docker-compose.yml

services:
  # MongoDB (for conversations, workflows, and data persistence)
  mongodb:
    image: mongo:7
    container_name: claraverse-mongodb
    ports:
      - "27017:27017"
    volumes:
      - mongodb-data:/data/db
    environment:
      - MONGO_INITDB_DATABASE=claraverse
    deploy:
      resources:
        limits:
          memory: 1g
          cpus: "1.0"
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "mongosh", "--eval", "db.adminCommand('ping')"]
      interval: 30s
      timeout: 10s
      start_period: 30s
      retries: 3
    networks:
      - claraverse-network

  # Redis (for scheduled jobs + WebSocket pub/sub)
  # Required for: scheduled agent triggers, cross-instance messaging
  redis:
    image: redis:7-alpine
    container_name: claraverse-redis
    command: redis-server --appendonly yes --maxmemory 100mb --maxmemory-policy allkeys-lru
    ports:
      - "6379:6379"
    volumes:
      - redis-data:/data
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 5s
      start_period: 5s
      retries: 5
    networks:
      - claraverse-network

  # MySQL (for providers, models, and capabilities)
  # Replaces SQLite for production-ready persistence
  mysql:
    image: mysql:8.0
    container_name: claraverse-mysql
    command: --default-authentication-plugin=mysql_native_password --character-set-server=utf8mb4 --collation-server=utf8mb4_unicode_ci
    ports:
      - "3306:3306"
    volumes:
      - mysql-data-new:/var/lib/mysql
      - ./backend/migrations:/docker-entrypoint-initdb.d:ro
    environment:
      - MYSQL_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD:-claraverse_root_2024}
      - MYSQL_DATABASE=claraverse
      - MYSQL_USER=claraverse_user
      - MYSQL_PASSWORD=${MYSQL_PASSWORD:-claraverse_pass_2024}
    deploy:
      resources:
        limits:
          memory: 2g
          cpus: "1.0"
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "mysqladmin", "ping", "-h", "localhost", "-u", "root", "-p${MYSQL_ROOT_PASSWORD:-claraverse_root_2024}"]
      interval: 10s
      timeout: 5s
      start_period: 30s
      retries: 5
    networks:
      - claraverse-network

  searxng:
    image: searxng/searxng:latest
    container_name: claraverse-searxng
    volumes:
      - ./searxng/settings.yml:/etc/searxng/settings.yml:ro
    environment:
      - SEARXNG_BASE_URL=http://searxng:8080/
      - SEARXNG_HOSTNAME=searxng
    cap_add:
      - SETUID
      - SETGID
    restart: unless-stopped
    networks:
      - claraverse-network
    healthcheck:
      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:8080/"]
      interval: 30s
      timeout: 3s
      start_period: 15s
      retries: 3

  # E2B Code Interpreter (optional - requires E2B_API_KEY)
  # Uncomment and set E2B_API_KEY in .env to enable
  # e2b-service:
  #   build:
  #     context: ./backend/e2b-service
  #     dockerfile: Dockerfile
  #   container_name: claraverse-e2b
  #   environment:
  #     - E2B_API_KEY=${E2B_API_KEY}
  #   restart: unless-stopped
  #   healthcheck:
  #     test: ["CMD", "python", "-c", "import requests; requests.get('http://localhost:8001/health')"]
  #     interval: 30s
  #     timeout: 10s
  #     start_period: 5s
  #     retries: 3
  #   networks:
  #     - claraverse-network

  backend:
    build:
      context: ./backend
      dockerfile: Dockerfile
      args:
        SKIP_TESTS: "true"
    container_name: claraverse-backend
    ports:
      - "3001:3001"
    deploy:
      resources:
        limits:
          memory: 1g
          cpus: "2.0"
    volumes:
      # Persistent data
      - backend-data:/app/data
      - backend-uploads:/app/uploads
      - backend-logs:/app/logs
    environment:
      # All values from root .env file (single source of truth)
      - ENVIRONMENT=${ENVIRONMENT:-development}
      # Override paths for Docker environment
      - DATABASE_URL=${DATABASE_URL:-mysql://claraverse_user:${MYSQL_PASSWORD:-claraverse_pass_2024}@mysql:3306/claraverse?parseTime=true}
      - MYSQL_DATABASE=claraverse
      - UPLOAD_DIR=/app/uploads
      # CORS
      - ALLOWED_ORIGINS=${ALLOWED_ORIGINS:-http://localhost:5173}
      # SearXNG integration (supports multiple URLs for load balancing)
      - SEARXNG_URLS=${SEARXNG_URLS:-http://searxng:8080}
      - SEARXNG_URL=${SEARXNG_URLS:-http://searxng:8080}
      # E2B service integration
      - E2B_SERVICE_URL=http://e2b-service:8001
      # Frontend URL
      - FRONTEND_URL=${FRONTEND_URL:-http://localhost:5173}
      # Backend public URL for generating absolute download URLs
      - BACKEND_URL=${BACKEND_URL:-http://localhost:3001}
      # MongoDB
      - MONGODB_URI=${MONGODB_URI:-mongodb://mongodb:27017/claraverse}
      # Redis (for scheduler + pub/sub)
      - REDIS_URL=${REDIS_URL:-redis://redis:6379}
      # JWT Secret for local auth tokens
      - JWT_SECRET=${JWT_SECRET:-local_test_jwt_secret_32chars_min}
      - JWT_ACCESS_TOKEN_EXPIRY=${JWT_ACCESS_TOKEN_EXPIRY:-15m}
      - JWT_REFRESH_TOKEN_EXPIRY=${JWT_REFRESH_TOKEN_EXPIRY:-168h}
      # Encryption key for user data
      - ENCRYPTION_MASTER_KEY=${ENCRYPTION_MASTER_KEY}
      # Development API key for testing (only works when ENVIRONMENT != production)
      - DEV_API_KEY=${DEV_API_KEY:-claraverse-dev-key-2024}
      # Admin
      - SUPERADMIN_USER_IDS=${SUPERADMIN_USER_IDS:-}
      # Composio (optional integrations)
      - COMPOSIO_API_KEY=${COMPOSIO_API_KEY}
      - COMPOSIO_GOOGLESHEETS_AUTH_CONFIG_ID=${COMPOSIO_GOOGLESHEETS_AUTH_CONFIG_ID}
      - COMPOSIO_GMAIL_AUTH_CONFIG_ID=${COMPOSIO_GMAIL_AUTH_CONFIG_ID}
      - COMPOSIO_LINKEDIN_AUTH_CONFIG_ID=${COMPOSIO_LINKEDIN_AUTH_CONFIG_ID}
      - COMPOSIO_GOOGLECALENDAR_AUTH_CONFIG_ID=${COMPOSIO_GOOGLECALENDAR_AUTH_CONFIG_ID}
      - COMPOSIO_GOOGLEDRIVE_AUTH_CONFIG_ID=${COMPOSIO_GOOGLEDRIVE_AUTH_CONFIG_ID}
      - COMPOSIO_CANVA_AUTH_CONFIG_ID=${COMPOSIO_CANVA_AUTH_CONFIG_ID}
      - COMPOSIO_TWITTER_AUTH_CONFIG_ID=${COMPOSIO_TWITTER_AUTH_CONFIG_ID}
      - COMPOSIO_YOUTUBE_AUTH_CONFIG_ID=${COMPOSIO_YOUTUBE_AUTH_CONFIG_ID}
      - COMPOSIO_ZOOM_AUTH_CONFIG_ID=${COMPOSIO_ZOOM_AUTH_CONFIG_ID}
      # Rate Limiting
      - RATE_LIMIT_GLOBAL_API=${RATE_LIMIT_GLOBAL_API:-200}
      - RATE_LIMIT_PUBLIC_READ=${RATE_LIMIT_PUBLIC_READ:-120}
      - RATE_LIMIT_AUTHENTICATED=${RATE_LIMIT_AUTHENTICATED:-60}
      - RATE_LIMIT_WEBSOCKET=${RATE_LIMIT_WEBSOCKET:-20}
      - RATE_LIMIT_IMAGE_PROXY=${RATE_LIMIT_IMAGE_PROXY:-60}
    depends_on:
      mongodb:
        condition: service_healthy
      mysql:
        condition: service_healthy
      searxng:
        condition: service_healthy
      redis:
        condition: service_healthy
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:3001/health"]
      interval: 30s
      timeout: 3s
      start_period: 10s
      retries: 3
    networks:
      - claraverse-network

  frontend:
    build:
      context: ./frontend
      dockerfile: Dockerfile
      args:
        VITE_API_BASE_URL: ${VITE_API_BASE_URL:-http://localhost:3001}
        VITE_WS_URL: ${VITE_WS_URL:-ws://localhost:3001}
    container_name: claraverse-frontend
    ports:
      - "80:80"
    depends_on:
      backend:
        condition: service_healthy
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://127.0.0.1/health"]
      interval: 30s
      timeout: 3s
      start_period: 5s
      retries: 3
    networks:
      - claraverse-network

volumes:
  backend-data:
    driver: local
  backend-uploads:
    driver: local
  backend-logs:
    driver: local
  mongodb-data:
    driver: local
  mysql-data-new:
    driver: local
  redis-data:
    driver: local

networks:
  claraverse-network:
    driver: bridge