docker-compose.yml

services:

  # Workbench
  workbench:
    image: nginx:alpine
    container_name: workshop-workbench
    ports:
      - "80:80"
    volumes:
      - ./workbench:/usr/share/nginx/html:ro
      - ./workbench/nginx.conf:/etc/nginx/nginx.conf:ro
      - ./workbench/proxy:/etc/nginx/proxy:ro
    depends_on:
      - api
      - docs
      - vscode
      - web
      - redisinsight

  # Documentation server (Docsify)
  docs:
    image: nginx:alpine
    container_name: workshop-docs
    volumes:
      - ./docs:/usr/share/nginx/html:ro

  # VS Code in the browser (code-server)
  # ─────────────────────────────────────────────────────────────────────────
  # Security: code-server performs WebSocket origin checks (added in v4.10.1)
  # to prevent cross-site WebSocket hijacking. When behind PS Portal:
  #
  # 1. The browser's Origin header = workbench URL (e.g., https://rl-s-labs-xyz.labs.ps-redis.com)
  # 2. The Host header = VS Code URL (e.g., 8080-p-rl-s-labs-xyz.labs.ps-redis.com)
  # 3. These don't match, so WebSockets are blocked (error 1006)
  #
  # Since PS Portal dynamically generates hostnames per VM, we cannot predict
  # them. Using --trusted-origins "*" allows all origins through the check.
  # This is safe because PS Portal itself provides the authentication layer.
  # ─────────────────────────────────────────────────────────────────────────
  vscode:
    build:
      context: .
      dockerfile: ./docker/vscode/Dockerfile
    container_name: workshop-vscode
    volumes:
      - ./code:/home/coder/code
    command: >-
      --auth none
      --bind-addr 0.0.0.0:8080
      --disable-workspace-trust
      --trusted-origins "*"
      /home/coder/code

  # Web terminal with Node.js
  # restart: unless-stopped ensures the container restarts if someone types
  # "exit" in the terminal, which would otherwise stop the tmux session
  web:
    build: ./docker/web
    container_name: workshop-web
    restart: unless-stopped
    volumes:
      - ./code/web:/app
      - /app/node_modules
      - /var/run/docker.sock:/var/run/docker.sock

  # Python API
  api:
    build:
      context: .
      dockerfile: ./docker/api/Dockerfile
    container_name: workshop-api
    env_file:
      - ./code/api/.env
    volumes:
      - ./code/api:/app
    depends_on:
      - redis

  # Redis
  redis:
    image: redis:latest
    container_name: workshop-redis

  # Redis Insight
  redisinsight:
    image: redis/redisinsight:latest
    container_name: workshop-redisinsight
    environment:
      - RI_PROXY_PATH=/redisinsight
      - RI_REDIS_HOST=redis
      - RI_REDIS_PORT=6379
      - RI_REDIS_ALIAS=Workshop Redis
    volumes:
      - redisinsight-data:/data
    depends_on:
      - redis

volumes:
  redisinsight-data: