docker-compose.yml

name: workspaceos

networks:
  workspaceos:
    driver: bridge

services:

  db:
    image: pgvector/pgvector:pg15
    restart: unless-stopped
    networks:
      - workspaceos
    environment:
      POSTGRES_DB: ${POSTGRES_DB}
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
    volumes:
      - postgres_data:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER} -d ${POSTGRES_DB}"]
      interval: 5s
      timeout: 5s
      retries: 10

  backend:
    build:
      context: ./backend
      dockerfile: Dockerfile
    restart: unless-stopped
    networks:
      - workspaceos
    extra_hosts:
      - "host.docker.internal:host-gateway"
    ports:
      - "9000:8000"
    depends_on:
      db:
        condition: service_healthy
    env_file:
      - .env
    volumes:
      # Workspace scanner mount. Set WORKSPACE_HOST_PATH in .env to point at
      # a directory on the host you want scanned (read-only). Defaults to
      # /tmp/no-workspace so the demo runs without a real path; the scanner
      # will return empty results.
      - ${WORKSPACE_HOST_PATH:-/tmp/no-workspace}:/projects:ro
      - backend_data:/app/data
      - ./config:/app/config
    command: >
      sh -c "
        alembic upgrade head &&
        python seed.py || true &&
        uvicorn app.main:app --host 0.0.0.0 --port 8000 --log-level info
      "
    working_dir: /app

  frontend:
    build:
      context: ./frontend
      dockerfile: Dockerfile
      args:
        NEXT_PUBLIC_API_BASE_URL: http://localhost:9000/api/v1
        NEXT_PUBLIC_API_KEY: dev-secret-key
    restart: unless-stopped
    networks:
      - workspaceos
    ports:
      - "4000:3000"
    depends_on:
      - backend
    environment:
      NEXT_PUBLIC_API_BASE_URL: ${NEXT_PUBLIC_API_BASE_URL}
      NEXT_PUBLIC_API_KEY: ${NEXT_PUBLIC_API_KEY}

  datamaster:
    image: ${DATAMASTER_SIDECAR_IMAGE:-workspaceos/datamaster-sidecar:stub}
    build: ./sidecars/datamaster
    profiles: ["sidecars"]
    networks:
      - workspaceos
    ports:
      - "8800:8800"
    env_file:
      - path: ./sidecars/datamaster/.env
        required: false
    restart: unless-stopped

volumes:
  postgres_data:
  backend_data: