speccursor/docker-compose.staging.yml at main · SentinelOps-CI/speccursor · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
# Staging overlay — control-plane services on top of local infra compose.
# Usage (via scripts/deploy.mjs or manually):
#   docker compose -f docker-compose.yml -f docker-compose.staging.yml --env-file .env.staging up -d --build
#
# Requires .env.staging with real secrets (see .env.staging.example).
# Does not provision cloud accounts; runs on the local Docker host as a staging profile.

services:
  postgres:
    environment:
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:?Set POSTGRES_PASSWORD in .env.staging}
      POSTGRES_USER: ${POSTGRES_USER:-speccursor}
      POSTGRES_DB: ${POSTGRES_DB:-speccursor}
    ports:
      - '127.0.0.1:${POSTGRES_PUBLISH_PORT:-5432}:5432'

  redis:
    command: redis-server --appendonly yes --requirepass ${REDIS_PASSWORD:?Set REDIS_PASSWORD in .env.staging}
    environment:
      REDIS_PASSWORD: ${REDIS_PASSWORD:?Set REDIS_PASSWORD in .env.staging}
    ports:
      - '127.0.0.1:${REDIS_PUBLISH_PORT:-6379}:6379'
    healthcheck:
      test: ['CMD-SHELL', 'redis-cli -a "$$REDIS_PASSWORD" ping | grep -q PONG']
      interval: 10s
      timeout: 5s
      retries: 5

  # Avoid port clash with github-app (host 3080). Enable with --profile observability.
  grafana:
    profiles: ['observability']
  prometheus:
    profiles: ['observability']
  loki:
    profiles: ['observability']
  jaeger:
    profiles: ['observability']
  mailhog:
    profiles: ['devtools']
  lean-dev:
    profiles: ['devtools']

  controller:
    build:
      context: .
      dockerfile: infrastructure/docker/Dockerfile.service
      args:
        SERVICE: controller
    image: speccursor-controller:${IMAGE_TAG:-staging}
    container_name: speccursor-controller-staging
    restart: unless-stopped
    env_file:
      - .env.staging
    environment:
      APP_ENV: staging
      NODE_ENV: production
      PORT: 3001
      DATABASE_URL: postgresql://${POSTGRES_USER:-speccursor}:${POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB:-speccursor}
      REDIS_URL: redis://:${REDIS_PASSWORD}@redis:6379
      DB_SSL: ${DB_SSL:-false}
      LOG_LEVEL: ${LOG_LEVEL:-info}
    ports:
      - '${CONTROLLER_PORT:-3001}:3001'
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
    healthcheck:
      test:
        [
          'CMD',
          'node',
          '-e',
          "fetch('http://127.0.0.1:3001/health').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))",
        ]
      interval: 15s
      timeout: 5s
      retries: 8
      start_period: 45s
    networks:
      - default

  ai-service:
    build:
      context: .
      dockerfile: infrastructure/docker/Dockerfile.service
      args:
        SERVICE: ai-service
    image: speccursor-ai-service:${IMAGE_TAG:-staging}
    container_name: speccursor-ai-service-staging
    restart: unless-stopped
    env_file:
      - .env.staging
    environment:
      APP_ENV: staging
      NODE_ENV: production
      PORT: 3002
      DATABASE_URL: postgresql://${POSTGRES_USER:-speccursor}:${POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB:-speccursor}
      REDIS_URL: redis://:${REDIS_PASSWORD}@redis:6379
      DB_SSL: ${DB_SSL:-false}
      LOG_LEVEL: ${LOG_LEVEL:-info}
    ports:
      - '${AI_SERVICE_PORT:-3002}:3002'
    depends_on:
      postgres:
        condition: service_healthy
    healthcheck:
      test:
        [
          'CMD',
          'node',
          '-e',
          "fetch('http://127.0.0.1:3002/health').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))",
        ]
      interval: 15s
      timeout: 5s
      retries: 8
      start_period: 45s
    networks:
      - default

  github-app:
    build:
      context: .
      dockerfile: infrastructure/docker/Dockerfile.service
      args:
        SERVICE: github-app
    image: speccursor-github-app:${IMAGE_TAG:-staging}
    container_name: speccursor-github-app-staging
    restart: unless-stopped
    env_file:
      - .env.staging
    environment:
      APP_ENV: staging
      NODE_ENV: production
      PORT: 3000
      DATABASE_URL: postgresql://${POSTGRES_USER:-speccursor}:${POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB:-speccursor}
      REDIS_URL: redis://:${REDIS_PASSWORD}@redis:6379
      DB_SSL: ${DB_SSL:-false}
      LOG_LEVEL: ${LOG_LEVEL:-info}
    ports:
      - '${GITHUB_APP_PORT:-3080}:3000'
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
    healthcheck:
      test:
        [
          'CMD',
          'node',
          '-e',
          "fetch('http://127.0.0.1:3000/health').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))",
        ]
      interval: 15s
      timeout: 5s
      retries: 8
      start_period: 45s
    networks:
      - default