compose.yml

services:
  wakapi:
    image: ghcr.io/muety/wakapi:latest
    container_name: wakapi
    restart: unless-stopped
    depends_on:
      postgres:
        condition: service_healthy
    ports:
      - "3000:3000"
    environment:
      ENVIRONMENT: production
      WAKAPI_PASSWORD_SALT: "${WAKAPI_PASSWORD_SALT}"
      WAKAPI_DB_TYPE: postgres
      WAKAPI_DB_HOST: postgres
      WAKAPI_DB_PORT: "5432"
      WAKAPI_DB_USER: wakapi
      WAKAPI_DB_PASSWORD: "${WAKAPI_DB_PASSWORD}"
      WAKAPI_DB_NAME: wakapi
      WAKAPI_DB_SSL: "false"
      WAKAPI_DB_MAX_CONNECTIONS: "10"
      WAKAPI_LISTEN_IPV4: "0.0.0.0"
      WAKAPI_LISTEN_IPV6: "-"
      WAKAPI_PUBLIC_URL: "${WAKAPI_PUBLIC_URL}"
      WAKAPI_TIMEOUT_SEC: "60"
      WAKAPI_INSECURE_COOKIES: "false"
      WAKAPI_ALLOW_SIGNUP: "true"
      WAKAPI_INVITE_CODES: "true"
      WAKAPI_SIGNUP_CAPTCHA: "true"
      WAKAPI_DISABLE_FRONTPAGE: "false"
      WAKAPI_SIGNUP_MAX_RATE: "50/1h"
      WAKAPI_LOGIN_MAX_RATE: "30/1m"
      WAKAPI_PASSWORD_RESET_MAX_RATE: "5/1h"
      WAKAPI_LEADERBOARD_ENABLED: "true"
      WAKAPI_LEADERBOARD_SCOPE: "7_days"
      WAKAPI_LEADERBOARD_REQUIRE_AUTH: "true"
      WAKAPI_LEADERBOARD_GENERATE_EVERY: "15m"
      WAKAPI_EXPOSE_METRICS: "true"
      WAKAPI_TRUSTED_HEADER_AUTH: "true"
      WAKAPI_TRUSTED_HEADER_AUTH_KEY: "X-Remote-User"
      WAKAPI_TRUST_REVERSE_PROXY_IPS: "172.0.0.0/8,127.0.0.1,10.0.0.0/8"
      WAKAPI_DATA_RETENTION_MONTHS: "12"
      WAKAPI_MAX_INACTIVE_MONTHS: "6"
      WAKAPI_SENTRY_DSN: "${WAKAPI_SENTRY_DSN:-}"
      WAKAPI_SENTRY_TRACING: "${WAKAPI_SENTRY_TRACING:-false}"
      WAKAPI_SENTRY_SAMPLE_RATE: "${WAKAPI_SENTRY_SAMPLE_RATE:-0.1}"
      WAKAPI_SENTRY_SAMPLE_RATE_HEARTBEATS: "${WAKAPI_SENTRY_SAMPLE_RATE_HEARTBEATS:-0.05}"
      WAKAPI_MAIL_ENABLED: "${WAKAPI_MAIL_ENABLED:-false}"
      WAKAPI_MAIL_SENDER: "${WAKAPI_MAIL_SENDER:-no-reply@example.com}"
      WAKAPI_MAIL_SMTP_HOST: "${WAKAPI_MAIL_SMTP_HOST:-}"
      WAKAPI_MAIL_SMTP_PORT: "${WAKAPI_MAIL_SMTP_PORT:-587}"
      WAKAPI_MAIL_SMTP_USER: "${WAKAPI_MAIL_SMTP_USER:-}"
      WAKAPI_MAIL_SMTP_PASS: "${WAKAPI_MAIL_SMTP_PASS:-}"
      WAKAPI_MAIL_SMTP_TLS: "${WAKAPI_MAIL_SMTP_TLS:-true}"
    networks:
      - wakapi-net

  postgres:
    image: postgres:16-alpine
    container_name: wakapi-db
    restart: unless-stopped
    environment:
      POSTGRES_USER: wakapi
      POSTGRES_PASSWORD: "${WAKAPI_DB_PASSWORD}"
      POSTGRES_DB: wakapi
    ports:
      - "5432:5432"
    volumes:
      - pgdata:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U wakapi"]
      interval: 10s
      timeout: 5s
      retries: 5
    networks:
      - wakapi-net
    command:
      - "postgres"
      - "-c"
      - "shared_buffers=512MB"
      - "-c"
      - "effective_cache_size=1536MB"
      - "-c"
      - "max_connections=100"
      - "-c"
      - "work_mem=4MB"
      - "-c"
      - "maintenance_work_mem=128MB"
      - "-c"
      - "listen_addresses=*"

  pgadmin:
    image: dpage/pgadmin4:latest
    container_name: wakapi-pgadmin
    restart: unless-stopped
    environment:
      PGADMIN_DEFAULT_EMAIL: "${PGADMIN_DEFAULT_EMAIL:-admin@example.com}"
      PGADMIN_DEFAULT_PASSWORD: "${PGADMIN_DEFAULT_PASSWORD}"
      PGADMIN_LISTEN_PORT: 5050
    ports:
      - "5050:5050"
    volumes:
      - pgadmin-data:/var/lib/pgadmin
    networks:
      - wakapi-net

  admin:
    image: wakapi-admin:latest
    container_name: wakapi-admin
    restart: unless-stopped
    environment:
      DB_HOST: postgres
      DB_PORT: "5432"
      DB_USER: wakapi
      DB_PASSWORD: "${WAKAPI_DB_PASSWORD}"
      DB_NAME: wakapi
    ports:
      - "8080:8080"
    depends_on:
      postgres:
        condition: service_healthy
    networks:
      - wakapi-net

  prometheus:
    image: prom/prometheus:latest
    container_name: wakapi-prometheus
    restart: unless-stopped
    volumes:
      - ./prometheus/prometheus.yml:/etc/prometheus/prometheus.yml:ro
      - ./prometheus/wakapi.token:/etc/prometheus/wakapi.token:ro
      - prometheus-data:/prometheus
    ports:
      - "9090:9090"
    networks:
      - wakapi-net

  grafana:
    image: grafana/grafana:latest
    container_name: wakapi-grafana
    restart: unless-stopped
    environment:
      GF_SECURITY_ADMIN_USER: "${GF_ADMIN_USER:-admin}"
      GF_SECURITY_ADMIN_PASSWORD: "${GF_ADMIN_PASSWORD}"
      GF_SERVER_ROOT_URL: "${GF_SERVER_ROOT_URL:-http://localhost:3001}"
      GF_SERVER_SERVE_FROM_SUB_PATH: "false"
    volumes:
      - grafana-data:/var/lib/grafana
      - ./grafana/provisioning:/etc/grafana/provisioning
      - ./grafana/dashboards:/var/lib/grafana/dashboards
    ports:
      - "3001:3000"
    depends_on:
      - prometheus
    networks:
      - wakapi-net

volumes:
  pgdata:
  pgadmin-data:
  prometheus-data:
  grafana-data:

networks:
  wakapi-net:
    driver: bridge