docker-compose.yml

name: astraflow

services:
  redis:
    image: redis:7-alpine
    restart: unless-stopped
    command: redis-server --appendonly yes
    ports:
      - "${ASTRAFLOW_REDIS_PORT:-6379}:6379"
    volumes:
      - redis_data:/data
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 5s
      retries: 12

  etcd:
    image: quay.io/coreos/etcd:v3.5.18
    restart: unless-stopped
    environment:
      ETCD_AUTO_COMPACTION_MODE: revision
      ETCD_AUTO_COMPACTION_RETENTION: "1000"
      ETCD_QUOTA_BACKEND_BYTES: "4294967296"
      ETCD_SNAPSHOT_COUNT: "50000"
    command:
      [
        "etcd",
        "--advertise-client-urls=http://etcd:2379",
        "--listen-client-urls=http://0.0.0.0:2379",
        "--data-dir=/etcd",
      ]
    volumes:
      - milvus_etcd_data:/etcd
    healthcheck:
      test: ["CMD", "etcdctl", "endpoint", "health"]
      interval: 10s
      timeout: 5s
      retries: 12

  minio:
    image: minio/minio:RELEASE.2023-03-20T20-16-18Z
    restart: unless-stopped
    environment:
      MINIO_ROOT_USER: ${MINIO_ROOT_USER:-minioadmin}
      MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD:-minioadmin}
    command: minio server /minio_data --console-address ":9001"
    volumes:
      - milvus_minio_data:/minio_data
    healthcheck:
      test:
        [
          "CMD",
          "curl",
          "-f",
          "http://localhost:9000/minio/health/live",
        ]
      interval: 10s
      timeout: 5s
      retries: 12

  milvus:
    image: milvusdb/milvus:v2.5.10
    restart: unless-stopped
    command: ["milvus", "run", "standalone"]
    environment:
      ETCD_ENDPOINTS: etcd:2379
      MINIO_ADDRESS: minio:9000
    depends_on:
      etcd:
        condition: service_healthy
      minio:
        condition: service_healthy
    ports:
      - "${ASTRAFLOW_MILVUS_PORT:-19530}:19530"
      - "${ASTRAFLOW_MILVUS_METRICS_PORT:-9091}:9091"
    volumes:
      - milvus_data:/var/lib/milvus
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:9091/healthz"]
      interval: 10s
      timeout: 5s
      retries: 24
      start_period: 30s

  workspace-init:
    image: alpine:3.20
    restart: "no"
    command:
      [
        "sh",
        "-c",
        "mkdir -p /app/.astra_workspace/sessions && chown -R 10001:10001 /app/.astra_workspace",
      ]
    volumes:
      - astra_workspace:/app/.astra_workspace

  sandbox-service:
    build:
      context: .
      dockerfile: Dockerfile.sandbox
    restart: unless-stopped
    user: "10001:10001"
    read_only: true
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
    pids_limit: 128
    mem_limit: 512m
    cpus: 1.0
    tmpfs:
      - /tmp:size=64m,mode=1777,uid=10001,gid=10001
    env_file:
      - .env
    environment:
      ASTRAFLOW_SANDBOX_SERVICE_HOST: 0.0.0.0
      ASTRAFLOW_SANDBOX_SERVICE_PORT: 8090
      ASTRAFLOW_SANDBOX_SERVICE_TOKEN: ${ASTRAFLOW_SANDBOX_SERVICE_TOKEN:-local-sandbox-token}
      ASTRAFLOW_SESSION_WORKSPACES_DIR: /app/.astra_workspace/sessions
      ASTRAFLOW_SESSION_WORKSPACE_MAX_FILE_CHARS: ${ASTRAFLOW_SESSION_WORKSPACE_MAX_FILE_CHARS:-120000}
      ASTRAFLOW_SESSION_WORKSPACE_MAX_READ_BYTES: ${ASTRAFLOW_SESSION_WORKSPACE_MAX_READ_BYTES:-10485760}
      ASTRAFLOW_SESSION_WORKSPACE_MAX_WRITE_BYTES: ${ASTRAFLOW_SESSION_WORKSPACE_MAX_WRITE_BYTES:-10485760}
      ASTRAFLOW_SESSION_WORKSPACE_MAX_TOTAL_BYTES: ${ASTRAFLOW_SESSION_WORKSPACE_MAX_TOTAL_BYTES:-104857600}
      ASTRAFLOW_SESSION_WORKSPACE_MAX_LIST_ENTRIES: ${ASTRAFLOW_SESSION_WORKSPACE_MAX_LIST_ENTRIES:-2000}
      PYTHON_WASI_WASM_PATH: /opt/wasm-interpreters/python-3.11.4.wasm
      ASTRAFLOW_SANDBOX_WASI_FUEL: ${ASTRAFLOW_SANDBOX_WASI_FUEL:-1000000000}
      ASTRAFLOW_PYTHON_EXECUTOR_MAX_CODE_CHARS: ${ASTRAFLOW_PYTHON_EXECUTOR_MAX_CODE_CHARS:-20000}
      ASTRAFLOW_PYTHON_EXECUTOR_MAX_OUTPUT_BYTES: ${ASTRAFLOW_PYTHON_EXECUTOR_MAX_OUTPUT_BYTES:-65536}
      ASTRAFLOW_PYTHON_EXECUTOR_MAX_TIMEOUT_SECONDS: ${ASTRAFLOW_PYTHON_EXECUTOR_MAX_TIMEOUT_SECONDS:-60}
    volumes:
      - astra_workspace:/app/.astra_workspace
    depends_on:
      workspace-init:
        condition: service_completed_successfully
    healthcheck:
      test:
        [
          "CMD",
          "python",
          "-c",
          "import urllib.request; urllib.request.urlopen('http://localhost:8090/health', timeout=5).read()",
        ]
      interval: 10s
      timeout: 5s
      retries: 12
      start_period: 20s

  api:
    build:
      context: .
      dockerfile: Dockerfile.backend
    restart: unless-stopped
    env_file:
      - .env
    environment:
      API_HOST: 0.0.0.0
      API_PORT: 8080
      STATE_BACKEND: redis
      REDIS_URL: redis://redis:6379/0
      TASK_TTL_SECONDS: ${TASK_TTL_SECONDS:-0}
      WORKFLOW_SNAPSHOT_ENABLED: ${WORKFLOW_SNAPSHOT_ENABLED:-true}
      WORKFLOW_SNAPSHOT_TTL_SECONDS: ${WORKFLOW_SNAPSHOT_TTL_SECONDS:-0}
      WORKFLOW_SNAPSHOT_MAX_HISTORY: ${WORKFLOW_SNAPSHOT_MAX_HISTORY:-50}
      MILVUS_URI: http://milvus:19530
      MEMORY_ENABLED: ${MEMORY_ENABLED:-true}
      MEMORY_COLLECTION_SESSION: ${MEMORY_COLLECTION_SESSION:-session_memory}
      MEMORY_EMBEDDING_DIM: ${MEMORY_EMBEDDING_DIM:-128}
      MEMORY_TOP_K: ${MEMORY_TOP_K:-5}
      EMBEDDING_PROVIDER: ${EMBEDDING_PROVIDER:-deterministic}
      EMBEDDING_API_KEY: ${EMBEDDING_API_KEY:-}
      EMBEDDING_BASE_URL: ${EMBEDDING_BASE_URL:-https://api.openai.com/v1}
      EMBEDDING_MODEL: ${EMBEDDING_MODEL:-text-embedding-3-small}
      EMBEDDING_CACHE_ENABLED: ${EMBEDDING_CACHE_ENABLED:-true}
      EMBEDDING_REDIS_CACHE_ENABLED: ${EMBEDDING_REDIS_CACHE_ENABLED:-true}
      EMBEDDING_REDIS_CACHE_TTL_SECONDS: ${EMBEDDING_REDIS_CACHE_TTL_SECONDS:-86400}
      EMBEDDING_REDIS_CACHE_NAMESPACE: ${EMBEDDING_REDIS_CACHE_NAMESPACE:-astraflow:embedding}
      MOCK_LLM_ENABLED: ${MOCK_LLM_ENABLED:-true}
      ASTRAFLOW_SESSION_WORKSPACES_DIR: /app/.astra_workspace/sessions
      ASTRAFLOW_SESSION_WORKSPACE_MAX_FILE_CHARS: ${ASTRAFLOW_SESSION_WORKSPACE_MAX_FILE_CHARS:-120000}
      ASTRAFLOW_SESSION_WORKSPACE_MAX_READ_BYTES: ${ASTRAFLOW_SESSION_WORKSPACE_MAX_READ_BYTES:-10485760}
      ASTRAFLOW_SESSION_WORKSPACE_MAX_WRITE_BYTES: ${ASTRAFLOW_SESSION_WORKSPACE_MAX_WRITE_BYTES:-10485760}
      ASTRAFLOW_SESSION_WORKSPACE_MAX_TOTAL_BYTES: ${ASTRAFLOW_SESSION_WORKSPACE_MAX_TOTAL_BYTES:-104857600}
      ASTRAFLOW_SESSION_WORKSPACE_MAX_LIST_ENTRIES: ${ASTRAFLOW_SESSION_WORKSPACE_MAX_LIST_ENTRIES:-2000}
      ASTRAFLOW_TOOL_REGISTRY_PATH: /app/.astra_workspace/tool_registry.json
      ASTRAFLOW_TOOL_APPROVAL_ENABLED: ${ASTRAFLOW_TOOL_APPROVAL_ENABLED:-true}
      ASTRAFLOW_TOOL_APPROVAL_TTL_SECONDS: ${ASTRAFLOW_TOOL_APPROVAL_TTL_SECONDS:-86400}
      ASTRAFLOW_TOOL_AUDIT_MAX_EVENTS: ${ASTRAFLOW_TOOL_AUDIT_MAX_EVENTS:-1000}
      ASTRAFLOW_SANDBOX_SERVICE_URL: http://sandbox-service:8090
      ASTRAFLOW_SANDBOX_SERVICE_TIMEOUT_SECONDS: ${ASTRAFLOW_SANDBOX_SERVICE_TIMEOUT_SECONDS:-35}
      ASTRAFLOW_SANDBOX_SERVICE_TOKEN: ${ASTRAFLOW_SANDBOX_SERVICE_TOKEN:-local-sandbox-token}
      ASTRAFLOW_PYTHON_EXECUTOR_ENABLED: ${ASTRAFLOW_PYTHON_EXECUTOR_ENABLED:-true}
      ASTRAFLOW_PYTHON_EXECUTOR_DANGEROUS: ${ASTRAFLOW_PYTHON_EXECUTOR_DANGEROUS:-true}
      ASTRAFLOW_PYTHON_EXECUTOR_EXPOSED_BY_DEFAULT: ${ASTRAFLOW_PYTHON_EXECUTOR_EXPOSED_BY_DEFAULT:-false}
      ASTRAFLOW_PYTHON_EXECUTOR_TIMEOUT_SECONDS: ${ASTRAFLOW_PYTHON_EXECUTOR_TIMEOUT_SECONDS:-30}
      ASTRAFLOW_PYTHON_EXECUTOR_MAX_TIMEOUT_SECONDS: ${ASTRAFLOW_PYTHON_EXECUTOR_MAX_TIMEOUT_SECONDS:-60}
      ASTRAFLOW_PYTHON_EXECUTOR_MAX_CODE_CHARS: ${ASTRAFLOW_PYTHON_EXECUTOR_MAX_CODE_CHARS:-20000}
      ASTRAFLOW_PYTHON_EXECUTOR_MAX_OUTPUT_BYTES: ${ASTRAFLOW_PYTHON_EXECUTOR_MAX_OUTPUT_BYTES:-65536}
      ASTRAFLOW_PYTHON_EXECUTOR_RATE_LIMIT_PER_MINUTE: ${ASTRAFLOW_PYTHON_EXECUTOR_RATE_LIMIT_PER_MINUTE:-10}
    depends_on:
      workspace-init:
        condition: service_completed_successfully
      redis:
        condition: service_healthy
      milvus:
        condition: service_healthy
      sandbox-service:
        condition: service_healthy
    ports:
      - "${ASTRAFLOW_API_PORT:-8080}:8080"
    volumes:
      - astra_workspace:/app/.astra_workspace
    healthcheck:
      test:
        [
          "CMD",
          "python",
          "-c",
          "import urllib.request; urllib.request.urlopen('http://localhost:8080/health', timeout=5).read()",
        ]
      interval: 10s
      timeout: 5s
      retries: 12
      start_period: 20s

  web:
    build:
      context: ./desktop
      dockerfile: Dockerfile
      args:
        NEXT_PUBLIC_API_URL: ${NEXT_PUBLIC_API_URL:-http://localhost:8080}
    restart: unless-stopped
    depends_on:
      api:
        condition: service_healthy
    ports:
      - "${ASTRAFLOW_WEB_PORT:-3000}:80"

volumes:
  astra_workspace:
  redis_data:
  milvus_etcd_data:
  milvus_minio_data:
  milvus_data: