LAN IP (used by the frontend to reach the gateway)

services:
  frontend:
    container_name: frontend
    image: ${IMAGE_BASE}/frontend:${IMAGE_TAG:-latest}
    ports:
      - "80:80"
    extra_hosts:
      - "api-gateway:${HOST_IP}"
    networks:
      - my-network

  gateway-server:
    container_name: gateway
    image: ${IMAGE_BASE}/gateway:${IMAGE_TAG:-latest}
    ports:
      - "8090:8090"
    volumes:
      - gateway-logs:/app/logs
    depends_on:
      mysql:
        condition: service_healthy
      redis:
        condition: service_healthy
      nacos:
        condition: service_healthy
    networks:
      - my-network

  station-server:
    container_name: station
    image: ${IMAGE_BASE}/station:${IMAGE_TAG:-latest}
    ports:
      - "9040:9040"
    volumes:
      - station-logs:/app/logs
    depends_on:
      mysql:
        condition: service_healthy
      redis:
        condition: service_healthy
      nacos:
        condition: service_healthy
    networks:
      - my-network

  wes-server:
    container_name: wes
    image: ${IMAGE_BASE}/wes:${IMAGE_TAG:-latest}
    ports:
      - "9010:9010"
    volumes:
      - wes-logs:/app/logs
    depends_on:
      mysql:
        condition: service_healthy
      redis:
        condition: service_healthy
      nacos:
        condition: service_healthy
    networks:
      - my-network

  mysql:
    container_name: mysql
    image: mysql:8.0
    environment:
      MYSQL_ROOT_PASSWORD: root
      MYSQL_INNODB_BUFFER_POOL_SIZE: 2G
      MYSQL_INNODB_LOG_FILE_SIZE: 512M
      MYSQL_INNODB_FLUSH_LOG_AT_TRX_COMMIT: 2
      MYSQL_SYNC_BINLOG: 0
      MYSQL_INNODB_FLUSH_METHOD: O_DIRECT
      MYSQL_MAX_CONNECTIONS: 1000
      MYSQL_INNODB_BUFFER_POOL_INSTANCES: 4
    ports:
      - "3306:3306"
    volumes:
      - /data/mysql_data:/var/lib/mysql
      - ./initdb.d:/docker-entrypoint-initdb.d
    healthcheck:
      test: ["CMD", "mysqladmin", "ping", "-h", "localhost"]
      interval: 5s
      timeout: 10s
      retries: 10
      start_period: 30s
    networks:
      my-network:
        aliases:
          - mysql.openwes.com

  redis:
    container_name: redis
    image: redis:7.2
    ports:
      - "6379:6379"
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 5s
      timeout: 10s
      retries: 10
      start_period: 30s
    networks:
      my-network:
        aliases:
          - redis.openwes.com

  nacos:
    container_name: nacos
    image: nacos/nacos-server:2.0.0
    ports:
      - "8848:8848"
      - "9848:9848"
      - "9849:9849"
    environment:
      MODE: standalone
      SPRING_DATASOURCE_PLATFORM: mysql
      MYSQL_SERVICE_HOST: mysql
      MYSQL_SERVICE_DB_NAME: nacos_config
      MYSQL_SERVICE_USER: root
      MYSQL_SERVICE_PASSWORD: root
    depends_on:
      - mysql
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8848/nacos/"]
      interval: 5s
      timeout: 10s
      retries: 10
      start_period: 30s
    networks:
      my-network:
        aliases:
          - nacos.openwes.com

  # --- Monitoring Stack ---
  prometheus:
    container_name: prometheus
    image: prom/prometheus:v2.52.0
    ports:
      - "9090:9090"
    volumes:
      - ./monitoring/prometheus/prometheus.yml:/etc/prometheus/prometheus.yml
      - ./monitoring/prometheus/alert-rules.yml:/etc/prometheus/alert-rules.yml
      - prometheus-data:/prometheus
    command:
      - "--config.file=/etc/prometheus/prometheus.yml"
      - "--storage.tsdb.retention.time=15d"
    mem_limit: 512m
    networks:
      - my-network

  grafana:
    container_name: grafana
    image: grafana/grafana:11.1.0
    ports:
      - "3000:3000"
    environment:
      GF_SECURITY_ADMIN_USER: admin
      GF_SECURITY_ADMIN_PASSWORD: ${GRAFANA_ADMIN_PASSWORD:-admin}
      GF_SECURITY_ALLOW_EMBEDDING: "true"
      GF_AUTH_ANONYMOUS_ENABLED: "true"
      GF_AUTH_ANONYMOUS_ORG_ROLE: Viewer
    volumes:
      - ./monitoring/grafana/provisioning:/etc/grafana/provisioning
      - ./monitoring/grafana/dashboards:/var/lib/grafana/dashboards
      - grafana-data:/var/lib/grafana
    mem_limit: 256m
    depends_on:
      - prometheus
    networks:
      - my-network

  loki:
    container_name: loki
    image: grafana/loki:3.1.0
    ports:
      - "3100:3100"
    volumes:
      - ./monitoring/loki/loki-config.yml:/etc/loki/local-config.yaml
      - loki-data:/loki
    command: -config.file=/etc/loki/local-config.yaml
    mem_limit: 768m
    networks:
      - my-network

  promtail:
    container_name: promtail
    image: grafana/promtail:3.1.0
    volumes:
      - ./monitoring/promtail/promtail-config.yml:/etc/promtail/config.yml
      - wes-logs:/var/log/wes:ro
      - station-logs:/var/log/station:ro
      - gateway-logs:/var/log/gateway:ro
    command: -config.file=/etc/promtail/config.yml
    mem_limit: 128m
    depends_on:
      - loki
    networks:
      - my-network

  alertmanager:
    container_name: alertmanager
    image: prom/alertmanager:v0.27.0
    ports:
      - "9093:9093"
    volumes:
      - ./monitoring/alertmanager/alertmanager.yml:/etc/alertmanager/alertmanager.yml
    mem_limit: 64m
    networks:
      - my-network

  node-exporter:
    container_name: node-exporter
    image: prom/node-exporter:v1.8.1
    ports:
      - "9100:9100"
    mem_limit: 64m
    networks:
      - my-network

  mysql-exporter:
    container_name: mysql-exporter
    image: prom/mysqld-exporter:v0.15.1
    ports:
      - "9104:9104"
    environment:
      DATA_SOURCE_NAME: "root:root@(mysql:3306)/"
    depends_on:
      mysql:
        condition: service_healthy
    mem_limit: 64m
    networks:
      - my-network

  redis-exporter:
    container_name: redis-exporter
    image: oliver006/redis_exporter:v1.61.0
    ports:
      - "9121:9121"
    environment:
      REDIS_ADDR: "redis:6379"
    depends_on:
      redis:
        condition: service_healthy
    mem_limit: 64m
    networks:
      - my-network

  kafka-exporter:
    container_name: kafka-exporter
    image: danielqsj/kafka-exporter:v1.7.0
    ports:
      - "9308:9308"
    command: ["--kafka.server=kafka:9092"]
    mem_limit: 64m
    networks:
      - my-network

volumes:
  wes-logs:
  station-logs:
  gateway-logs:
  prometheus-data:
  grafana-data:
  loki-data:

networks:
  my-network:
    driver: bridge