geo/deploy/docker-compose.yaml

# geo-rankly — Production One-Click Deployment
#
# Usage:
#   1. cp .env.example .env  && edit .env
#   2. docker compose up -d
#
# To rebuild images from source (developer workflow):
#   docker compose --profile build up -d --build

name: geo-rankly

x-app-env: &app-env
  CONFIG_PATH: /app/configs/config.yaml
  POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-geo_dev}
  JWT_SECRET: ${JWT_SECRET:-geo-Aa123456-change-me-in-production}
  JWT_ACCESS_TTL: ${JWT_ACCESS_TTL:-15m}
  JWT_REFRESH_TTL: ${JWT_REFRESH_TTL:-720h}
  SCHEDULER_INTERNAL_METRICS_TOKEN: ${SCHEDULER_INTERNAL_METRICS_TOKEN:-}
  BROWSER_FETCH_TOKEN: ${BROWSER_FETCH_TOKEN:-}
  OBJECT_STORAGE_ACCESS_KEY: ${MINIO_ROOT_USER:-minioadmin}
  OBJECT_STORAGE_SECRET_KEY: ${MINIO_ROOT_PASSWORD:-minioadmin}

x-app-volumes: &app-volumes
  - ./config.yaml:/app/configs/config.yaml:ro
  - ./config.local.yaml:/app/configs/config.local.yaml:ro
  - ./prompts.yml:/app/configs/prompts.yml:ro

x-app-depends: &app-depends
  pgbouncer:
    condition: service_healthy
  monitoring-pgbouncer:
    condition: service_healthy
  rabbitmq:
    condition: service_healthy
  redis:
    condition: service_started
  qdrant:
    condition: service_started
  minio:
    condition: service_started
  migrate:
    condition: service_completed_successfully

services:

  # ────────────────── Infrastructure ──────────────────────────────────────────

  postgres:
    image: postgres:16-alpine
    container_name: geo-postgres
    restart: unless-stopped
    environment:
      POSTGRES_DB: geo
      POSTGRES_USER: geo
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-geo_dev}
    volumes:
      - pgdata:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U geo -d geo"]
      interval: 5s
      timeout: 5s
      retries: 10

  monitoring-postgres:
    image: postgres:16-alpine
    container_name: geo-monitoring-postgres
    restart: unless-stopped
    environment:
      POSTGRES_DB: geo_monitoring
      POSTGRES_USER: geo
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-geo_dev}
    volumes:
      - monitoring_pgdata:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U geo -d geo_monitoring"]
      interval: 5s
      timeout: 5s
      retries: 10

  pgbouncer:
    image: edoburu/pgbouncer:v1.24.1-p1
    container_name: geo-pgbouncer
    restart: unless-stopped
    depends_on:
      postgres:
        condition: service_healthy
    environment:
      DB_HOST: postgres
      DB_PORT: 5432
      DB_USER: geo
      DB_PASSWORD: ${POSTGRES_PASSWORD:-geo_dev}
      DB_NAME: geo
      AUTH_TYPE: scram-sha-256
      POOL_MODE: session
      MAX_CLIENT_CONN: 200
      DEFAULT_POOL_SIZE: 30
      MIN_POOL_SIZE: 2
      RESERVE_POOL_SIZE: 5
      RESERVE_POOL_TIMEOUT: 5
      SERVER_IDLE_TIMEOUT: 60
      SERVER_LIFETIME: 1800
      SERVER_CONNECT_TIMEOUT: 15
      CLIENT_LOGIN_TIMEOUT: 15
      IGNORE_STARTUP_PARAMETERS: extra_float_digits
      ADMIN_USERS: geo
      STATS_USERS: geo
    healthcheck:
      test: ["CMD-SHELL", "PGPASSWORD=\"$${DB_PASSWORD}\" psql -h 127.0.0.1 -p 5432 -U geo -d geo -c 'SELECT 1' >/dev/null"]
      interval: 5s
      timeout: 5s
      retries: 10

  monitoring-pgbouncer:
    image: edoburu/pgbouncer:v1.24.1-p1
    container_name: geo-monitoring-pgbouncer
    restart: unless-stopped
    depends_on:
      monitoring-postgres:
        condition: service_healthy
    environment:
      DB_HOST: monitoring-postgres
      DB_PORT: 5432
      DB_USER: geo
      DB_PASSWORD: ${POSTGRES_PASSWORD:-geo_dev}
      DB_NAME: geo_monitoring
      AUTH_TYPE: scram-sha-256
      POOL_MODE: session
      MAX_CLIENT_CONN: 200
      DEFAULT_POOL_SIZE: 30
      MIN_POOL_SIZE: 2
      RESERVE_POOL_SIZE: 5
      RESERVE_POOL_TIMEOUT: 5
      SERVER_IDLE_TIMEOUT: 60
      SERVER_LIFETIME: 1800
      SERVER_CONNECT_TIMEOUT: 15
      CLIENT_LOGIN_TIMEOUT: 15
      IGNORE_STARTUP_PARAMETERS: extra_float_digits
      ADMIN_USERS: geo
      STATS_USERS: geo
    healthcheck:
      test: ["CMD-SHELL", "PGPASSWORD=\"$${DB_PASSWORD}\" psql -h 127.0.0.1 -p 5432 -U geo -d geo_monitoring -c 'SELECT 1' >/dev/null"]
      interval: 5s
      timeout: 5s
      retries: 10

  rabbitmq:
    image: rabbitmq:3.13-management-alpine
    container_name: geo-rabbitmq
    restart: unless-stopped
    environment:
      RABBITMQ_DEFAULT_USER: geo
      RABBITMQ_DEFAULT_PASS: geo_dev
      RABBITMQ_DEFAULT_VHOST: geo
    volumes:
      - rabbitmq_data:/var/lib/rabbitmq
    ports:
      - "${RABBITMQ_MGMT_PORT:-15673}:15672"
    healthcheck:
      test: ["CMD", "rabbitmq-diagnostics", "ping"]
      interval: 10s
      timeout: 10s
      retries: 10

  redis:
    image: redis:7-alpine
    container_name: geo-redis
    restart: unless-stopped
    volumes:
      - redis_data:/data
    command: redis-server --save 60 1 --loglevel warning

  qdrant:
    image: qdrant/qdrant:v1.13.2
    container_name: geo-qdrant
    restart: unless-stopped
    volumes:
      - qdrant_data:/qdrant/storage

  minio:
    image: minio/minio:RELEASE.2025-03-12T18-04-18Z
    container_name: geo-minio
    restart: unless-stopped
    command: server /data --console-address ":9001"
    environment:
      MINIO_ROOT_USER: ${MINIO_ROOT_USER:-minioadmin}
      MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD:-minioadmin}
    volumes:
      - minio_data:/data
    ports:
      - "${MINIO_CONSOLE_PORT:-19001}:9001"

  # ─── MinIO bucket initializer (one-shot) ────────────────────────────────────
  minio-init:
    image: minio/mc:latest
    container_name: geo-minio-init
    depends_on:
      minio:
        condition: service_started
    environment:
      MINIO_ROOT_USER: ${MINIO_ROOT_USER:-minioadmin}
      MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD:-minioadmin}
    entrypoint: >
      /bin/sh -c "
        sleep 3;
        mc alias set local http://minio:9000 $$MINIO_ROOT_USER $$MINIO_ROOT_PASSWORD;
        mc mb --ignore-existing local/geo-private;
        echo 'MinIO bucket ready.';
      "
    restart: "no"

  # ────────────────── Database Migrations (one-shot) ──────────────────────────

  migrate:
    image: ${IMAGE_REGISTRY:-ghcr.io/your-org/geo-rankly}/migrate:${IMAGE_TAG:-latest}
    container_name: geo-migrate
    # build section — used only when running with --build or --profile build
    build:
      context: ../server
      dockerfile: Dockerfile
      target: migrate
    depends_on:
      postgres:
        condition: service_healthy
      monitoring-postgres:
        condition: service_healthy
    environment:
      CONFIG_PATH: /app/configs/config.yaml
    volumes:
      - ./config.yaml:/app/configs/config.yaml:ro
      - ./config.local.yaml:/app/configs/config.local.yaml:ro
      - ./prompts.yml:/app/configs/prompts.yml:ro
    entrypoint: >
      /bin/sh -c "
        export PGPASSWORD='$${POSTGRES_PASSWORD:-geo_dev}' &&
        /usr/local/bin/migrate -path /migrations -database 'postgres://geo@postgres:5432/geo?sslmode=disable' up &&
        /usr/local/bin/migrate -path /migrations_monitoring -database 'postgres://geo@monitoring-postgres:5432/geo_monitoring?sslmode=disable' up &&
        /usr/local/bin/migrate -path /migrations_ops -database 'postgres://geo@postgres:5432/geo?sslmode=disable&x-migrations-table=schema_migrations_ops' up &&
        /usr/local/bin/seed-platform-templates
      "
    restart: "no"

  # ────────────────── Application Services ────────────────────────────────────

  tenant-api:
    image: ${IMAGE_REGISTRY:-ghcr.io/your-org/geo-rankly}/tenant-api:${IMAGE_TAG:-latest}
    container_name: geo-tenant-api
    build:
      context: ../server
      dockerfile: Dockerfile
      target: runtime
      args:
        SERVICE: tenant-api
    restart: unless-stopped
    environment:
      <<: *app-env
    volumes: *app-volumes
    depends_on: *app-depends
    ports:
      - "${API_PORT:-18081}:8080"
    healthcheck:
      test: ["CMD-SHELL", "wget -qO- http://localhost:8080/api/health/live || exit 1"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 10s

  browser-fetch:
    image: ${IMAGE_REGISTRY:-ghcr.io/your-org/geo-rankly}/browser-fetch:${IMAGE_TAG:-latest}
    container_name: geo-browser-fetch
    build:
      context: ../server
      dockerfile: Dockerfile
      target: browser-fetch
      args:
        SERVICE: browser-fetch
    restart: unless-stopped
    environment:
      BROWSER_FETCH_TOKEN: ${BROWSER_FETCH_TOKEN:-geo-browser-fetch-change-me}
      BROWSER_FETCH_ALLOWED_DOMAINS: zhuanlan.zhihu.com,zhihu.com,baidu.com
      BROWSER_FETCH_QUEUE_SIZE: 128
      BROWSER_FETCH_WORKER_CONCURRENCY: 2
      BROWSER_FETCH_PER_DOMAIN_CONCURRENCY: 1
      BROWSER_FETCH_REQUEST_TIMEOUT: 45s
      BROWSER_FETCH_CACHE_TTL: 6h
      LIGHTPANDA_DRIVER: fetch
      LIGHTPANDA_FETCH_ARGS: --dump markdown
    healthcheck:
      test: ["CMD", "/app/service", "-healthcheck"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 10s

  worker-generate:
    image: ${IMAGE_REGISTRY:-ghcr.io/your-org/geo-rankly}/worker-generate:${IMAGE_TAG:-latest}
    container_name: geo-worker-generate
    build:
      context: ../server
      dockerfile: Dockerfile
      target: runtime
      args:
        SERVICE: worker-generate
    restart: unless-stopped
    environment:
      <<: *app-env
    volumes: *app-volumes
    depends_on: *app-depends

  kol-assist-worker:
    image: ${IMAGE_REGISTRY:-ghcr.io/your-org/geo-rankly}/kol-assist-worker:${IMAGE_TAG:-latest}
    container_name: geo-kol-assist-worker
    build:
      context: ../server
      dockerfile: Dockerfile
      target: runtime
      args:
        SERVICE: kol-assist-worker
    restart: unless-stopped
    environment:
      <<: *app-env
    volumes: *app-volumes
    depends_on: *app-depends

  scheduler:
    image: ${IMAGE_REGISTRY:-ghcr.io/your-org/geo-rankly}/scheduler:${IMAGE_TAG:-latest}
    container_name: geo-scheduler
    build:
      context: ../server
      dockerfile: Dockerfile
      target: runtime
      args:
        SERVICE: scheduler
    restart: unless-stopped
    environment:
      <<: *app-env
    volumes: *app-volumes
    depends_on: *app-depends

  ops-api:
    image: ${IMAGE_REGISTRY:-ghcr.io/your-org/geo-rankly}/ops-api:${IMAGE_TAG:-latest}
    container_name: geo-ops-api
    build:
      context: ../server
      dockerfile: Dockerfile
      target: runtime
      args:
        SERVICE: ops-api
    restart: unless-stopped
    environment:
      CONFIG_PATH: /app/configs/ops-config.yaml
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-geo_dev}
      OPS_POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-geo_dev}
      OPS_JWT_SECRET: ${OPS_JWT_SECRET:-change-me-in-production}
      OPS_DEFAULT_ADMIN_USERNAME: ${OPS_DEFAULT_ADMIN_USERNAME:-admin}
      OPS_DEFAULT_ADMIN_PASSWORD: ${OPS_DEFAULT_ADMIN_PASSWORD:-}
      OPS_DEFAULT_ADMIN_DISPLAY_NAME: ${OPS_DEFAULT_ADMIN_DISPLAY_NAME:-系统管理员}
      OPS_DEFAULT_ADMIN_EMAIL: ${OPS_DEFAULT_ADMIN_EMAIL:-}
    volumes:
      - ./ops-config.yaml:/app/configs/ops-config.yaml:ro
      - ./ops-config.local.yaml:/app/configs/ops-config.local.yaml:ro
    depends_on:
      pgbouncer:
        condition: service_healthy
      monitoring-pgbouncer:
        condition: service_healthy
      migrate:
        condition: service_completed_successfully
    ports:
      - "${OPS_API_PORT:-18090}:8090"
    healthcheck:
      test: ["CMD-SHELL", "wget -qO- http://localhost:8090/api/health/live || exit 1"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 10s

  # ────────────────── Frontend ─────────────────────────────────────────────────

  frontend:
    image: ${IMAGE_REGISTRY:-ghcr.io/your-org/geo-rankly}/frontend:${IMAGE_TAG:-latest}
    container_name: geo-frontend
    build:
      context: ..
      dockerfile: Dockerfile.frontend
    restart: unless-stopped
    depends_on:
      tenant-api:
        condition: service_healthy
    ports:
      - "${FRONTEND_PORT:-18080}:80"

  ops-web:
    image: ${IMAGE_REGISTRY:-ghcr.io/your-org/geo-rankly}/ops-web:${IMAGE_TAG:-latest}
    container_name: geo-ops-web
    build:
      context: ..
      dockerfile: Dockerfile.ops-web
    restart: unless-stopped
    depends_on:
      ops-api:
        condition: service_healthy
    ports:
      - "${OPS_WEB_PORT:-18082}:80"

volumes:
  pgdata:
  monitoring_pgdata:
  rabbitmq_data:
  redis_data:
  qdrant_data:
  minio_data: