docker-compose.yml

services:
  mongodb:
    image: mongo:8.0
    container_name: hyac_mongodb
    hostname: mongodb
    restart: unless-stopped
    ports:
      - "27017:27017"
    environment:
      MONGO_INITDB_ROOT_USERNAME: ${MONGODB_USERNAME}
      MONGO_INITDB_ROOT_PASSWORD: ${MONGODB_PASSWORD}
    command:
      - mongod
      - --replSet
      - rs0
      - --keyFile
      - /etc/mongo-keyfile
      - --bind_ip_all
      - --auth
    volumes:
      - mongodb_data:/data/db
      - ./mongo-keyfile:/etc/mongo-keyfile:ro
    networks:
      - hyac_network
    healthcheck:
      test: ["CMD-SHELL", "mongosh --quiet -u \"$${MONGO_INITDB_ROOT_USERNAME}\" -p \"$${MONGO_INITDB_ROOT_PASSWORD}\" --eval \"db.adminCommand({ ping: 1 }).ok\" | grep 1 >/dev/null"]
      interval: 5s
      timeout: 5s
      retries: 60
  mongo-init:
    image: mongo:8.0
    container_name: hyac_mongo_init
    depends_on:
      mongodb:
        condition: service_healthy
    restart: "no"
    environment:
      MONGODB_RS_HOST: mongodb:27017
      MONGODB_USERNAME: ${MONGODB_USERNAME}
      MONGODB_PASSWORD: ${MONGODB_PASSWORD}
    volumes:
      - ./scripts/init-replset.sh:/init-replset.sh:ro
    entrypoint: ["/bin/sh", "/init-replset.sh"]
    networks:
      - hyac_network
  rustfs:
    image: rustfs/rustfs:latest
    container_name: hyac_rustfs
    restart: unless-stopped
    command: ["/data"]
    ports:
    - 9000:9000
    - 9001:9001
    environment:
      RUSTFS_ACCESS_KEY: ${S3_ACCESS_KEY}
      RUSTFS_SECRET_KEY: ${S3_SECRET_KEY}
      RUSTFS_ADDRESS: "0.0.0.0:9000"
      RUSTFS_CONSOLE_ADDRESS: "0.0.0.0:9001"
      RUSTFS_CONSOLE_ENABLE: "true"
    volumes:
    - /etc/localtime:/etc/localtime:ro
    - rustfs_data:/data
    networks:
    - hyac_network
    healthcheck:
      test:
        [
          "CMD-SHELL",
          "status=$$(curl -s -o /dev/null -w '%{http_code}' http://127.0.0.1:9000/); test \"$$status\" = \"403\" -o \"$$status\" = \"200\"",
        ]
      interval: 5s
      timeout: 10s
      retries: 10
      start_period: 10s
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.hyac-rustfs.rule=Host(`oss.${DOMAIN_NAME}`)"
      - "traefik.http.routers.hyac-rustfs.entrypoints=websecure"
      - "traefik.http.routers.hyac-rustfs.tls.certresolver=myresolver"
      - "traefik.http.services.hyac-rustfs.loadbalancer.server.port=9000"
      - "traefik.http.services.hyac-rustfs.loadbalancer.passhostheader=true"
  traefik:
    image: "traefik:v3.5.0"
    container_name: "hyac_traefik"
    restart: unless-stopped
    command:
      - "--api.insecure=true"
      - "--api.dashboard=true"
      - "--entrypoints.web.address=:80"
      - "--entrypoints.websecure.address=:443"
      - "--providers.docker=true"
      - "--providers.docker.exposedbydefault=false"
      - "--providers.file.directory=/etc/traefik/dynamic"
      - "--providers.file.watch=true"
      - "--certificatesresolvers.myresolver.acme.email=${EMAIL_ADDRESS}"
      - "--certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json"
      - "--certificatesresolvers.myresolver.acme.httpchallenge.entrypoint=web"
    ports:
      - "80:80"
      - "443:443"
      - "8080:8080"
    volumes:
      - "/var/run/docker.sock:/var/run/docker.sock:ro"
      - "./traefik/letsencrypt:/letsencrypt"
      - "./traefik/dynamic:/etc/traefik/dynamic"
    networks:
      - hyac_network
  server:
    build:
      context: ./server
    image: wicos/hyac_server:${SERVER_IMAGE_TAG:-latest}
    container_name: hyac_server
    restart: unless-stopped
    environment:
      DOMAIN_NAME: ${DOMAIN_NAME}
      EMAIL_ADDRESS: ${EMAIL_ADDRESS}
      MONGODB_USERNAME: ${MONGODB_USERNAME}
      MONGODB_PASSWORD: ${MONGODB_PASSWORD}
      S3_ACCESS_KEY: ${S3_ACCESS_KEY}
      S3_SECRET_KEY: ${S3_SECRET_KEY}
      S3_INTERNAL_ENDPOINT: ${S3_INTERNAL_ENDPOINT:-rustfs:9000}
      S3_EXTERNAL_ENDPOINT: ${S3_EXTERNAL_ENDPOINT:-oss.${DOMAIN_NAME}}
      S3_SECURE_INTERNAL: ${S3_SECURE_INTERNAL:-false}
      S3_SECURE_EXTERNAL: ${S3_SECURE_EXTERNAL:-true}
      S3_PUBLIC_BASE_URL: ${S3_PUBLIC_BASE_URL:-https://oss.${DOMAIN_NAME}}
      S3_REGION: ${S3_REGION:-us-east-1}
      SECRET_KEY: ${SECRET_KEY}
      DEV_MODE: "false"
      APP_CODE_PATH_ON_HOST: ${APP_CODE_PATH_ON_HOST}
      DEMO_MODE: ${DEMO_MODE}
      LSP_MODE: ${LSP_MODE:-legacy}
      LSP_SIDECAR_URL: ${LSP_SIDECAR_URL:-ws://hyac_lsp_sidecar:9002/lsp}
      LSP_SIDECAR_TIMEOUT_SECONDS: ${LSP_SIDECAR_TIMEOUT_SECONDS:-10}
      LSP_SIDECAR_FALLBACK_LEGACY: ${LSP_SIDECAR_FALLBACK_LEGACY:-true}
    depends_on:
      mongodb:
        condition: service_healthy
      rustfs:
        condition: service_healthy
    volumes:
    - /etc/localtime:/etc/localtime:ro
    - /var/run/docker.sock:/var/run/docker.sock
    - ./traefik/dynamic:/traefik/dynamic
    networks:
    - hyac_network
    healthcheck:
      test: ["CMD", "python", "/server/healthcheck.py"]
      interval: 5s
      timeout: 10s
      retries: 10
      start_period: 10s
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.hyac-server.rule=Host(`server.${DOMAIN_NAME}`)"
      - "traefik.http.routers.hyac-server.entrypoints=websecure"
      - "traefik.http.routers.hyac-server.tls.certresolver=myresolver"
      - "traefik.http.services.hyac-server.loadbalancer.server.port=8000"
  web:
    build:
      context: ./web
      dockerfile: Dockerfile
    image: wicos/hyac_web:${WEB_IMAGE_TAG:-latest}
    container_name: hyac_web
    restart: unless-stopped
    environment:
      VITE_SERVICE_BASE_URL: "https://server.${DOMAIN_NAME}"
    networks:
      - hyac_network
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.hyac-web.rule=Host(`console.${DOMAIN_NAME}`)"
      - "traefik.http.routers.hyac-web.entrypoints=websecure"
      - "traefik.http.routers.hyac-web.tls.certresolver=myresolver"
      - "traefik.http.services.hyac-web.loadbalancer.server.port=80"
      - "traefik.http.services.hyac-web.loadbalancer.passhostheader=true"
  app:
    build:
      context: ./app
    image: wicos/hyac_app:${APP_IMAGE_TAG:-latest}
    command: ["echo", "Hyac App image built. This container does not need to run."]
    restart: "no"
    networks:
      - hyac_network
  lsp-sidecar:
    build:
      context: ./app
    image: wicos/hyac_lsp_sidecar:${APP_IMAGE_TAG:-latest}
    container_name: hyac_lsp_sidecar
    command: ["uvicorn", "lsp_sidecar.main:app", "--host", "0.0.0.0", "--port", "9002"]
    restart: unless-stopped
    networks:
      - hyac_network

networks:
  hyac_network:
    driver: bridge
volumes:
  mongodb_data:
    driver: local
  rustfs_data:
    driver: local