docker-compose.prod.yml

services:
  # ==================== Infrastructure ====================

  neo4j:
    image: neo4j:5.15
    container_name: ckg-neo4j
    ports:
      - "7474:7474"
      - "7687:7687"
    environment:
      - NEO4J_AUTH=neo4j/${NEO4J_PASSWORD:-neo4j123456}
      - NEO4J_dbms_memory_heap_initial__size=1G
      - NEO4J_dbms_memory_heap_max__size=2G
      - NEO4J_dbms_memory_pagecache_size=1G
      - NEO4J_dbms_security_procedures_unrestricted=apoc.*
      - NEO4J_dbms_security_allow__csv__import__from__file__urls=true
      - TZ=UTC
    volumes:
      - neo4j_data:/data
      - neo4j_logs:/logs
      - ./docker/neo4j/init:/var/lib/neo4j/init
    healthcheck:
      test: ["CMD-SHELL", "wget -q --spider http://localhost:7474 || exit 1"]
      interval: 30s
      timeout: 10s
      retries: 5
    deploy:
      resources:
        limits:
          cpus: '2'
          memory: 4G
    networks:
      - ckg-network
    restart: unless-stopped

  postgres:
    image: postgres:15
    container_name: ckg-postgres
    ports:
      - "5432:5432"
    environment:
      - POSTGRES_USER=${POSTGRES_USER:-postgres}
      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD:-postgres}
      - POSTGRES_DB=ckg
      - TZ=UTC
    volumes:
      - postgres_data:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-postgres}"]
      interval: 30s
      timeout: 10s
      retries: 5
    deploy:
      resources:
        limits:
          cpus: '1'
          memory: 1G
    networks:
      - ckg-network
    restart: unless-stopped

  redis:
    image: redis:7-alpine
    container_name: ckg-redis
    ports:
      - "6379:6379"
    command: redis-server --appendonly yes
    environment:
      - TZ=UTC
    volumes:
      - redis_data:/data
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 30s
      timeout: 10s
      retries: 5
    deploy:
      resources:
        limits:
          cpus: '1'
          memory: 512M
    networks:
      - ckg-network
    restart: unless-stopped

  # ==================== Application ====================

  backend:
    build:
      context: ./backend
      dockerfile: Dockerfile
    container_name: ckg-backend
    ports:
      - "8080:8080"
    dns:
      - 8.8.8.8
      - 8.8.4.4
    extra_hosts:
      - "github.com:20.205.243.166"
    environment:
      - SPRING_PROFILES_ACTIVE=prod
      - SPRING_DATASOURCE_URL=jdbc:postgresql://postgres:5432/ckg?stringtype=unspecified
      - SPRING_DATASOURCE_USERNAME=${POSTGRES_USER:-postgres}
      - SPRING_DATASOURCE_PASSWORD=${POSTGRES_PASSWORD:-postgres}
      - SPRING_NEO4J_URI=bolt://neo4j:7687
      - SPRING_NEO4J_AUTHENTICATION_USERNAME=neo4j
      - SPRING_NEO4J_AUTHENTICATION_PASSWORD=${NEO4J_PASSWORD:-neo4j123456}
      - SPRING_DATA_REDIS_HOST=redis
      - SPRING_DATA_REDIS_PORT=6379
      - LLM_PROVIDER=${LLM_PROVIDER:-openai}
      - LLM_API_KEY=${LLM_API_KEY:?LLM_API_KEY must be set in .env}
      - LLM_MODEL=${LLM_MODEL:-gpt-4o}
      - LLM_BASE_URL=${LLM_BASE_URL:-https://api.openai.com/v1}
      - JWT_SECRET=${JWT_SECRET:?JWT_SECRET must be set in .env}
      - GIT_REPOS_PATH=/data/repos
    volumes:
      - repos_data:/data/repos
      - ${HOST_PROJECTS_DIR:-./host-projects}:/host-projects:ro
    depends_on:
      neo4j:
        condition: service_healthy
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8080/api/health"]
      interval: 30s
      timeout: 10s
      retries: 5
    deploy:
      resources:
        limits:
          cpus: '2'
          memory: 2G
    networks:
      - ckg-network
    restart: unless-stopped

  frontend:
    build:
      context: ./frontend
      dockerfile: Dockerfile
      args:
        - VITE_API_BASE_URL=/api
    container_name: ckg-frontend
    ports:
      - "80:80"
    depends_on:
      - backend
    deploy:
      resources:
        limits:
          cpus: '1'
          memory: 256M
    networks:
      - ckg-network
    restart: unless-stopped

  # ==================== Optional: Codegraph MCP ====================

  # codegraph:
  #   image: ghcr.io/example/codegraph:latest
  #   container_name: ckg-codegraph
  #   volumes:
  #     - repos_data:/repos
  #   networks:
  #     - ckg-network
  #   restart: unless-stopped

volumes:
  neo4j_data:
  neo4j_logs:
  postgres_data:
  redis_data:
  repos_data:

networks:
  ckg-network:
    driver: bridge