docker-compose.yml

services:
# Development container for building C++ code
  dev-container:
    build:
      context: .
      dockerfile: Dockerfile.dev
    container_name: config-dev
    volumes:
      - .:/workspace
    working_dir: /workspace
    networks:
      - config-network
    depends_on:
      - postgres
      - redis
      - kafka
      - statsd-exporter
    stdin_open: true
    tty: true
    command: tail -f /dev/null

  # ─── Application Services ───────────────────────────────────────────

  api-service:
    build:
      context: .
      dockerfile: docker/services/api-service.Dockerfile
    container_name: config-api-service
    ports:
      - "8081:8081"
    volumes:
      - ./config:/app/config
    networks:
      - config-network
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
      kafka:
        condition: service_healthy
      statsd-exporter:
        condition: service_healthy
    restart: unless-stopped

  distribution-service:
    build:
      context: .
      dockerfile: docker/services/distribution-service.Dockerfile
    container_name: config-distribution-service
    ports:
      - "8082:8082"
    volumes:
      - ./config:/app/config
    networks:
      - config-network
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
      kafka:
        condition: service_healthy
      statsd-exporter:
        condition: service_healthy
    restart: unless-stopped

  validation-service:
    build:
      context: .
      dockerfile: docker/services/validation-service.Dockerfile
    container_name: config-validation-service
    ports:
      - "8083:8083"
    volumes:
      - ./config:/app/config
    networks:
      - config-network
    depends_on:
      redis:
        condition: service_healthy
      statsd-exporter:
        condition: service_healthy
    restart: unless-stopped

  # ─── Web Layer ──────────────────────────────────────────────────────

  web-backend:
    build:
      context: ..
      dockerfile: Konfig-Web-Backend/Dockerfile
    container_name: konfig-web-backend
    ports:
      - "8090:8090"
    environment:
      PORT: "8090"
      KONFIG_API_ADDR: "api-service:8081"
      KONFIG_DIST_ADDR: "distribution-service:8082"
      KONFIG_VAL_ADDR: "validation-service:8083"
      DATABASE_URL: "postgres://${WEB_POSTGRES_USER:-webuser}:${WEB_POSTGRES_PASSWORD:-webpass}@web-postgres:5432/${WEB_POSTGRES_DB:-konfig_auth}?sslmode=disable"
      JWT_SECRET: "${JWT_SECRET:-change-me-in-production}"
      APP_URL: "${APP_URL:-http://localhost}"
      SECURE_COOKIE: "${SECURE_COOKIE:-false}"
      GOOGLE_CLIENT_ID: "${GOOGLE_CLIENT_ID:-}"
      GOOGLE_CLIENT_SECRET: "${GOOGLE_CLIENT_SECRET:-}"
      SUPER_ADMIN_NAME: "${SUPER_ADMIN_NAME:-Super Admin}"
      SUPER_ADMIN_EMAIL: "${SUPER_ADMIN_EMAIL:-admin@konfig.local}"
      BASE_DOMAIN: "${BASE_DOMAIN:-localhost}"
      COOKIE_DOMAIN: "${COOKIE_DOMAIN:-}"
      RESEND_API_KEY: "${RESEND_API_KEY:-}"
      RESEND_FROM: "${RESEND_FROM:-noreply@konfig.org.in}"
      DEVELOPER_EMAIL: "${DEVELOPER_EMAIL:-}"
    networks:
      - config-network
    depends_on:
      web-postgres:
        condition: service_healthy
      api-service:
        condition: service_started
      distribution-service:
        condition: service_started
      validation-service:
        condition: service_started
    restart: unless-stopped

  web-postgres:
    image: postgres:15-alpine
    container_name: konfig-web-postgres
    environment:
      POSTGRES_DB: ${WEB_POSTGRES_DB:-konfig_auth}
      POSTGRES_USER: ${WEB_POSTGRES_USER:-webuser}
      POSTGRES_PASSWORD: ${WEB_POSTGRES_PASSWORD:-webpass}
    volumes:
      - web-postgres-data:/var/lib/postgresql/data
    networks:
      - config-network
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${WEB_POSTGRES_USER:-webuser} -d ${WEB_POSTGRES_DB:-konfig_auth}"]
      interval: 10s
      timeout: 5s
      retries: 5

  web-frontend:
    build:
      context: ../Konfig-Web-Frontend
      dockerfile: Dockerfile
      args:
        VITE_BASE_DOMAIN: ${BASE_DOMAIN:-localhost}
    container_name: konfig-web-frontend
    ports:
      - "3001:80"
    networks:
      - config-network
    depends_on:
      - web-backend
    restart: unless-stopped

  caddy:
    image: caddy:alpine
    container_name: konfig-caddy
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - ./Caddyfile:/etc/caddy/Caddyfile
      - caddy-data:/data
      - caddy-certs:/config
    networks:
      - config-network
    depends_on:
      - web-frontend
    restart: unless-stopped

  # ─── Infrastructure ─────────────────────────────────────────────────

  postgres:
    image: postgres:15-alpine
    container_name: config-postgres
    environment:
      POSTGRES_DB: ${POSTGRES_DB:-configservice}
      POSTGRES_USER: ${POSTGRES_USER:-configuser}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-configpass}
    ports:
      - "${POSTGRES_PORT:-5432}:5432"
    volumes:
      - postgres-data:/var/lib/postgresql/data
      - ./docker/postgres/init.sql:/docker-entrypoint-initdb.d/00_init.sql
      - ./db/migrations:/docker-entrypoint-initdb.d/migrations
    networks:
      - config-network
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-configuser} -d ${POSTGRES_DB:-configservice}"]
      interval: 10s
      timeout: 5s
      retries: 5

  redis:
    image: redis:7-alpine
    container_name: config-redis
    command: redis-server --appendonly yes
    ports:
      - "${REDIS_PORT:-6379}:6379"
    volumes:
      - redis-data:/data
    networks:
      - config-network
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 5s
      retries: 5

  zookeeper:
    image: confluentinc/cp-zookeeper:7.5.0
    container_name: config-zookeeper
    environment:
      ZOOKEEPER_CLIENT_PORT: 2181
      ZOOKEEPER_TICK_TIME: 2000
    ports:
      - "2181:2181"
    volumes:
      - zookeeper-data:/var/lib/zookeeper/data
      - zookeeper-logs:/var/lib/zookeeper/log
    networks:
      - config-network
    healthcheck:
      test: ["CMD", "nc", "-z", "localhost", "2181"]
      interval: 10s
      timeout: 5s
      retries: 5

  kafka:
    image: confluentinc/cp-kafka:7.5.0
    container_name: config-kafka
    depends_on:
      zookeeper:
        condition: service_healthy
    ports:
      - "9092:9092"
      - "9093:9093"
    environment:
      KAFKA_BROKER_ID: 1
      KAFKA_ZOOKEEPER_CONNECT: zookeeper:2181
      KAFKA_ADVERTISED_LISTENERS: PLAINTEXT://kafka:9092,PLAINTEXT_HOST://localhost:9093
      KAFKA_LISTENER_SECURITY_PROTOCOL_MAP: PLAINTEXT:PLAINTEXT,PLAINTEXT_HOST:PLAINTEXT
      KAFKA_INTER_BROKER_LISTENER_NAME: PLAINTEXT
      KAFKA_OFFSETS_TOPIC_REPLICATION_FACTOR: 1
      KAFKA_AUTO_CREATE_TOPICS_ENABLE: "true"
      KAFKA_LOG_RETENTION_HOURS: 168
    volumes:
      - kafka-data:/var/lib/kafka/data
    networks:
      - config-network
    healthcheck:
      test: ["CMD", "kafka-broker-api-versions", "--bootstrap-server", "localhost:9092"]
      interval: 10s
      timeout: 10s
      retries: 5

  kafka-ui:
    image: provectuslabs/kafka-ui:latest
    container_name: config-kafka-ui
    depends_on:
      kafka:
        condition: service_healthy
    ports:
      - "8080:8080"
    environment:
      KAFKA_CLUSTERS_0_NAME: local
      KAFKA_CLUSTERS_0_BOOTSTRAPSERVERS: kafka:9092
      KAFKA_CLUSTERS_0_ZOOKEEPER: zookeeper:2181
    networks:
      - config-network

  prometheus:
    image: prom/prometheus:latest
    container_name: config-prometheus
    ports:
      - "9090:9090"
    volumes:
      - ./prometheus/prometheus.yml:/etc/prometheus/prometheus.yml
      - prometheus-data:/prometheus
    command:
      - '--config.file=/etc/prometheus/prometheus.yml'
      - '--storage.tsdb.path=/prometheus'
      - '--web.console.libraries=/etc/prometheus/console_libraries'
      - '--web.console.templates=/etc/prometheus/consoles'
    networks:
      - config-network
  
  # StatsD Exporter - converts StatsD metrics to Prometheus format
  statsd-exporter:
    image: prom/statsd-exporter:latest
    container_name: config-statsd-exporter
    ports:
      - "9102:9102"          # Prometheus metrics endpoint
      - "9125:9125/udp"      # StatsD UDP (main)
      - "9125:9125/tcp"      # StatsD TCP
    volumes:
      - ./prometheus/statsd-mapping.yml:/tmp/statsd-mapping.yml
    command:
      - '--statsd.mapping-config=/tmp/statsd-mapping.yml'
      - '--statsd.listen-udp=:9125'
      - '--statsd.listen-tcp=:9125'
      - '--web.listen-address=:9102'
    networks:
      - config-network
    healthcheck:
      test: ["CMD", "wget", "--quiet", "--tries=1", "--spider", "http://localhost:9102/metrics"]
      interval: 10s
      timeout: 5s
      retries: 3

  grafana:
    image: grafana/grafana:latest
    container_name: config-grafana
    depends_on:
      - prometheus
    ports:
      - "3000:3000"
    environment:
      GF_SECURITY_ADMIN_USER: ${GRAFANA_ADMIN_USER:-admin}
      GF_SECURITY_ADMIN_PASSWORD: ${GRAFANA_ADMIN_PASSWORD:-admin}
      GF_INSTALL_PLUGINS: redis-datasource
    volumes:
      - grafana-data:/var/lib/grafana
      - ./docker/grafana/provisioning:/etc/grafana/provisioning
      - ./docker/grafana/dashboards:/var/lib/grafana/dashboards
    networks:
      - config-network

  pgadmin:
    image: dpage/pgadmin4:latest
    container_name: config-pgadmin
    environment:
      PGADMIN_DEFAULT_EMAIL: ${PGADMIN_EMAIL:-admin@example.com}
      PGADMIN_DEFAULT_PASSWORD: ${PGADMIN_PASSWORD:-admin}
      PGADMIN_CONFIG_SERVER_MODE: 'False'
    ports:
      - "5050:80"
    volumes:
      - pgadmin-data:/var/lib/pgadmin
    networks:
      - config-network
    depends_on:
      - postgres

volumes:
  caddy-data:
  caddy-certs:
  postgres-data:
  web-postgres-data:
  redis-data:
  zookeeper-data:
  zookeeper-logs:
  kafka-data:
  prometheus-data:
  grafana-data:
  pgadmin-data:

networks:
  config-network:
    driver: bridge