ftb-project-management/docker-compose.prod.yml

name: ftb-project-management

services:
  postgres:
    image: postgres:16-alpine
    restart: unless-stopped
    environment:
      POSTGRES_USER: ${POSTGRES_USER:-postgres}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:?Set POSTGRES_PASSWORD in .env.production}
      POSTGRES_DB: ${POSTGRES_DB:-ftb_pm}
    volumes:
      - postgres_data:/var/lib/postgresql/data
    healthcheck:
      test: ['CMD-SHELL', 'pg_isready -U "$${POSTGRES_USER}" -d "$${POSTGRES_DB}"']
      interval: 10s
      timeout: 5s
      retries: 10

  redis:
    image: redis:7-alpine
    restart: unless-stopped
    command: ['redis-server', '--appendonly', 'yes']
    volumes:
      - redis_data:/data
    healthcheck:
      test: ['CMD', 'redis-cli', 'ping']
      interval: 10s
      timeout: 5s
      retries: 10

  server:
    image: ${SERVER_IMAGE:?Set SERVER_IMAGE in .env.production}
    build:
      context: .
      dockerfile: Dockerfile.server
      args:
        APP_VERSION: ${APP_VERSION:-unknown}
        APP_BUILD_TIME: ${APP_BUILD_TIME:-}
        APP_IMAGE_TAG: ${SERVER_IMAGE:-}
    restart: unless-stopped
    environment:
      NODE_ENV: production
      APP_VERSION: ${APP_VERSION:-unknown}
      APP_BUILD_TIME: ${APP_BUILD_TIME:-}
      APP_IMAGE_TAG: ${SERVER_IMAGE:-}
      DATABASE_URL: ${DATABASE_URL:-postgresql://${POSTGRES_USER:-postgres}:${POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB:-ftb_pm}}
      REDIS_URL: ${REDIS_URL:-redis://redis:6379}
      ANTHROPIC_API_KEY: ${ANTHROPIC_API_KEY:-}
      SMTP_HOST: ${SMTP_HOST:-}
      SMTP_PORT: ${SMTP_PORT:-}
      SMTP_USER: ${SMTP_USER:-}
      SMTP_PASS: ${SMTP_PASS:-}
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
    volumes:
      - server_data:/app/apps/server/data
    expose:
      - '3001'
    healthcheck:
      test:
        [
          'CMD-SHELL',
          'node -e "fetch(''http://127.0.0.1:3001/api/v1/health/version'').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"',
        ]
      interval: 15s
      timeout: 5s
      retries: 20
      start_period: 20s

  web:
    image: ${WEB_IMAGE:?Set WEB_IMAGE in .env.production}
    build:
      context: .
      dockerfile: Dockerfile.web
      args:
        NEXT_PUBLIC_API_URL: ${NEXT_PUBLIC_API_URL:-/api/v1}
        NEXT_API_PROXY_TARGET: ${NEXT_API_PROXY_TARGET:-http://server:3001}
        APP_VERSION: ${APP_VERSION:-unknown}
        APP_BUILD_TIME: ${APP_BUILD_TIME:-}
        APP_IMAGE_TAG: ${WEB_IMAGE:-}
    restart: unless-stopped
    environment:
      NODE_ENV: production
      NEXT_PUBLIC_API_URL: ${NEXT_PUBLIC_API_URL:-/api/v1}
      NEXT_API_PROXY_TARGET: ${NEXT_API_PROXY_TARGET:-http://server:3001}
      NEXT_PUBLIC_APP_VERSION: ${APP_VERSION:-unknown}
      NEXT_PUBLIC_APP_BUILD_TIME: ${APP_BUILD_TIME:-}
      NEXT_PUBLIC_APP_IMAGE_TAG: ${WEB_IMAGE:-}
      NEXTAUTH_URL: ${NEXTAUTH_URL:-}
      NEXTAUTH_SECRET: ${NEXTAUTH_SECRET:-}
    depends_on:
      server:
        condition: service_healthy
    expose:
      - '3000'
    healthcheck:
      test:
        [
          'CMD-SHELL',
          'node -e "fetch(''http://127.0.0.1:3000'').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"',
        ]
      interval: 15s
      timeout: 5s
      retries: 20
      start_period: 20s

  nginx:
    image: nginx:1.27-alpine
    restart: unless-stopped
    ports:
      - '${HTTP_PORT:-80}:80'
    environment:
      SERVER_NAME: ${SERVER_NAME:-_}
      CLIENT_MAX_BODY_SIZE: ${CLIENT_MAX_BODY_SIZE:-20m}
    volumes:
      - ./deploy/nginx/default.conf.template:/etc/nginx/templates/default.conf.template:ro
    depends_on:
      web:
        condition: service_healthy
      server:
        condition: service_healthy

  prometheus:
    image: prom/prometheus:v2.53.1
    profiles: ['monitoring']
    restart: unless-stopped
    command:
      - '--config.file=/etc/prometheus/prometheus.yml'
      - '--storage.tsdb.path=/prometheus'
      - '--storage.tsdb.retention.time=${PROMETHEUS_RETENTION:-15d}'
      - '--web.enable-lifecycle'
    ports:
      - '${PROMETHEUS_PORT:-9090}:9090'
    volumes:
      - ./deploy/monitoring/prometheus/prometheus.yml:/etc/prometheus/prometheus.yml:ro
      - ./deploy/monitoring/prometheus/alert-rules.yml:/etc/prometheus/alert-rules.yml:ro
      - prometheus_data:/prometheus
    depends_on:
      - postgres-exporter
      - node-exporter
      - cadvisor
      - promtail
      - blackbox-exporter

  grafana:
    image: grafana/grafana:11.1.0
    profiles: ['monitoring']
    restart: unless-stopped
    ports:
      - '${GRAFANA_PORT:-3002}:3000'
    environment:
      GF_SECURITY_ADMIN_USER: ${GRAFANA_ADMIN_USER:-admin}
      GF_SECURITY_ADMIN_PASSWORD: ${GRAFANA_ADMIN_PASSWORD:-change-me-monitoring-password}
      GF_USERS_ALLOW_SIGN_UP: 'false'
    volumes:
      - grafana_data:/var/lib/grafana
      - ./deploy/monitoring/grafana/provisioning:/etc/grafana/provisioning:ro
      - ./deploy/monitoring/grafana/dashboards:/var/lib/grafana/dashboards:ro
    depends_on:
      - prometheus
      - loki

  loki:
    image: grafana/loki:2.9.8
    profiles: ['monitoring']
    restart: unless-stopped
    command: ['-config.file=/etc/loki/config.yml']
    volumes:
      - ./deploy/monitoring/loki/config.yml:/etc/loki/config.yml:ro
      - loki_data:/loki

  promtail:
    image: grafana/promtail:2.9.8
    profiles: ['monitoring']
    restart: unless-stopped
    command: ['-config.file=/etc/promtail/config.yml']
    volumes:
      - ./deploy/monitoring/promtail/config.yml:/etc/promtail/config.yml:ro
      - /var/lib/docker/containers:/var/lib/docker/containers:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro
    depends_on:
      - loki

  postgres-exporter:
    image: quay.io/prometheuscommunity/postgres-exporter:v0.15.0
    profiles: ['monitoring']
    restart: unless-stopped
    command:
      - '--extend.query-path=/etc/postgres-exporter/postgres-queries.yml'
    environment:
      DATA_SOURCE_NAME: postgresql://${POSTGRES_USER:-postgres}:${POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB:-ftb_pm}?sslmode=disable
    volumes:
      - ./deploy/monitoring/postgres/postgres-queries.yml:/etc/postgres-exporter/postgres-queries.yml:ro
    depends_on:
      postgres:
        condition: service_healthy

  node-exporter:
    image: prom/node-exporter:v1.8.2
    profiles: ['monitoring']
    restart: unless-stopped
    command:
      - '--path.rootfs=/host'
    volumes:
      - /:/host:ro,rslave

  cadvisor:
    image: gcr.io/cadvisor/cadvisor:v0.49.1
    profiles: ['monitoring']
    restart: unless-stopped
    privileged: true
    devices:
      - /dev/kmsg:/dev/kmsg
    volumes:
      - /:/rootfs:ro
      - /var/run:/var/run:ro
      - /sys:/sys:ro
      - /var/lib/docker/:/var/lib/docker:ro
      - /dev/disk/:/dev/disk:ro

  blackbox-exporter:
    image: prom/blackbox-exporter:v0.25.0
    profiles: ['monitoring']
    restart: unless-stopped
    command:
      - '--config.file=/etc/blackbox/config.yml'
    volumes:
      - ./deploy/monitoring/blackbox/config.yml:/etc/blackbox/config.yml:ro

volumes:
  postgres_data:
  redis_data:
  server_data:
  prometheus_data:
  grafana_data:
  loki_data: