docker-compose.yml

x-logging: &default-logging
  driver: json-file
  options:
    max-size: "10m"
    max-file: "5"

services:
  postgres:
    image: pgvector/pgvector:pg16
    container_name: agente_db
    environment:
      POSTGRES_USER: ${POSTGRES_USER:?Set POSTGRES_USER in .env}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:?Set POSTGRES_PASSWORD in .env}
      POSTGRES_DB: ${POSTGRES_DB:-proyecto_db}
    volumes:
      - postgres_data:/var/lib/postgresql/data
      - ./init.sql:/docker-entrypoint-initdb.d/001-project-schema.sql:ro
    ports:
      - "${POSTGRES_BIND_ADDRESS:-127.0.0.1}:${POSTGRES_PORT:-5432}:5432"
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U \"$${POSTGRES_USER}\" -d \"$${POSTGRES_DB}\""]
      interval: 10s
      timeout: 5s
      retries: 10
      start_period: 20s
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    logging: *default-logging
    networks:
      - default

  redis:
    image: redis:7-alpine
    container_name: redis_cache
    command: ["redis-server", "--appendonly", "yes"]
    volumes:
      - redis_data:/data
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 5s
      retries: 10
      start_period: 10s
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    logging: *default-logging
    networks:
      - default

  n8n:
    image: n8nio/n8n:${N8N_VERSION:?Set N8N_VERSION to an exact tested release in .env}
    container_name: n8n
    ports:
      - "${N8N_BIND_ADDRESS:-127.0.0.1}:${N8N_HOST_PORT:-5678}:5678"
    environment:
      NODE_ENV: ${NODE_ENV:-production}
      DB_TYPE: postgresdb
      DB_POSTGRESDB_HOST: postgres
      DB_POSTGRESDB_PORT: 5432
      DB_POSTGRESDB_DATABASE: ${POSTGRES_DB:-proyecto_db}
      DB_POSTGRESDB_USER: ${POSTGRES_USER:?Set POSTGRES_USER in .env}
      DB_POSTGRESDB_PASSWORD: ${POSTGRES_PASSWORD:?Set POSTGRES_PASSWORD in .env}
      DB_POSTGRESDB_SCHEMA: ${N8N_DB_SCHEMA:-n8n}
      DB_POSTGRESDB_POOL_SIZE: ${N8N_DB_POOL_SIZE:-5}
      N8N_HOST: ${N8N_HOST:?Set N8N_HOST in .env}
      N8N_PORT: 5678
      N8N_PROTOCOL: ${N8N_PROTOCOL:-https}
      WEBHOOK_URL: ${WEBHOOK_URL:?Set WEBHOOK_URL in .env}
      N8N_ENCRYPTION_KEY: ${N8N_ENCRYPTION_KEY:?Set N8N_ENCRYPTION_KEY in .env}
      N8N_BASIC_AUTH_ACTIVE: ${N8N_BASIC_AUTH_ACTIVE:-true}
      N8N_BASIC_AUTH_USER: ${N8N_BASIC_AUTH_USER:?Set N8N_BASIC_AUTH_USER in .env}
      N8N_BASIC_AUTH_PASSWORD: ${N8N_BASIC_AUTH_PASSWORD:?Set N8N_BASIC_AUTH_PASSWORD in .env}
      N8N_SECURE_COOKIE: ${N8N_SECURE_COOKIE:-true}
      N8N_SAMESITE_COOKIE: ${N8N_SAMESITE_COOKIE:-lax}
      N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS: "true"
      N8N_BLOCK_FILE_ACCESS_TO_N8N_FILES: "true"
      N8N_GIT_NODE_DISABLE_BARE_REPOS: "true"
      N8N_RUNNERS_MODE: ${N8N_RUNNERS_MODE:-internal}
      N8N_METRICS: ${N8N_METRICS:-true}
      QUEUE_HEALTH_CHECK_ACTIVE: ${QUEUE_HEALTH_CHECK_ACTIVE:-true}
      EXECUTIONS_DATA_PRUNE: ${EXECUTIONS_DATA_PRUNE:-true}
      EXECUTIONS_DATA_MAX_AGE: ${EXECUTIONS_DATA_MAX_AGE:-336}
      EXECUTIONS_DATA_PRUNE_MAX_COUNT: ${EXECUTIONS_DATA_PRUNE_MAX_COUNT:-10000}
      N8N_TEMPLATES_ENABLED: ${N8N_TEMPLATES_ENABLED:-false}
      GENERIC_TIMEZONE: ${GENERIC_TIMEZONE:-America/Guayaquil}
      TZ: ${TZ:-America/Guayaquil}
      TRELLO_API_KEY: ${TRELLO_API_KEY:?Set TRELLO_API_KEY in .env}
      TRELLO_TOKEN: ${TRELLO_TOKEN:?Set TRELLO_TOKEN in .env}
      TRELLO_BOARD_ID: ${TRELLO_BOARD_ID:?Set TRELLO_BOARD_ID in .env}
      GITHUB_TOKEN: ${GITHUB_TOKEN:?Set GITHUB_TOKEN in .env}
      GITHUB_TOKEN_BACKEND: ${GITHUB_TOKEN_BACKEND:-${GITHUB_TOKEN}}
      GITHUB_TOKEN_FRONTEND: ${GITHUB_TOKEN_FRONTEND:-${GITHUB_TOKEN}}
      GITHUB_OWNER: ${GITHUB_OWNER:-${GITHUB_OWNER_BACKEND}}
      GITHUB_OWNER_BACKEND: ${GITHUB_OWNER_BACKEND:?Set GITHUB_OWNER_BACKEND in .env}
      GITHUB_OWNER_FRONTEND: ${GITHUB_OWNER_FRONTEND:-${GITHUB_OWNER:-${GITHUB_OWNER_BACKEND}}}
      GITHUB_REPO_BACKEND: ${GITHUB_REPO_BACKEND:?Set GITHUB_REPO_BACKEND in .env}
      GITHUB_REPO_FRONTEND: ${GITHUB_REPO_FRONTEND:?Set GITHUB_REPO_FRONTEND in .env}
      GEMINI_API_KEY: ${GEMINI_API_KEY:?Set GEMINI_API_KEY in .env}
      DISCORD_WEBHOOK_URL: ${DISCORD_WEBHOOK_URL:?Set DISCORD_WEBHOOK_URL in .env}
      DISCORD_WEBHOOK_URL_CHAT: ${DISCORD_WEBHOOK_URL_CHAT:-}
      DISCORD_BOT_TOKEN: ${DISCORD_BOT_TOKEN:-}
      DISCORD_CLIENT_ID: ${DISCORD_CLIENT_ID:-}
      DISCORD_GUILD_ID: ${DISCORD_GUILD_ID:-}
      DISCORD_MEETING_VOICE_CHANNEL_ID: ${DISCORD_MEETING_VOICE_CHANNEL_ID:-}
      PM_MEETING_DURATION_MINUTES: ${PM_MEETING_DURATION_MINUTES:-45}
      DISCORD_CHANNEL_PM: ${DISCORD_CHANNEL_PM:-}
      DISCORD_CHANNEL_TAREAS: ${DISCORD_CHANNEL_TAREAS:-}
      DISCORD_CHANNEL_AVANCES: ${DISCORD_CHANNEL_AVANCES:-}
      DISCORD_CHANNEL_BLOQUEOS: ${DISCORD_CHANNEL_BLOQUEOS:-}
      DISCORD_CHANNEL_REUNIONES: ${DISCORD_CHANNEL_REUNIONES:-}
      DISCORD_CHANNEL_ENTREGABLES: ${DISCORD_CHANNEL_ENTREGABLES:-}
      DISCORD_CHANNEL_RIESGOS: ${DISCORD_CHANNEL_RIESGOS:-}
      DISCORD_CHANNEL_REPORTES: ${DISCORD_CHANNEL_REPORTES:-}
      DISCORD_CHANNEL_BOT_LOG: ${DISCORD_CHANNEL_BOT_LOG:-}
      DISCORD_CHANNEL_ADMIN: ${DISCORD_CHANNEL_ADMIN:-}
      PM_STORAGE_TYPE: ${PM_STORAGE_TYPE:-postgres}
      PM_APPROVAL_SECRET: ${PM_APPROVAL_SECRET:-}
      N8N_PM_WEBHOOK: ${N8N_PM_WEBHOOK:-http://n8n:5678/webhook/pm-discord-entrada}
      PM_FAST_PATH_ENABLED: ${PM_FAST_PATH_ENABLED:-true}
      PM_FAST_TIMEOUT_MS: ${PM_FAST_TIMEOUT_MS:-30000}
      PM_CHANNEL_IDS: ${PM_CHANNEL_IDS:-}
      TRELLO_DEFAULT_LIST_ID: ${TRELLO_DEFAULT_LIST_ID:-}
      TRELLO_MEMBER_MAP_JSON: "${TRELLO_MEMBER_MAP_JSON:-{}}"
      PM_TEAM_DISCORD_MAP_JSON: "${PM_TEAM_DISCORD_MAP_JSON:-{}}"
      PM_GOOGLE_SHEET_ID: ${PM_GOOGLE_SHEET_ID:-}
      PM_NOTION_DATABASE_TASKS: ${PM_NOTION_DATABASE_TASKS:-}
      PM_NOTION_DATABASE_RISKS: ${PM_NOTION_DATABASE_RISKS:-}
      PM_NOTION_DATABASE_DECISIONS: ${PM_NOTION_DATABASE_DECISIONS:-}
      PM_TIMEZONE: ${PM_TIMEZONE:-America/Guayaquil}
      N8N_ENV: ${N8N_ENV:-production}
      LOG_LEVEL: ${LOG_LEVEL:-info}
      SMTP_HOST: ${SMTP_HOST:-}
      SMTP_PORT: ${SMTP_PORT:-587}
      SMTP_SECURE: ${SMTP_SECURE:-false}
      SMTP_USER: ${SMTP_USER:-}
      SMTP_PASS: ${SMTP_PASS:-}
      SMTP_FROM_NAME: ${SMTP_FROM_NAME:-PetSafe PM AI}
      SMTP_FROM_EMAIL: ${SMTP_FROM_EMAIL:-}
      GOTENBERG_URL: ${GOTENBERG_URL:-http://gotenberg:3000}
      # Keep false until workflows no longer depend on $env in expressions.
      N8N_BLOCK_ENV_ACCESS_IN_NODE: ${N8N_BLOCK_ENV_ACCESS_IN_NODE:-false}
    volumes:
      - n8n_data:/home/node/.n8n
      - ${N8N_WORKFLOWS_IMPORT_DIR:-./bot}:${N8N_WORKFLOWS_CONTAINER_DIR:-/workflows/import}:ro
      - ./scripts:/workflows/scripts:ro
      - ./scripts:/workflows/scripts:ro
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
    extra_hosts:
      - host.docker.internal:host-gateway
    healthcheck:
      test:
        [
          "CMD-SHELL",
          "node -e \"fetch('http://127.0.0.1:5678/healthz/readiness').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))\""
        ]
      interval: 20s
      timeout: 10s
      retries: 12
      start_period: 60s
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    logging: *default-logging
    networks:
      - default

  n8n-workflow-import:
    image: n8nio/n8n:${N8N_VERSION:?Set N8N_VERSION to an exact tested release in .env}
    container_name: n8n_workflow_import
    profiles:
      - tools
    user: root
    environment:
      NODE_ENV: ${NODE_ENV:-production}
      DB_TYPE: postgresdb
      DB_POSTGRESDB_HOST: postgres
      DB_POSTGRESDB_PORT: 5432
      DB_POSTGRESDB_DATABASE: ${POSTGRES_DB:-proyecto_db}
      DB_POSTGRESDB_USER: ${POSTGRES_USER:?Set POSTGRES_USER in .env}
      DB_POSTGRESDB_PASSWORD: ${POSTGRES_PASSWORD:?Set POSTGRES_PASSWORD in .env}
      DB_POSTGRESDB_SCHEMA: ${N8N_DB_SCHEMA:-n8n}
      N8N_ENCRYPTION_KEY: ${N8N_ENCRYPTION_KEY:?Set N8N_ENCRYPTION_KEY in .env}
      GENERIC_TIMEZONE: ${GENERIC_TIMEZONE:-America/Guayaquil}
      TZ: ${TZ:-America/Guayaquil}
      N8N_WORKFLOW_GROUPING_MODE: ${N8N_WORKFLOW_GROUPING_MODE:-prefix}
    volumes:
      - n8n_data:/home/node/.n8n
      - ${N8N_WORKFLOWS_IMPORT_DIR:-./bot}:${N8N_WORKFLOWS_CONTAINER_DIR:-/workflows/import}:ro
      - ./scripts:/workflows/scripts:ro
    depends_on:
      postgres:
        condition: service_healthy
    entrypoint: /bin/sh
    command:
      - -lc
      - |
        set -eu
        node /workflows/scripts/prepare_n8n_workflow_import.js "${N8N_WORKFLOWS_CONTAINER_DIR:-/workflows/import}" /tmp/n8n-workflows-import
        n8n import:workflow --separate --input=/tmp/n8n-workflows-import
    restart: "no"
    security_opt:
      - no-new-privileges:true
    logging: *default-logging
    networks:
      - default

  n8n-workflow-organize:
    image: postgres:18-alpine
    container_name: n8n_workflow_organize
    profiles:
      - tools
    environment:
      PGPASSWORD: ${POSTGRES_PASSWORD:?Set POSTGRES_PASSWORD in .env}
    volumes:
      - ./scripts/organize_n8n_workflow_folders.sql:/scripts/organize_n8n_workflow_folders.sql:ro
      - ./scripts/organize_n8n_workflow_tags.sql:/scripts/organize_n8n_workflow_tags.sql:ro
    depends_on:
      postgres:
        condition: service_healthy
    entrypoint: /bin/sh
    command:
      - -lc
      - |
        psql -h postgres -U "${POSTGRES_USER:?Set POSTGRES_USER in .env}" -d "${POSTGRES_DB:-proyecto_db}" -v ON_ERROR_STOP=1 -f /scripts/organize_n8n_workflow_folders.sql
        psql -h postgres -U "${POSTGRES_USER:?Set POSTGRES_USER in .env}" -d "${POSTGRES_DB:-proyecto_db}" -v ON_ERROR_STOP=1 -f /scripts/organize_n8n_workflow_tags.sql
    restart: "no"
    security_opt:
      - no-new-privileges:true
    logging: *default-logging
    networks:
      - default

  bot-bridge:
    build:
      context: ./bot-bridge
    container_name: bot_bridge
    environment:
      DISCORD_BOT_TOKEN: ${DISCORD_BOT_TOKEN:-}
      N8N_WEBHOOK: ${N8N_WEBHOOK:-http://n8n:5678/webhook/discord-chat-v2}
      N8N_PM_WEBHOOK: ${N8N_PM_WEBHOOK:-http://n8n:5678/webhook/wf-pm-discord-entrada/pm%2520discord%2520webhook/pm-discord-entrada}
      REDIS_URL: ${REDIS_URL:-redis://redis:6379/0}
      PORT: ${BOT_BRIDGE_PORT:-3000}
      PM_FAST_PATH_ENABLED: ${PM_FAST_PATH_ENABLED:-true}
      PM_FAST_TIMEOUT_MS: ${PM_FAST_TIMEOUT_MS:-30000}
      PM_CHANNEL_IDS: ${PM_CHANNEL_IDS:-}
      DISCORD_CHANNEL_PM: ${DISCORD_CHANNEL_PM:-}
      DISCORD_CHANNEL_TAREAS: ${DISCORD_CHANNEL_TAREAS:-}
      DISCORD_CHANNEL_AVANCES: ${DISCORD_CHANNEL_AVANCES:-}
      DISCORD_CHANNEL_BLOQUEOS: ${DISCORD_CHANNEL_BLOQUEOS:-}
      DISCORD_CHANNEL_REPORTES: ${DISCORD_CHANNEL_REPORTES:-}
      DISCORD_CHANNEL_REUNIONES: ${DISCORD_CHANNEL_REUNIONES:-}
      DISCORD_CHANNEL_ENTREGABLES: ${DISCORD_CHANNEL_ENTREGABLES:-}
      DISCORD_CHANNEL_RIESGOS: ${DISCORD_CHANNEL_RIESGOS:-}
      DISCORD_CHANNEL_BOT_LOG: ${DISCORD_CHANNEL_BOT_LOG:-}
      DISCORD_CHANNEL_ADMIN: ${DISCORD_CHANNEL_ADMIN:-}
    ports:
      - "${BOT_BRIDGE_BIND_ADDRESS:-127.0.0.1}:${BOT_BRIDGE_PORT:-3000}:3000"
    depends_on:
      n8n:
        condition: service_healthy
      redis:
        condition: service_healthy
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    logging: *default-logging
    networks:
      - default

  gotenberg:
    image: gotenberg/gotenberg:8
    container_name: gotenberg
    ports:
      - "${GOTENBERG_BIND_ADDRESS:-127.0.0.1}:${GOTENBERG_PORT:-3001}:3000"
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    logging: *default-logging
    networks:
      - default

volumes:
  postgres_data:
  n8n_data:
  redis_data:

networks:
  default:
    name: automatizacion
    external: true