docker-compose.prod.yml

# =============================================================
# iTrade Production Docker Compose
# =============================================================
# Usage:
#   docker compose -f docker-compose.prod.yml up -d
#
# Required env files on the host (created from deploy/env.*.template):
#   /opt/itrade/.env.db
#   /opt/itrade/.env.console
#   /opt/itrade/.env.web
#
# SSL/proxy is handled externally by nginx-proxy-manager.
#
# Startup order:
#   db (healthy) → schema-migrator (completed) → console + web
# =============================================================

services:
  # ----------------------------------------------------------
  # Shared Dependencies Base Image
  # ----------------------------------------------------------
  # This service builds the shared dependencies image that web,
  # console, and schema-migrator all use. Building it first ensures
  # dependencies are only installed once, saving significant build time.
  # ----------------------------------------------------------
  deps:
    build:
      context: .
      dockerfile: Dockerfile.deps
    image: itrade-deps:latest
    # This service is a build-only target - it's built explicitly in the deploy workflow
    # and then used by web, console, and schema-migrator Dockerfiles
    profiles:
      - build-only
    # Prevent this service from running (it's just a base image)
    entrypoint: ['/bin/sh', '-c', "echo 'This is a build-only service' && exit 0"]

  # ----------------------------------------------------------
  # PostgreSQL database
  # ----------------------------------------------------------
  # NOTE: We use the pgvector-bundled image (pgvector/pgvector:pg18) rather
  # than vanilla postgres:18-alpine because the help-KB chatbot relies on
  # the `vector` extension. The image is built on top of the official
  # postgres:18 (Debian-slim) and remains volume-compatible with previous
  # postgres:18 data directories.
  # See: https://hub.docker.com/r/pgvector/pgvector
  # ----------------------------------------------------------
  db:
    image: pgvector/pgvector:pg18
    container_name: itrade-db
    ports:
      - '5432:5432'
    volumes:
      - postgres_data:/var/lib/postgresql
    env_file:
      - /opt/itrade/.env.db
    restart: unless-stopped
    healthcheck:
      test:
        [
          'CMD-SHELL',
          'pg_isready -U $${POSTGRES_USER:-postgres} -d $${POSTGRES_DB:-itrade}',
        ]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 20s
    networks:
      - itrade-net
    logging:
      driver: 'json-file'
      options:
        max-size: '10m'
        max-file: '3'

  # ----------------------------------------------------------
  # Schema Migrator (init container — runs once and exits)
  # ----------------------------------------------------------
  schema-migrator:
    image: ${SCHEMA_MIGRATOR_IMAGE:-itrade-schema-migrator:latest}
    build:
      context: .
      dockerfile: apps/console/Dockerfile
      target: schema-migrator
    container_name: itrade-schema-migrator
    env_file:
      - /opt/itrade/.env.console # provides DB_HOST, DB_PORT, DB_USER, DB_PASSWORD, DB_DB
    depends_on:
      db:
        condition: service_healthy
    restart: 'no' # ← run ONCE and exit (init container pattern)
    networks:
      - itrade-net
    logging:
      driver: 'json-file'
      options:
        max-size: '5m'
        max-file: '2'

  # ----------------------------------------------------------
  # Trading Engine (console app)
  # ----------------------------------------------------------
  console:
    image: ${CONSOLE_IMAGE:-itrade-console:latest}
    build:
      context: .
      dockerfile: apps/console/Dockerfile
      target: console
    container_name: itrade-console
    env_file:
      - /opt/itrade/.env.console
    volumes:
      - /opt/itrade/firebase-service-account.json:/secrets/firebase-service-account.json:ro
    depends_on:
      schema-migrator:
        condition: service_completed_successfully
    restart: unless-stopped
    # Give trading engine time to gracefully close WebSocket connections & flush state
    stop_grace_period: 30s
    networks:
      - itrade-net
    logging:
      driver: 'json-file'
      options:
        max-size: '50m'
        max-file: '5'

  # ----------------------------------------------------------
  # Adminer (Database Management UI)
  # ----------------------------------------------------------
  adminer:
    image: adminer
    container_name: itrade-adminer
    restart: always
    ports:
      - '8080:8080'
    depends_on:
      db:
        condition: service_healthy
    networks:
      - itrade-net
    logging:
      driver: 'json-file'
      options:
        max-size: '5m'
        max-file: '2'

  # ----------------------------------------------------------
  # Web Application (Next.js)
  # ----------------------------------------------------------
  # Port 3002 is exposed to the host so that an external
  # nginx-proxy-manager can reverse-proxy to it.
  # ----------------------------------------------------------
  web:
    image: ${WEB_IMAGE:-itrade-web:latest}
    build:
      context: .
      dockerfile: apps/web/Dockerfile
    container_name: itrade-web
    ports:
      - '3002:3002'
    env_file:
      - /opt/itrade/.env.web
    volumes:
      - /opt/itrade/firebase-service-account.json:/secrets/firebase-service-account.json:ro
    depends_on:
      db:
        condition: service_healthy
    restart: unless-stopped
    # Graceful shutdown: give Next.js time to finish in-flight requests
    stop_grace_period: 15s
    healthcheck:
      test:
        [
          'CMD-SHELL',
          'node -e "fetch(''http://localhost:3002/'').then((r)=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"',
        ]
      interval: 15s
      timeout: 10s
      retries: 3
      start_period: 30s
    networks:
      - itrade-net
      - proxy-net
    logging:
      driver: 'json-file'
      options:
        max-size: '10m'
        max-file: '3'

# ----------------------------------------------------------
# Volumes
# NOTE: postgres_data is a named volume — it PERSISTS across
# container rebuilds and `docker compose up --build`.
# Only `docker compose down -v` would delete it.
# ----------------------------------------------------------
volumes:
  postgres_data:
    driver: local

# ----------------------------------------------------------
# Networks
# ----------------------------------------------------------
networks:
  itrade-net:
    driver: bridge
  proxy-net:
    external: true