docker-compose.yml

services:
  # Frontend Service
  frontend:
    build:
      context: .
      dockerfile: sentinel_frontend/Dockerfile.prod
    container_name: sentinel_frontend
    ports:
      - "3000:80"
    environment:
      - REACT_APP_API_URL=http://localhost:8000
      - REACT_APP_API_GATEWAY_URL=http://api_gateway:8000
      - REACT_APP_WS_URL=ws://localhost:8000/ws
      - REACT_APP_ENV=production
    depends_on:
      - api_gateway
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:80/health"]
      interval: 30s
      timeout: 3s
      retries: 3
      start_period: 5s
    restart: unless-stopped
    networks:
      - sentinel_network

  db:
    image: pgvector/pgvector:pg16
    container_name: sentinel_db
    env_file:
      - sentinel_backend/.env.docker
    environment:
      - POSTGRES_USER=sentinel
      - POSTGRES_PASSWORD=sentinel_password
      - POSTGRES_DB=sentinel_db
    ports:
      - "5432:5432"
    volumes:
      - sentinel_postgres_data:/var/lib/postgresql/data
      - ./sentinel_backend/scripts:/scripts:ro
      - ./sentinel_backend/scripts/docker-init-db-sql.sh:/docker-entrypoint-initdb.d/01-init-schema.sh:ro
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U sentinel -d sentinel_db && psql -U sentinel -d sentinel_db -c \"SELECT 1 FROM test_runs LIMIT 1;\" > /dev/null 2>&1"]
      interval: 10s
      timeout: 5s
      retries: 15
      start_period: 45s
    networks:
      - sentinel_network

  api_gateway:
    build:
      context: .
      dockerfile: sentinel_backend/api_gateway/Dockerfile.prod
    container_name: sentinel_api_gateway
    env_file:
      - sentinel_backend/.env.docker
    ports:
      - "8000:8000"
    depends_on:
      - auth_service
      - spec_service
      - orchestration_service
      - data_service
      - sentinel_rust_core
    networks:
      - sentinel_network

  auth_service:
    build:
      context: .
      dockerfile: sentinel_backend/auth_service/Dockerfile.prod
    container_name: sentinel_auth_service
    env_file:
      - sentinel_backend/.env.docker
    environment:
      - SENTINEL_DB_URL=postgresql+asyncpg://sentinel:sentinel_password@db:5432/sentinel_db
    working_dir: /app
    ports:
      - "8005:8005"
    depends_on:
      db:
        condition: service_healthy
    networks:
      - sentinel_network

  spec_service:
    build:
      context: .
      dockerfile: sentinel_backend/spec_service/Dockerfile.prod
    container_name: sentinel_spec_service
    env_file:
      - sentinel_backend/.env.docker
    environment:
      - SENTINEL_DB_URL=postgresql+asyncpg://sentinel:sentinel_password@db:5432/sentinel_db
    working_dir: /app
    ports:
      - "8001:8001"
    depends_on:
      db:
        condition: service_healthy
    networks:
      - sentinel_network

  orchestration_service:
    build:
      context: .
      dockerfile: sentinel_backend/orchestration_service/Dockerfile.prod
    container_name: sentinel_orchestration_service
    env_file:
      - sentinel_backend/.env.docker
    working_dir: /app
    ports:
      - "8002:8002"
    depends_on:
      - execution_service
      - data_service
      - sentinel_rust_core
      - message_broker
    networks:
      - sentinel_network

  execution_service:
    build:
      context: .
      dockerfile: sentinel_backend/execution_service/Dockerfile.prod
    container_name: sentinel_execution_service
    env_file:
      - sentinel_backend/.env.docker
    environment:
      - SENTINEL_DB_URL=postgresql+asyncpg://sentinel:sentinel_password@db:5432/sentinel_db
    working_dir: /app
    ports:
      - "8003:8003"
    depends_on:
      db:
        condition: service_healthy
    networks:
      - sentinel_network

  data_service:
    build:
      context: .
      dockerfile: sentinel_backend/data_service/Dockerfile.prod
    container_name: sentinel_data_service
    env_file:
      - sentinel_backend/.env.docker
    environment:
      - SENTINEL_DB_URL=postgresql+asyncpg://sentinel:sentinel_password@db:5432/sentinel_db
    working_dir: /app
    ports:
      - "8004:8004"
    depends_on:
      db:
        condition: service_healthy
    networks:
      - sentinel_network

  sentinel_rust_core:
    build:
      context: .
      dockerfile: sentinel_backend/sentinel_rust_core/Dockerfile.prod
    container_name: sentinel_rust_core
    ports:
      - "8088:8088"
    environment:
      - RUST_LOG=info
    healthcheck:
      test: ["CMD-SHELL", "curl -f http://localhost:8088/health || exit 1"]
      interval: 10s
      timeout: 5s
      retries: 5
    depends_on:
      - message_broker
    networks:
      - sentinel_network

  message_broker:
    image: rabbitmq:3-management
    container_name: sentinel_message_broker
    ports:
      - "5672:5672"
      - "15672:15672"
    volumes:
      - rabbitmq_data:/var/lib/rabbitmq
    env_file:
      - sentinel_backend/.env.docker
    healthcheck:
      test: ["CMD", "rabbitmq-diagnostics", "ping"]
      interval: 10s
      timeout: 5s
      retries: 5
    networks:
      - sentinel_network

  # Observability Services
  prometheus:
    image: prom/prometheus:latest
    container_name: sentinel_prometheus
    ports:
      - "9090:9090"
    volumes:
      - ./prometheus.yml:/etc/prometheus/prometheus.yml
      - ./sentinel_backend/observability/prometheus/alerts.yml:/etc/prometheus/alerts.yml
      - ./sentinel_backend/observability/prometheus/recording_rules.yml:/etc/prometheus/recording_rules.yml
      - prometheus_data:/prometheus
    command:
      - '--config.file=/etc/prometheus/prometheus.yml'
      - '--storage.tsdb.path=/prometheus'
      - '--storage.tsdb.retention.time=30d'
      - '--storage.tsdb.retention.size=50GB'
      - '--web.console.libraries=/usr/share/prometheus/console_libraries'
      - '--web.console.templates=/usr/share/prometheus/consoles'
      - '--web.enable-lifecycle'
    restart: unless-stopped
    depends_on:
      - api_gateway
      - auth_service
      - spec_service
      - orchestration_service
      - execution_service
      - data_service
      - sentinel_rust_core
    networks:
      - sentinel_network

  jaeger:
    image: jaegertracing/all-in-one:latest
    container_name: sentinel_jaeger
    ports:
      - "5775:5775/udp"    # Zipkin compact
      - "6831:6831/udp"    # Jaeger compact thrift
      - "6832:6832/udp"    # Jaeger binary thrift
      - "5778:5778"        # Serve configs
      - "16686:16686"      # Jaeger UI
      - "14268:14268"      # Jaeger collector HTTP
      - "14250:14250"      # Jaeger collector gRPC
      - "14269:14269"      # Jaeger admin/health
      - "9411:9411"        # Zipkin compatible
      - "4317:4317"        # OTLP gRPC
      - "4318:4318"        # OTLP HTTP
    environment:
      - COLLECTOR_ZIPKIN_HOST_PORT=:9411
      - COLLECTOR_OTLP_ENABLED=true
      - SPAN_STORAGE_TYPE=memory
      - METRICS_BACKEND=prometheus
      - PROMETHEUS_SERVER_URL=http://prometheus:9090
    restart: unless-stopped
    networks:
      - sentinel_network

networks:
  sentinel_network:
    driver: bridge

volumes:
  sentinel_postgres_data:
  prometheus_data:
  rabbitmq_data:
  jaeger_data: