docker-compose.yml

services:
  nginx:
    image: nginx:1.27-alpine
    depends_on:
      - api
      - web
    ports:
      - "80:80"
    volumes:
      - ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro
    restart: unless-stopped

  web:
    build:
      context: ./frontend
      dockerfile: Dockerfile
      args:
        VITE_API_BASE: ${VITE_API_BASE:-/api}
        VITE_WS_BASE: ${VITE_WS_BASE:-/ws}
    restart: unless-stopped

  api:
    build:
      context: ./backend
      dockerfile: Dockerfile
    command: ["gunicorn", "-c", "gunicorn.conf.py", "wsgi:app"]
    environment:
      APP_ENV: ${APP_ENV:-production}
      FLASK_SECRET_KEY: ${FLASK_SECRET_KEY}
      JWT_SECRET_KEY: ${JWT_SECRET_KEY}
      MYSQL_HOST: ${MYSQL_HOST:-mysql}
      MYSQL_PORT: ${MYSQL_PORT:-3306}
      MYSQL_USER: ${MYSQL_USER}
      MYSQL_PASSWORD: ${MYSQL_PASSWORD}
      MYSQL_DATABASE: ${MYSQL_DATABASE}
      REDIS_URL: ${REDIS_URL}
      CELERY_BROKER_URL: ${CELERY_BROKER_URL}
      CELERY_RESULT_BACKEND: ${CELERY_RESULT_BACKEND}
      MINIO_ENDPOINT: ${MINIO_ENDPOINT}
      MINIO_PUBLIC_ENDPOINT: ${MINIO_PUBLIC_ENDPOINT}
      MINIO_ROOT_USER: ${MINIO_ROOT_USER}
      MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD}
      MINIO_BUCKET: ${MINIO_BUCKET}
      MINIO_SECURE: ${MINIO_SECURE:-false}
      AI_PROVIDER: ${AI_PROVIDER:-anthropic}
      AI_PROVIDER_FALLBACK: ${AI_PROVIDER_FALLBACK:-openai,deepseek,dashscope}
      ANTHROPIC_API_KEY: ${ANTHROPIC_API_KEY:-}
      OPENAI_API_KEY: ${OPENAI_API_KEY:-}
      OPENAI_BASE_URL: ${OPENAI_BASE_URL:-}
      DEEPSEEK_API_KEY: ${DEEPSEEK_API_KEY:-}
      DEEPSEEK_BASE_URL: ${DEEPSEEK_BASE_URL:-https://api.deepseek.com}
      DASHSCOPE_API_KEY: ${DASHSCOPE_API_KEY:-}
      AI_MODEL_ANTHROPIC: ${AI_MODEL_ANTHROPIC:-claude-sonnet-4-6}
      AI_MODEL_OPENAI: ${AI_MODEL_OPENAI:-gpt-4o-mini}
      AI_MODEL_DEEPSEEK: ${AI_MODEL_DEEPSEEK:-deepseek-chat}
      AI_MODEL_DASHSCOPE: ${AI_MODEL_DASHSCOPE:-qwen-max}
      SMTP_HOST: ${SMTP_HOST:-}
      SMTP_PORT: ${SMTP_PORT:-587}
      SMTP_USER: ${SMTP_USER:-}
      SMTP_PASSWORD: ${SMTP_PASSWORD:-}
      SMTP_FROM: ${SMTP_FROM:-no-reply@cotask.local}
      SMS_PROVIDER: ${SMS_PROVIDER:-stub}
      SMS_ACCESS_KEY: ${SMS_ACCESS_KEY:-}
      SMS_SECRET_KEY: ${SMS_SECRET_KEY:-}
      SMS_AUTH_SIGN_NAME: ${SMS_AUTH_SIGN_NAME:-速通互联验证平台}
      SMS_AUTH_TEMPLATE_CODE: ${SMS_AUTH_TEMPLATE_CODE:-100001}
      SMS_COUNTRY_CODE: ${SMS_COUNTRY_CODE:-86}
    depends_on:
      mysql:
        condition: service_healthy
      redis:
        condition: service_started
      minio:
        condition: service_started
    restart: unless-stopped

  worker:
    build:
      context: ./backend
      dockerfile: Dockerfile
    command: ["celery", "-A", "celery_worker.celery", "worker", "--loglevel=info", "--concurrency=4"]
    environment:
      APP_ENV: ${APP_ENV:-production}
      FLASK_SECRET_KEY: ${FLASK_SECRET_KEY}
      JWT_SECRET_KEY: ${JWT_SECRET_KEY}
      MYSQL_HOST: ${MYSQL_HOST:-mysql}
      MYSQL_PORT: ${MYSQL_PORT:-3306}
      MYSQL_USER: ${MYSQL_USER}
      MYSQL_PASSWORD: ${MYSQL_PASSWORD}
      MYSQL_DATABASE: ${MYSQL_DATABASE}
      REDIS_URL: ${REDIS_URL}
      CELERY_BROKER_URL: ${CELERY_BROKER_URL}
      CELERY_RESULT_BACKEND: ${CELERY_RESULT_BACKEND}
      MINIO_ENDPOINT: ${MINIO_ENDPOINT}
      MINIO_PUBLIC_ENDPOINT: ${MINIO_PUBLIC_ENDPOINT}
      MINIO_ROOT_USER: ${MINIO_ROOT_USER}
      MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD}
      MINIO_BUCKET: ${MINIO_BUCKET}
      AI_PROVIDER: ${AI_PROVIDER:-anthropic}
      AI_PROVIDER_FALLBACK: ${AI_PROVIDER_FALLBACK:-openai,deepseek,dashscope}
      ANTHROPIC_API_KEY: ${ANTHROPIC_API_KEY:-}
      OPENAI_API_KEY: ${OPENAI_API_KEY:-}
      OPENAI_BASE_URL: ${OPENAI_BASE_URL:-}
      DEEPSEEK_API_KEY: ${DEEPSEEK_API_KEY:-}
      DEEPSEEK_BASE_URL: ${DEEPSEEK_BASE_URL:-https://api.deepseek.com}
      DASHSCOPE_API_KEY: ${DASHSCOPE_API_KEY:-}
      AI_MODEL_ANTHROPIC: ${AI_MODEL_ANTHROPIC:-claude-sonnet-4-6}
      AI_MODEL_OPENAI: ${AI_MODEL_OPENAI:-gpt-4o-mini}
      AI_MODEL_DEEPSEEK: ${AI_MODEL_DEEPSEEK:-deepseek-chat}
      AI_MODEL_DASHSCOPE: ${AI_MODEL_DASHSCOPE:-qwen-max}
      SMTP_HOST: ${SMTP_HOST:-}
      SMTP_PORT: ${SMTP_PORT:-587}
      SMTP_USER: ${SMTP_USER:-}
      SMTP_PASSWORD: ${SMTP_PASSWORD:-}
      SMTP_FROM: ${SMTP_FROM:-no-reply@cotask.local}
    depends_on:
      mysql:
        condition: service_healthy
      redis:
        condition: service_started
    restart: unless-stopped

  beat:
    build:
      context: ./backend
      dockerfile: Dockerfile
    command: ["celery", "-A", "celery_worker.celery", "beat", "--loglevel=info"]
    environment:
      APP_ENV: ${APP_ENV:-production}
      MYSQL_HOST: ${MYSQL_HOST:-mysql}
      MYSQL_PORT: ${MYSQL_PORT:-3306}
      MYSQL_USER: ${MYSQL_USER}
      MYSQL_PASSWORD: ${MYSQL_PASSWORD}
      MYSQL_DATABASE: ${MYSQL_DATABASE}
      REDIS_URL: ${REDIS_URL}
      CELERY_BROKER_URL: ${CELERY_BROKER_URL}
      CELERY_RESULT_BACKEND: ${CELERY_RESULT_BACKEND}
    depends_on:
      mysql:
        condition: service_healthy
      redis:
        condition: service_started
    restart: unless-stopped

  mysql:
    image: mysql:8.0
    command:
      - --default-authentication-plugin=mysql_native_password
      - --character-set-server=utf8mb4
      - --collation-server=utf8mb4_unicode_ci
      - --ngram-token-size=2
      - --default-time-zone=+00:00
    environment:
      MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD}
      MYSQL_DATABASE: ${MYSQL_DATABASE}
      MYSQL_USER: ${MYSQL_USER}
      MYSQL_PASSWORD: ${MYSQL_PASSWORD}
    volumes:
      - mysql_data:/var/lib/mysql
    healthcheck:
      test: ["CMD", "mysqladmin", "ping", "-h", "localhost", "-u", "root", "-p${MYSQL_ROOT_PASSWORD}"]
      interval: 10s
      timeout: 5s
      retries: 10
    restart: unless-stopped

  redis:
    image: redis:7-alpine
    command: ["redis-server", "--appendonly", "yes"]
    volumes:
      - redis_data:/data
    restart: unless-stopped

  minio:
    image: minio/minio:latest
    command: server /data --console-address ":9001"
    environment:
      MINIO_ROOT_USER: ${MINIO_ROOT_USER}
      MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD}
      # Browser direct upload (frontend PUT to presigned URL on another port)
      MINIO_API_CORS_ALLOW_ORIGIN: '*'
    volumes:
      - minio_data:/data
    ports:
      - "9000:9000"
      - "9001:9001"
    restart: unless-stopped

  createbuckets:
    image: minio/mc:latest
    depends_on:
      - minio
    entrypoint: >
      /bin/sh -c "
      sleep 5;
      /usr/bin/mc alias set local http://minio:9000 ${MINIO_ROOT_USER} ${MINIO_ROOT_PASSWORD};
      /usr/bin/mc mb -p local/${MINIO_BUCKET} || true;
      /usr/bin/mc anonymous set download local/${MINIO_BUCKET} || true;
      exit 0;
      "

volumes:
  mysql_data:
  redis_data:
  minio_data: