docker-compose.prod.yml

# this file described a reference production setup of Kleinkram
services:
    base:
        image: kleinkram-base
        build:
            context: .
            dockerfile: docker/base.Dockerfile

    api-server:
        image: rslethz/kleinkram:api-server-latest
        container_name: kleinkram-api-server-prod

        build:
            context: .
            dockerfile: docker/backend.Dockerfile
            target: production
            additional_contexts:
                kleinkram-base: service:base

        ports:
            - 127.0.0.1:${SERVER_PORT}:${SERVER_PORT}

        env_file:
            - .env

        networks:
            - webnet
            - privatenet
        environment:
            SEED: 'false'
            DEVBUILD: 'false'
            REDIS_HOST: redis
            DB_HOST: postgres
            DATA_SOURCE_NAME: postgresql://${DB_USER}:${DB_PASSWORD}@postgres:5432/${DB_DATABASE}?sslmode=disable

        depends_on:
            - postgres
            - redis

    postgres:
        image: postgres:17
        container_name: kleinkram-postgres-prod

        ports:
            - '5432:5432'

        networks:
            - privatenet

        environment:
            POSTGRES_DB: ${DB_DATABASE}
            POSTGRES_USER: ${DB_USER}
            POSTGRES_PASSWORD: ${DB_PASSWORD}

        volumes:
            - postgres_db_data:/var/lib/postgresql/data

    seaweedfs:
        image: chrislusf/seaweedfs:latest
        container_name: kleinkram-seaweedfs-prod

        command: server -dir=/data -s3 -s3.port=9000

        volumes:
            - seaweedfs_data:/data
            - ./docker/seaweedfs-entrypoint.sh:/docker-entrypoint.sh:ro

        environment:
            S3_DATA_BUCKET_NAME: ${S3_DATA_BUCKET_NAME}
            S3_DB_BUCKET_NAME: ${S3_DB_BUCKET_NAME}
            S3_ARTIFACTS_BUCKET_NAME: ${S3_ARTIFACTS_BUCKET_NAME}
            S3_ACCESS_KEY: ${S3_ACCESS_KEY}
            S3_SECRET_KEY: ${S3_SECRET_KEY}

        entrypoint: ['/docker-entrypoint.sh']

        ports:
            - '127.0.0.1:9000:9000' # file storage
            - '127.0.0.1:9333:9333' # management console
        networks:
            - webnet
            - privatenet

    frontend:
        image: rslethz/kleinkram:frontend-latest
        container_name: kleinkram-frontend-prod

        build:
            context: .
            dockerfile: docker/frontend.Dockerfile
            target: production
            args:
                - BACKEND_URL=${BACKEND_URL}
                - GIT_BRANCH=${GIT_BRANCH}
                - GIT_COMMIT=${GIT_COMMIT}
                - VITE_S3_ENDPOINT=${S3_ENDPOINT}
            additional_contexts:
                kleinkram-base: service:base

        ports:
            - '8003:80'

        networks:
            - webnet

    redis:
        image: redis:latest
        container_name: kleinkram-redis-prod
        ports:
            - '6379:6379'
        networks:
            - privatenet

    queue-consumer:
        image: rslethz/kleinkram:queue-consumer-latest
        container_name: kleinkram-queue-consumer-prod
        build:
            context: .
            dockerfile: docker/queue-consumer.Dockerfile
            target: production
            additional_contexts:
                kleinkram-base: service:base
                artifact-uploader: service:artifact-uploader
        ports:
            - '127.0.0.1:8080:8080'
        env_file:
            - .env
        environment:
            DB_HOST: postgres
            DATA_SOURCE_NAME: postgresql://${DB_USER}:${DB_PASSWORD}@postgres:5432/${DB_DATABASE}?sslmode=disable
            REDIS_HOST: redis
            REDIS_PORT: 6379
        networks:
            - privatenet
        depends_on:
            - postgres
            - loki
        volumes:
            # mount docker socket to access docker from within the container
            - /var/run/docker.sock:/var/run/docker.sock
            - ./google-service-account.json:/app/queueConsumer/google-service-account.json:ro
        # Add docker group to allow access to docker socket
        group_add:
            - ${DOCKER_GID:-999}

    prometheus:
        image: prom/prometheus
        container_name: kleinkram-prometheus-prod
        volumes:
            - ./observability/prometheus/prometheus.yml:/etc/prometheus/prometheus.yml
            - logging-prometheus-storage:/prometheus
        command:
            - '--config.file=/etc/prometheus/prometheus.yml'
            - '--storage.tsdb.path=/prometheus'
            - '--web.enable-remote-write-receiver'
            - '--enable-feature=exemplar-storage'
            - '--enable-feature=native-histograms'
        ports:
            - '9090:9090'
        networks:
            - privatenet

    tempo:
        user: '0:0'
        image: grafana/tempo:latest
        container_name: kleinkram-tempo-prod
        command: ['-config.file=/etc/tempo/tempo.yml']
        volumes:
            - ./observability/tempo/tempo.yml:/etc/tempo/tempo.yml
            - logging-tempo-data:/tmp/tempo
        ports:
            - '3200' # tempo
            - '4317' # otlp grpc
            - '4318' # otlp http
        networks:
            - privatenet

    loki:
        image: grafana/loki
        container_name: kleinkram-loki-prod
        ports:
            - '3100:3100'
        command:
            - --config.file=/mnt/config/loki-config.yml
            - -log.level=error
        volumes:
            - ./observability/loki/loki-config.yml:/mnt/config/loki-config.yml:ro
        networks:
            - privatenet

    grafana:
        image: grafana/grafana
        container_name: kleinkram-grafana-prod
        volumes:
            - logging-grafana-storage:/var/lib/grafana
            - ./observability/grafana/provisioning:/etc/grafana/provisioning

        environment:
            - GF_LOG_LEVEL=critical
        ports:
            - '9050:3000' # localhost:9050 for accessing grafana
        networks:
            - privatenet

    documentation:
        image: rslethz/kleinkram:docs-latest
        container_name: kleinkram-documentation-prod
        build:
            context: .
            dockerfile: docker/docs.Dockerfile
            target: production
        ports:
            - '4000:80'

    artifact-uploader:
        image: rslethz/kleinkram:artifact-uploader-latest
        build:
            context: queueConsumer/src/artifactUpload
            dockerfile: Dockerfile

volumes:
    postgres_db_data:
    seaweedfs_data:
    logging-prometheus-storage:
    logging-grafana-storage:
    logging-tempo-data:

networks:
    webnet:
    privatenet: