docker-compose.yml

---
services:
  # PostgreSQL 17 Database
  postgres:
    image: postgres:17-alpine
    container_name: icecharts-postgres
    environment:
      POSTGRES_DB: ${POSTGRES_DB:-icecharts}
      POSTGRES_USER: ${POSTGRES_USER:-icecharts_user}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-changeme}
      POSTGRES_INITDB_ARGS: "--encoding=UTF-8 --lc-collate=C --lc-ctype=C"
    ports:
      - "${POSTGRES_PORT:-5432}:5432"
    volumes:
      - postgres_data:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-icecharts_user} -d ${POSTGRES_DB:-icecharts}"]
      interval: 10s
      timeout: 5s
      retries: 5
    restart: unless-stopped
    networks:
      - icecharts-network

  # Redis 7 Cache
  redis:
    image: redis:7-alpine
    container_name: icecharts-redis
    command: redis-server --requirepass ${REDIS_PASSWORD:-changeme} --appendonly yes
    ports:
      - "${REDIS_PORT:-6379}:6379"
    volumes:
      - redis_data:/data
    healthcheck:
      test: ["CMD", "redis-cli", "-a", "${REDIS_PASSWORD:-changeme}", "ping"]
      interval: 10s
      timeout: 5s
      retries: 5
    restart: unless-stopped
    networks:
      - icecharts-network

  # MinIO Object Storage
  minio:
    image: minio/minio:latest
    container_name: icecharts-minio
    command: server /data --console-address ":9001"
    environment:
      MINIO_ROOT_USER: ${MINIO_ROOT_USER:-minioadmin}
      MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD:-minioadmin}
      MINIO_BROWSER_REDIRECT_URL: ${MINIO_BROWSER_REDIRECT_URL:-http://minio:9001}
    volumes:
      - minio_data:/data
    healthcheck:
      test: ["CMD", "mc", "ready", "local"]
      interval: 30s
      timeout: 20s
      retries: 3
    restart: unless-stopped
    networks:
      - icecharts-network

  # Flask API Backend
  api:
    build:
      context: ./services/flask-backend
      dockerfile: Dockerfile
    container_name: icecharts-api
    environment:
      # Flask Configuration
      - FLASK_ENV=${FLASK_ENV:-production}
      - FLASK_APP=${FLASK_APP:-app.py}
      - SECRET_KEY=${SECRET_KEY:-changeme-in-production}
      - SECURITY_PASSWORD_SALT=${SECURITY_PASSWORD_SALT:-changeme-salt-in-production}

      # JWT Configuration
      - JWT_SECRET_KEY=${JWT_SECRET_KEY:-changeme-jwt-secret}
      - JWT_ACCESS_TOKEN_EXPIRES=${JWT_ACCESS_TOKEN_EXPIRES:-3600}
      - JWT_REFRESH_TOKEN_EXPIRES=${JWT_REFRESH_TOKEN_EXPIRES:-2592000}

      # Database Configuration (PyDAL)
      - DB_TYPE=${DB_TYPE:-postgres}
      - DB_HOST=postgres
      - DB_PORT=5432
      - DB_NAME=${POSTGRES_DB:-icecharts}
      - DB_USER=${POSTGRES_USER:-icecharts_user}
      - DB_PASSWORD=${POSTGRES_PASSWORD:-changeme}
      - DB_POOL_SIZE=${DB_POOL_SIZE:-10}

      # Redis Configuration
      - REDIS_HOST=redis
      - REDIS_PORT=6379
      - REDIS_PASSWORD=${REDIS_PASSWORD:-changeme}
      - REDIS_URL=redis://:${REDIS_PASSWORD:-changeme}@redis:6379/0

      # MinIO/S3 Storage Configuration
      - STORAGE_PROVIDER=${STORAGE_PROVIDER:-minio}
      - MINIO_ENDPOINT=minio:9000
      - MINIO_ACCESS_KEY=${MINIO_ROOT_USER:-minioadmin}
      - MINIO_SECRET_KEY=${MINIO_ROOT_PASSWORD:-minioadmin}
      - MINIO_BUCKET=${MINIO_BUCKET:-icecharts}
      - MINIO_SECURE=${MINIO_SECURE:-false}

      # Application Configuration
      - DEFAULT_ADMIN_EMAIL=${DEFAULT_ADMIN_EMAIL:-admin@localhost}
      - DEFAULT_ADMIN_PASSWORD=${DEFAULT_ADMIN_PASSWORD:-admin123}
      - CORS_ORIGINS=${CORS_ORIGINS:-http://localhost:3000}

      # License Configuration
      - LICENSE_KEY=${LICENSE_KEY:-}
      - LICENSE_SERVER_URL=${LICENSE_SERVER_URL:-https://license.penguintech.io}
      - PRODUCT_NAME=${PRODUCT_NAME:-icecharts}
      - RELEASE_MODE=${RELEASE_MODE:-false}

      # Logging Configuration
      - LOG_LEVEL=${LOG_LEVEL:-info}
      - LOG_FORMAT=${LOG_FORMAT:-json}

    ports:
      - "${API_PORT:-5001}:5000"
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
      minio:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "python3", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:5000/api/v1/health')"]
      interval: 30s
      timeout: 10s
      retries: 5
      start_period: 60s
    restart: unless-stopped
    networks:
      - icecharts-network

  # React WebUI Frontend (simple static file server)
  web:
    build:
      context: ./services/webui
      dockerfile: Dockerfile.static
      args:
        VITE_API_URL: ${VITE_API_URL:-http://localhost:${API_PORT:-5001}}
        VITE_WS_URL: ${VITE_WS_URL:-http://localhost:${API_PORT:-5001}}
    container_name: icecharts-web
    environment:
      - NODE_ENV=${NODE_ENV:-production}
      - VITE_API_URL=${VITE_API_URL:-http://localhost:5001}
      - VITE_API_BASE_PATH=${VITE_API_BASE_PATH:-/api/v1}
    ports:
      - "${WEB_PORT:-3000}:3000"
    depends_on:
      api:
        condition: service_started
    healthcheck:
      test: ["CMD", "wget", "--spider", "-q", "http://localhost:3000"]
      interval: 30s
      timeout: 10s
      retries: 3
    restart: unless-stopped
    networks:
      - icecharts-network

  # Prometheus Monitoring (Optional - disabled by default)
  prometheus:
    image: prom/prometheus:latest
    container_name: icecharts-prometheus
    command:
      - '--config.file=/etc/prometheus/prometheus.yml'
      - '--storage.tsdb.path=/prometheus'
      - '--web.console.libraries=/etc/prometheus/console_libraries'
      - '--web.console.templates=/etc/prometheus/consoles'
      - '--storage.tsdb.retention.time=200h'
      - '--web.enable-lifecycle'
    ports:
      - "${PROMETHEUS_PORT:-9090}:9090"
    volumes:
      - ./infrastructure/monitoring/prometheus:/etc/prometheus
      - prometheus_data:/prometheus
    networks:
      - icecharts-network
    restart: unless-stopped
    profiles:
      - monitoring

  # Grafana Dashboard (Optional - disabled by default)
  grafana:
    image: grafana/grafana:latest
    container_name: icecharts-grafana
    environment:
      - GF_SECURITY_ADMIN_USER=${GRAFANA_USER:-admin}
      - GF_SECURITY_ADMIN_PASSWORD=${GRAFANA_PASSWORD:-admin}
      - GF_USERS_ALLOW_SIGN_UP=false
    ports:
      - "${GRAFANA_PORT:-3001}:3000"
    volumes:
      - grafana_data:/var/lib/grafana
      - ./infrastructure/monitoring/grafana/provisioning:/etc/grafana/provisioning
      - ./infrastructure/monitoring/grafana/dashboards:/var/lib/grafana/dashboards
    depends_on:
      - prometheus
    networks:
      - icecharts-network
    restart: unless-stopped
    profiles:
      - monitoring

volumes:
  postgres_data:
    driver: local
  redis_data:
    driver: local
  minio_data:
    driver: local
  prometheus_data:
    driver: local
  grafana_data:
    driver: local

networks:
  icecharts-network:
    driver: bridge