docker-compose.yml

services:
  rivet-server:
    build:
      context: ../..
      dockerfile: docker/universal/Dockerfile
      target: server-full
    platform: linux/amd64
    restart: unless-stopped
    command: /usr/bin/rivet-server start
    environment:
      - RUST_BACKTRACE=1
      - RUST_LOG_ANSI_COLOR=1
      - RIVET_OTEL_ENABLED=1
      - RIVET_OTEL_SAMPLER_RATIO=1
      - RIVET_OTEL_ENDPOINT=http://otel-collector:4317
      - RUST_LOG=debug,hyper=info
    stop_grace_period: 0s
    ports:
      # API
      - "6420:6420"
      # API edge
      - "6421:6421"
      # Pegboard
      - "6422:6422"
    depends_on:
      cockroachdb:
        condition: service_healthy
      redis:
        condition: service_healthy
      clickhouse:
        condition: service_healthy
      nats:
        condition: service_healthy
      seaweedfs:
        condition: service_healthy
      vector-server:
        condition: service_started
    volumes:
      - ./rivet-server/config.jsonc:/etc/rivet-server/config.jsonc:ro
    networks:
      - rivet-network
    healthcheck:
      test: ["CMD", "curl", "-f", "http://127.0.0.1:6430/health/liveness"]
      interval: 2s
      timeout: 10s
      retries: 10
      # Initial SQL migrations sometimes take time to run
      start_period: 30s

  rivet-edge-server:
    build:
      context: ../..
      dockerfile: docker/universal/Dockerfile
      target: edge-server
    platform: linux/amd64
    restart: unless-stopped
    command: /usr/bin/rivet-edge-server start --skip-provision
    environment:
      - RUST_BACKTRACE=1
      - RUST_LOG_ANSI_COLOR=1
      - RIVET_OTEL_ENABLED=1
      - RIVET_OTEL_SAMPLER_RATIO=1
      - RIVET_SERVICE_NAME=rivet-edge
      - RIVET_OTEL_ENDPOINT=http://otel-collector:4317
      - RUST_LOG=debug,hyper=info
    stop_grace_period: 0s
    ports:
      # API
      - "6423:6423"
    depends_on:
      rivet-server:
        condition: service_healthy
      cockroachdb:
        condition: service_healthy
      redis:
        condition: service_healthy
      nats:
        condition: service_healthy
      seaweedfs:
        condition: service_healthy
      vector-server:
        condition: service_started
    volumes:
      - ./rivet-edge-server/config.jsonc:/etc/rivet-server/config.jsonc:ro
      - sqlite-data:/root/.local/share/rivet-sqlite:rw
    networks:
      - rivet-network
    healthcheck:
      test: ["CMD", "curl", "-f", "http://127.0.0.1:6430/health/liveness"]
      interval: 2s
      timeout: 10s
      retries: 10

  rivet-shell:
    build:
      context: ../..
      dockerfile: docker/universal/Dockerfile
      target: server-full
    platform: linux/amd64
    restart: unless-stopped
    command: sleep infinity
    environment:
      - RUST_BACKTRACE=1
    stop_grace_period: 0s
    volumes:
      - ./rivet-server:/etc/rivet-server:ro
    networks:
      - rivet-network

  rivet-edge-shell:
    build:
      context: ../..
      dockerfile: docker/universal/Dockerfile
      target: edge-server
    platform: linux/amd64
    restart: unless-stopped
    command: sleep infinity
    environment:
      - RUST_BACKTRACE=1
    stop_grace_period: 0s
    volumes:
      - ./rivet-edge-server:/etc/rivet-server:ro
      - sqlite-data:/root/.local/share/rivet-sqlite:rw
    networks:
      - rivet-network

  rivet-guard:
    build:
      context: ../..
      dockerfile: docker/universal/Dockerfile
      target: rivet-guard
    platform: linux/amd64
    restart: unless-stopped
    command: /usr/bin/rivet-guard
    environment:
      - RUST_LOG=debug
      - RUST_BACKTRACE=1
      - RUST_LOG_ANSI_COLOR=1
      - RIVET_OTEL_ENABLED=1
      - RIVET_OTEL_SAMPLER_RATIO=1
      - RIVET_SERVICE_NAME=rivet-guard
      - RIVET_OTEL_ENDPOINT=http://otel-collector:4317
      - RUST_LOG=debug,hyper=info
    stop_grace_period: 0s
    ports:
      # HTTP
      - "7080:7080"
      # HTTPS
      - "7443:7443"
      # Enable TCP & UDP port ranges.
      #
      # Corresponds to `server.rivet.guard.min_ingress_port_tcp` and
      # `actor.network.wan_port_range_max` in `rivet-server/config.jsonc`.
      #
      # We only reserve 100 ports instead of the default 22,000 since each
      # individual port converts to an iptable rule when using Docker, which
      # can cause unexpected side effects. This limits the number of actors
      # using host networking to 100.
      - "7500-7599:7500-7599"
    depends_on:
      rivet-server:
        condition: service_healthy
      cockroachdb:
        condition: service_healthy
      redis:
        condition: service_healthy
      nats:
        condition: service_healthy
      seaweedfs:
        condition: service_healthy
      vector-server:
        condition: service_started
    volumes:
      - ./rivet-guard/config.jsonc:/etc/rivet-server/config.jsonc:ro
      - ./rivet-guard/tls/:/etc/rivet-server/tls/:ro
      - sqlite-data:/root/.local/share/rivet-sqlite:rw
    networks:
      - rivet-network

  cockroachdb:
    restart: unless-stopped
    image: cockroachdb/cockroach:v24.2.3
    command: start-single-node --insecure
    volumes:
      - cockroach-data:/cockroach/cockroach-data
    networks:
      - rivet-network
    healthcheck:
      test: ["CMD", "curl", "-f", "http://127.0.0.1:8080/health?ready=1"]
      interval: 2s
      timeout: 10s
      retries: 10

  rivet-client:
    build:
      context: ../..
      dockerfile: docker/universal/Dockerfile
      target: client-full
    # TODO(RVT-4168): Compile libfdb from scratch for ARM
    platform: linux/amd64
    restart: unless-stopped
    command: -c /etc/rivet-client/config.jsonc
    # entrypoint: entrypoint.sh
    # Required for runc & cnitool to operate
    privileged: true
    environment:
      - RUST_BACKTRACE=1
      - RUST_LOG_ANSI_COLOR=1
      - RIVET_OTEL_ENABLED=1
      - RIVET_OTEL_SAMPLER_RATIO=1
      - RIVET_SERVICE_NAME=rivet-client
      - RIVET_OTEL_ENDPOINT=http://otel-collector:4317
      - RUST_LOG=debug,hyper=info
    stop_grace_period: 0s
    depends_on:
      # HACK: rivet-server dependency since we need to do a DNS lookup in entrypoint.sh for the iptables chain
      rivet-server:
        condition: service_healthy
      rivet-edge-server:
        condition: service_healthy
      foundationdb:
        condition: service_healthy
    volumes:
      # - ./rivet-client/entrypoint.sh:/usr/local/bin/entrypoint.sh:ro
      - ./rivet-client/config.jsonc:/etc/rivet-client/config.jsonc:ro
      - client-data:/var/lib/rivet-client
    ports:
      # Enable host networking for actors
      #
      # Corresponds to `actor.network.wan_port_range_min` and
      # `actor.network.wan_port_range_max` in `rivet-client/config.jsonc`.
      #
      # We only reserve 100 ports instead of the default 22,000. See
      # rivet-guard for explanation.
      - "7600-7699:7600-7699"
      # cAdvisor metrics endpoint
      - "7780:7780"
    networks:
      - rivet-network

  redis:
    restart: unless-stopped
    image: bitnami/valkey:8.0.1
    # TODO: Remove root user
    user: root
    volumes:
      - redis-data:/data
    command: redis-server --requirepass password --save 60 1 --appendonly yes
    networks:
      - rivet-network
    ports:
      - "6379:6379"
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 2s
      timeout: 10s
      retries: 10

  clickhouse:
    restart: unless-stopped
    image: clickhouse/clickhouse-server:25.1.5
    volumes:
      - clickhouse-data:/var/lib/clickhouse
      - ./clickhouse/config.xml:/etc/clickhouse-server/config.d/config.xml
      - ./clickhouse/users.xml:/etc/clickhouse-server/users.d/users.xml
      - ./clickhouse/init:/docker-entrypoint-initdb.d
    environment:
      # Run migrations on startup
      - CLICKHOUSE_ALWAYS_RUN_INITDB_SCRIPTS=true
      # Configured in users.xml
      - CLICKHOUSE_USER=system
      - CLICKHOUSE_PASSWORD=default
    networks:
      - rivet-network
    ports:
      - "9300:9300"
      - "9301:9301"
    healthcheck:
      test: ["CMD", "clickhouse-client", "--password", "default", "--query", "SELECT 1"]
      interval: 2s
      timeout: 10s
      retries: 10

  nats:
    restart: unless-stopped
    image: nats:2.10.22-scratch
    networks:
      - rivet-network
    ports:
      - "4222:4222"
    healthcheck:
      test: ["CMD", "nats-server", "--health"]
      interval: 2s
      timeout: 10s
      retries: 10

  seaweedfs:
    restart: unless-stopped
    image: chrislusf/seaweedfs:3.79
    # TODO: Remove root user
    user: root
    # `raftHashicorp` speeds up initial leader election
    command: |
      server \
        -dir /var/lib/seaweedfs \
        -master.raftBootstrap -master.raftHashicorp \
        -s3 -s3.config /etc/seaweedfs/s3.json -s3.port=9000 -s3.allowEmptyFolder=false -s3.allowDeleteBucketNotEmpty=false
    volumes:
      - ./seaweedfs:/etc/seaweedfs:ro
      - seaweedfs-data:/var/lib/seaweedfs
    ports:
      # S3
      - "9000:9000"
    networks:
      - rivet-network
    healthcheck:
      test: ["CMD", "nc", "-z", "127.0.0.1", "9000"]
      interval: 2s
      timeout: 10s

  foundationdb:
    restart: unless-stopped
    # See docs-internal/infrastructure/fdb/AVX.md
    image: foundationdb/foundationdb:7.1.60
    platform: linux/amd64
    entrypoint: ["/usr/bin/tini", "-g", "--", "/usr/local/bin/entrypoint.sh"]
    volumes:
      - ./foundationdb/entrypoint.sh:/usr/local/bin/entrypoint.sh
      - foundationdb-data:/var/fdb:rw
      - foundationdb-storage-data:/var/fdb/data:rw
    ports:
      - "4500:4500"
    healthcheck:
      test: ["CMD", "fdbcli", "--exec", "status"]
      interval: 2s
      timeout: 10s
      retries: 10
    networks:
      - rivet-network

  vector-client:
    restart: unless-stopped
    image: timberio/vector:0.42.0-distroless-static
    command: -C /etc/vector
    volumes:
      - ./vector-client:/etc/vector
      # Mount client data to read logs
      - client-data:/var/lib/rivet-client
    networks:
      - rivet-network

  vector-server:
    restart: unless-stopped
    image: timberio/vector:0.42.0-distroless-static
    command: -C /etc/vector
    volumes:
      - vector-server-data:/var/lib/vector
      - ./vector-server:/etc/vector
    networks:
      - rivet-network

  prometheus:
    image: prom/prometheus:v2.41.0
    volumes:
      - ./prometheus:/etc/prometheus
    ports:
      - "9090:9090"
    networks:
      - rivet-network

  grafana:
    image: grafana/grafana:11.5.2
    volumes:
      - grafana-data:/var/lib/grafana
      - ./grafana/grafana.ini:/etc/grafana/grafana.ini
      - ./grafana/provisioning:/etc/grafana/provisioning
      - ./grafana/dashboards:/var/lib/grafana/dashboards
    ports:
      # 3000 is a common port, so we use 3100 instead
      - "3100:3000"
    networks:
      - rivet-network
    environment:
      - GF_INSTALL_PLUGINS=grafana-clickhouse-datasource

  frontend-hub:
    image: node:22-bullseye
    restart: unless-stopped
    working_dir: /app/frontend/apps/hub
    command: /bin/bash /etc/frontend-hub/entrypoint.sh
    environment:
      - NODE_ENV=development
    ports:
      - "5080:5080"
    volumes:
      - ../..:/app:rw
      - ./frontend-hub/entrypoint.sh:/etc/frontend-hub/entrypoint.sh:ro
    networks:
      - rivet-network

  otel-collector:
    image: otel/opentelemetry-collector-contrib:latest
    restart: unless-stopped
    command: --config=/etc/otel/config.yaml
    volumes:
      - ./otel-collector/config.yaml:/etc/otel/config.yaml:ro
    environment:
      - CLICKHOUSE_PASSWORD=default
    ports:
      - "4317:4317" # OTLP gRPC
      - "4318:4318" # OTLP HTTP
      - "8888:8888" # Metrics
    depends_on:
      clickhouse:
        condition: service_healthy
    networks:
      - rivet-network

networks:
  rivet-network:
    driver: bridge

volumes:
  client-data:
  cockroach-data:
  redis-data:
  clickhouse-data:
  seaweedfs-data:
  vector-server-data:
  foundationdb-data:
  foundationdb-storage-data:
  sqlite-data:
  grafana-data: