docker-compose.yml

# docker-compose.yml (root of project)
version: '3.8'

services:
  # ============================================================================
  # BASE SERVICES (always available)
  # ============================================================================

  postgres:
    image: postgres:16-alpine
    restart: unless-stopped
    environment:
      POSTGRES_USER: ${DB_USER:-topgun}
      POSTGRES_PASSWORD: ${DB_PASSWORD:-topgun_dev}
      POSTGRES_DB: ${DB_NAME:-topgun}
    ports:
      - "${DB_PORT:-5432}:5432"
    volumes:
      - postgres-data:/var/lib/postgresql/data
      - ./deploy/init-db.sql:/docker-entrypoint-initdb.d/init.sql:ro
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${DB_USER:-topgun}"]
      interval: 5s
      timeout: 5s
      retries: 5
    networks:
      - topgun

  server:
    # Default `docker compose up server` boots TopGun with the embedded redb
    # backend on a named volume — no Postgres required, no auth required.
    # For a Postgres-backed deployment, set STORAGE_BACKEND=postgres and
    # DATABASE_URL via .env (the `postgres` service above is left running so
    # the connection string resolves) OR use the `server-postgres` profile
    # below for an explicit production-shaped wiring.
    build:
      context: .
      dockerfile: deploy/Dockerfile.server
    ports:
      - "${SERVER_PORT:-8080}:8080"
      - "${CLUSTER_PORT:-9080}:9080"
    environment:
      RUST_LOG: topgun_server=info
      TOPGUN_PORT: 8080
      TOPGUN_CLUSTER_PORT: 9080
      STORAGE_BACKEND: ${STORAGE_BACKEND:-redb}
      TOPGUN_REDB_PATH: /data/topgun.redb
      # Dev default: skip auth so `docker compose up server` works without
      # generating a key. Override with JWT_SECRET=... for any real deploy.
      TOPGUN_NO_AUTH: ${TOPGUN_NO_AUTH:-1}
      JWT_SECRET: ${JWT_SECRET:-}
      # Only consumed when STORAGE_BACKEND=postgres — harmless otherwise.
      DATABASE_URL: postgres://${DB_USER:-topgun}:${DB_PASSWORD:-topgun_dev}@postgres:5432/${DB_NAME:-topgun}
    volumes:
      - topgun-data:/data
    healthcheck:
      test: ["CMD", "wget", "-q", "--spider", "http://localhost:8080/health"]
      interval: 10s
      timeout: 5s
      retries: 3
    networks:
      - topgun

  # ============================================================================
  # PROFILE: admin
  # ============================================================================

  admin-ui:
    build:
      context: .
      dockerfile: apps/admin-dashboard/Dockerfile
    ports:
      - "3001:3000"
    environment:
      VITE_TOPGUN_SERVER_URL: ws://localhost:8080
      VITE_TOPGUN_METRICS_URL: http://localhost:9091
    profiles: ["admin", "all", "getting-started"]
    depends_on:
      - server
    networks:
      - topgun

  # ============================================================================
  # PROFILE: getting-started (one-command onboarding demo)
  # ============================================================================

  seed:
    build:
      context: ./deploy/seed
      dockerfile: Dockerfile.seed
    environment:
      TOPGUN_HOST: server
      TOPGUN_PORT: "8080"
    # JWT_SECRET is intentionally omitted — the default server config uses
    # require_auth: false, so the seed script skips authentication.
    profiles: ["getting-started"]
    restart: "no"
    depends_on:
      server:
        condition: service_healthy
    networks:
      - topgun

  # ============================================================================
  # PROFILE: monitoring
  # ============================================================================

  prometheus:
    image: prom/prometheus:latest
    ports:
      - "9090:9090"
    volumes:
      - ./deploy/prometheus.yml:/etc/prometheus/prometheus.yml:ro
      - prometheus-data:/prometheus
    command:
      - '--config.file=/etc/prometheus/prometheus.yml'
      - '--storage.tsdb.path=/prometheus'
      - '--web.enable-lifecycle'
    profiles: ["monitoring", "all"]
    depends_on:
      - server
    networks:
      - topgun

  grafana:
    image: grafana/grafana:latest
    ports:
      - "3000:3000"
    environment:
      GF_SECURITY_ADMIN_USER: admin
      GF_SECURITY_ADMIN_PASSWORD: admin
      GF_AUTH_ANONYMOUS_ENABLED: "true"
      GF_AUTH_ANONYMOUS_ORG_ROLE: "Viewer"
    volumes:
      - ./deploy/grafana/provisioning:/etc/grafana/provisioning:ro
      - ./deploy/grafana/dashboards:/var/lib/grafana/dashboards:ro
      - grafana-data:/var/lib/grafana
    profiles: ["monitoring", "all"]
    depends_on:
      - prometheus
    networks:
      - topgun

  # ============================================================================
  # PROFILE: dbtools
  # ============================================================================

  dbgate:
    image: dbgate/dbgate:latest
    ports:
      - "3002:3000"
    environment:
      CONNECTIONS: |
        {
          "topgun-postgres": {
            "engine": "postgres@dbgate-plugin-postgres",
            "server": "postgres",
            "port": 5432,
            "user": "${DB_USER:-topgun}",
            "password": "${DB_PASSWORD:-topgun_dev}",
            "database": "${DB_NAME:-topgun}"
          }
        }
    profiles: ["dbtools", "all"]
    depends_on:
      postgres:
        condition: service_healthy
    networks:
      - topgun

  # ============================================================================
  # PROFILE: k6 (load testing)
  # ============================================================================

  k6:
    build:
      context: ./tests/k6
      dockerfile: Dockerfile.k6
    volumes:
      - ./tests/k6:/scripts:ro
      - ./tests/k6/results:/results
    environment:
      K6_OUT: json=/results/output.json
      SERVER_URL: ws://server:8080
    profiles: ["k6"]
    depends_on:
      server:
        condition: service_healthy
    networks:
      - topgun

  # ============================================================================
  # PROFILE: auto-setup (Rust server with auto-setup profile)
  # ============================================================================

  server-auto:
    build:
      context: .
      dockerfile: deploy/Dockerfile.server
    ports:
      - "${SERVER_PORT:-8080}:8080"
      - "${METRICS_PORT:-9090}:9090"
    environment:
      RUST_LOG: topgun_server=info
      TOPGUN_PORT: 8080
      TOPGUN_METRICS_PORT: 9090
      DATABASE_URL: postgres://${DB_USER:-topgun}:${DB_PASSWORD:-topgun_dev}@postgres:5432/${DB_NAME:-topgun}
    profiles: ["auto-setup"]
    depends_on:
      postgres:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "wget", "-q", "--spider", "http://localhost:8080/health"]
      interval: 10s
      timeout: 5s
      retries: 3
    networks:
      - topgun

  # ============================================================================
  # PROFILE: cluster (3-node cluster for testing)
  # ============================================================================

  node-1:
    build:
      context: .
      dockerfile: deploy/Dockerfile.server
    ports:
      - "10001:8080"
      - "11001:9080"
    environment:
      RUST_LOG: topgun_server=info
      NODE_ID: node-1
      TOPGUN_PORT: 8080
      TOPGUN_CLUSTER_PORT: 9080
      TOPGUN_PEERS: node-2:9080,node-3:9080
      DATABASE_URL: postgres://${DB_USER:-topgun}:${DB_PASSWORD:-topgun_dev}@postgres:5432/${DB_NAME:-topgun}
    profiles: ["cluster"]
    depends_on:
      postgres:
        condition: service_healthy
    networks:
      - topgun

  node-2:
    build:
      context: .
      dockerfile: deploy/Dockerfile.server
    ports:
      - "10002:8080"
      - "11002:9080"
    environment:
      RUST_LOG: topgun_server=info
      NODE_ID: node-2
      TOPGUN_PORT: 8080
      TOPGUN_CLUSTER_PORT: 9080
      TOPGUN_PEERS: node-1:9080,node-3:9080
      DATABASE_URL: postgres://${DB_USER:-topgun}:${DB_PASSWORD:-topgun_dev}@postgres:5432/${DB_NAME:-topgun}
    profiles: ["cluster"]
    depends_on:
      postgres:
        condition: service_healthy
    networks:
      - topgun

  node-3:
    build:
      context: .
      dockerfile: deploy/Dockerfile.server
    ports:
      - "10003:8080"
      - "11003:9080"
    environment:
      RUST_LOG: topgun_server=info
      NODE_ID: node-3
      TOPGUN_PORT: 8080
      TOPGUN_CLUSTER_PORT: 9080
      TOPGUN_PEERS: node-1:9080,node-2:9080
      DATABASE_URL: postgres://${DB_USER:-topgun}:${DB_PASSWORD:-topgun_dev}@postgres:5432/${DB_NAME:-topgun}
    profiles: ["cluster"]
    depends_on:
      postgres:
        condition: service_healthy
    networks:
      - topgun

volumes:
  postgres-data:
  prometheus-data:
  grafana-data:
  topgun-data:

networks:
  topgun:
    driver: bridge