compose.ghcr.yml

# Standalone deployment file: download it on its own and `docker compose up -d`.
# It pulls prebuilt images from GHCR and every setting below has a default.
#
# Optional, best set in an .env file beside this one so later commands keep them:
#   CHAP_IMAGE_TAG     tag for both images                  (default: latest)
#                      latest = newest release, master = master branch, vX.Y.Z = pinned
#   POSTGRES_USER      database user                        (default: chap)
#   POSTGRES_PASSWORD  database password, must be URL-safe  (default: chap)
#   POSTGRES_DB        database name                        (default: chap_core)
#   CHAP_DATABASE_URL  full percent-encoded URL, overrides the POSTGRES_* values
#   CHAP_ROOT_PATH     path prefix when served behind a reverse proxy
#   CHAP_API_TOKEN     API token; unset means no authentication
#
# An alternative to compose.yml, not an overlay: layering the two duplicates
# security_opt / cap_drop entries and fails validation.
services:
  chap:
    restart: unless-stopped
    image: ghcr.io/dhis2-chap/chap-core:${CHAP_IMAGE_TAG:-latest}
    platform: linux/amd64
    init: true
    environment:
      REDIS_HOST: redis
      REDIS_PORT: 6379
      CHAP_DATABASE_URL: ${CHAP_DATABASE_URL:-postgresql://${POSTGRES_USER:-chap}:${POSTGRES_PASSWORD:-chap}@postgres:5432/${POSTGRES_DB:-chap_core}}
      CELERY_BROKER: redis://redis:6379/0
      CHAP_LOGS_DIR: /data/logs
      CHAP_RUNS_DIR: /data/runs
      CHAP_ROOT_PATH: ${CHAP_ROOT_PATH:-}
      CHAP_API_TOKEN: ${CHAP_API_TOKEN:-}
    read_only: true
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    user: chap:chap
    volumes:
      - type: tmpfs
        target: /tmp
        tmpfs:
          size: 2000000000 # 2GB for runtime temp files (API service)
      - type: volume
        source: logs
        target: /data/logs
    extra_hosts:
      - "host.docker.internal:host-gateway"
    networks:
      - default
      - backend
    ports:
      - "8000:8000"
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8000/health"]
      interval: 5s
      timeout: 5s
      retries: 10
      start_period: 30s
    depends_on:
      redis:
        condition: service_healthy
      worker:
        condition: service_started
      postgres:
        condition: service_healthy

  worker:
    restart: unless-stopped
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
    image: ghcr.io/dhis2-chap/chap-worker:${CHAP_IMAGE_TAG:-latest}
    platform: linux/amd64
    init: true
    environment:
      IS_IN_DOCKER: 1
      REDIS_HOST: redis
      REDIS_PORT: 6379
      CHAP_DATABASE_URL: ${CHAP_DATABASE_URL:-postgresql://${POSTGRES_USER:-chap}:${POSTGRES_PASSWORD:-chap}@postgres:5432/${POSTGRES_DB:-chap_core}}
      CELERY_BROKER: redis://redis:6379
      RENV_PATHS_ROOT: /data/renv
      UV_CACHE_DIR: /data/uv
      CHAP_LOGS_DIR: /data/logs
      CHAP_RUNS_DIR: /data/runs
      PYTENSOR_FLAGS: "base_compiledir=/data/pytensor"
    networks:
      - default
      - backend
    command: "/app/.venv/bin/celery -A chap_core.rest_api.celery_tasks worker --loglevel=info"
    working_dir: /app
    # Declared here, not inherited: a pinned tag may predate the image's HEALTHCHECK.
    healthcheck:
      test: ["CMD-SHELL", "/app/.venv/bin/celery -A chap_core.rest_api.celery_tasks inspect ping || exit 1"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 60s
    extra_hosts:
      - "host.docker.internal:host-gateway"
    read_only: true
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    user: chap:chap
    volumes:
      - type: tmpfs
        target: /tmp
        tmpfs:
          size: 2000000000 # 2GB for runtime temp files (model execution)
      - type: volume
        source: runs
        target: /data/runs
      - type: volume
        source: renv
        target: /data/renv
      - type: volume
        source: uv
        target: /data/uv
      - type: volume
        source: logs
        target: /data/logs
      - type: volume
        source: pytensor
        target: /data/pytensor
  redis:
    restart: unless-stopped
    image: valkey/valkey:8
    networks:
      - backend
    healthcheck:
      test: ["CMD", "valkey-cli", "ping"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 10s

  postgres:
    restart: unless-stopped
    image: postgres:17
    environment:
      POSTGRES_USER: ${POSTGRES_USER:-chap}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-chap}
      POSTGRES_DB: ${POSTGRES_DB:-chap_core}
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-chap} -d ${POSTGRES_DB:-chap_core}"]
      interval: 10s
      timeout: 10s
      retries: 10
      start_period: 40s
    volumes:
      - chap-db:/var/lib/postgresql/data
    networks:
      - backend
    expose:
      - "5432"

volumes:
  chap-db: {}
  logs: {}
  renv: {}
  uv: {}
  pytensor: {}
  runs: {}

networks:
  # redis and postgres live here, off the default network, so model services
  # (which attach only to default) cannot reach the Celery broker or the database.
  backend: {}