docker-compose.prod.yml

version: '3.8'

services:
  # Main application service (production)
  app:
    build:
      context: .
      target: production
    container_name: everything-opencode-prod
    ports:
      - '80:3000'
    environment:
      NODE_ENV: production
      PORT: 3000
      LOG_LEVEL: info
      MAX_MEMORY: 512
    restart: unless-stopped
    healthcheck:
      test: ['CMD', 'node', 'scripts/verify-installation.js']
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 60s
    deploy:
      resources:
        limits:
          cpus: '1.0'
          memory: 512M
        reservations:
          cpus: '0.5'
          memory: 256M
    logging:
      driver: 'json-file'
      options:
        max-size: '10m'
        max-file: '3'

  # PineScript Optimizer service (production)
  optimizer:
    build:
      context: .
      target: pinescript-optimizer
    container_name: pinescript-optimizer-prod
    ports:
      - '3001:3001'
    environment:
      NODE_ENV: production
      OPTIMIZER_PORT: 3001
      LOG_LEVEL: info
    restart: unless-stopped
    command: node scripts/pinescript/optimizer.js --server --port 3001 --production
    deploy:
      resources:
        limits:
          cpus: '0.5'
          memory: 256M
        reservations:
          cpus: '0.25'
          memory: 128M

  # Debug Server service (production)
  debug-server:
    build:
      context: .
      target: debug-server
    container_name: debug-server-prod
    ports:
      - '3002:3000'
    environment:
      NODE_ENV: production
      DEBUG_SERVER_PORT: 3000
      LOG_LEVEL: info
      SECURITY_ENABLED: 'true'
    restart: unless-stopped
    command: node scripts/pinescript/debug-server.js --port 3000 --security --production
    deploy:
      resources:
        limits:
          cpus: '0.5'
          memory: 256M
        reservations:
          cpus: '0.25'
          memory: 128M

  # Load balancer / reverse proxy
  nginx:
    image: nginx:alpine
    container_name: everything-opencode-nginx
    ports:
      - '443:443'
      - '80:80'
    volumes:
      - ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro
      - ./nginx/ssl:/etc/nginx/ssl:ro
    depends_on:
      - app
      - optimizer
      - debug-server
    restart: unless-stopped
    deploy:
      resources:
        limits:
          cpus: '0.25'
          memory: 128M

  # Monitoring stack
  prometheus:
    image: prom/prometheus:latest
    container_name: prometheus
    ports:
      - '9090:9090'
    volumes:
      - ./monitoring/prometheus.yml:/etc/prometheus/prometheus.yml:ro
      - prometheus_data:/prometheus
    command:
      - '--config.file=/etc/prometheus/prometheus.yml'
      - '--storage.tsdb.path=/prometheus'
      - '--web.console.libraries=/etc/prometheus/console_libraries'
      - '--web.console.templates=/etc/prometheus/consoles'
      - '--storage.tsdb.retention.time=200h'
      - '--web.enable-lifecycle'
    restart: unless-stopped

  grafana:
    image: grafana/grafana:latest
    container_name: grafana
    ports:
      - '3000:3000'
    environment:
      GF_SECURITY_ADMIN_PASSWORD: ${GRAFANA_PASSWORD:-admin}
      GF_INSTALL_PLUGINS: 'grafana-piechart-panel'
    volumes:
      - grafana_data:/var/lib/grafana
      - ./monitoring/dashboards:/etc/grafana/provisioning/dashboards
      - ./monitoring/datasources:/etc/grafana/provisioning/datasources
    restart: unless-stopped
    depends_on:
      - prometheus

  # Log aggregation
  loki:
    image: grafana/loki:latest
    container_name: loki
    ports:
      - '3100:3100'
    command: -config.file=/etc/loki/local-config.yaml
    volumes:
      - loki_data:/loki
    restart: unless-stopped

  promtail:
    image: grafana/promtail:latest
    container_name: promtail
    volumes:
      - /var/log:/var/log
      - ./monitoring/promtail-config.yml:/etc/promtail/config.yml:ro
    command: -config.file=/etc/promtail/config.yml
    restart: unless-stopped
    depends_on:
      - loki

  # Database (if needed for production)
  # postgres:
  #   image: postgres:15-alpine
  #   container_name: everything-opencode-db-prod
  #   environment:
  #     POSTGRES_USER: ${DB_USER:-opencode}
  #     POSTGRES_PASSWORD: ${DB_PASSWORD:-opencode123}
  #     POSTGRES_DB: ${DB_NAME:-everything_opencode}
  #   volumes:
  #     - postgres_data:/var/lib/postgresql/data
  #   restart: unless-stopped
  #   deploy:
  #     resources:
  #       limits:
  #         cpus: '0.5'
  #         memory: 512M
  #       reservations:
  #         cpus: '0.25'
  #         memory: 256M

  # Redis cache (if needed for production)
  # redis:
  #   image: redis:7-alpine
  #   container_name: everything-opencode-cache-prod
  #   command: redis-server --appendonly yes
  #   volumes:
  #     - redis_data:/data
  #   restart: unless-stopped
  #   deploy:
  #     resources:
  #       limits:
  #         cpus: '0.25'
  #         memory: 128M

  # Backup service
  backup:
    image: alpine:latest
    container_name: backup-service
    volumes:
      - backup_data:/backup
      - ./backup/backup.sh:/backup.sh:ro
    environment:
      BACKUP_SCHEDULE: '0 2 * * *'
      RETENTION_DAYS: '7'
    command: sh -c "chmod +x /backup.sh && crond -f"
    restart: unless-stopped

# Volumes for persistent data
volumes:
  postgres_data:
  redis_data:
  prometheus_data:
  grafana_data:
  loki_data:
  backup_data: