docker-compose.yml

services:
  # --- Shared Infrastructure ---
  postgres:
    image: postgres:16-alpine
    container_name: chassis-postgres
    restart: unless-stopped
    environment:
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
      POSTGRES_DB: ${POSTGRES_DB}
    ports:
      - "${POSTGRES_PORT:-5432}:5432"
    volumes:
      - chassis_pgdata:/var/lib/postgresql/data
      - ./infrastructure/postgres/init:/docker-entrypoint-initdb.d
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER} -d ${POSTGRES_DB}"]
      interval: 5s
      timeout: 5s
      retries: 5

  redis:
    image: redis:7-alpine
    container_name: chassis-redis
    restart: unless-stopped
    command: redis-server /usr/local/etc/redis/redis.conf --requirepass ${REDIS_PASSWORD}
    ports:
      - "${REDIS_PORT:-6379}:6379"
    volumes:
      - chassis_redis_data:/data
      - ./infrastructure/redis/redis.conf:/usr/local/etc/redis/redis.conf:ro
    healthcheck:
      test: ["CMD", "redis-cli", "-a", "${REDIS_PASSWORD}", "ping"]
      interval: 5s
      timeout: 3s
      retries: 5

  rabbitmq:
    image: rabbitmq:3.13-management-alpine
    container_name: chassis-rabbitmq
    restart: unless-stopped
    environment:
      RABBITMQ_DEFAULT_USER: ${RABBITMQ_DEFAULT_USER}
      RABBITMQ_DEFAULT_PASS: ${RABBITMQ_DEFAULT_PASS}
    ports:
      - "${RABBITMQ_PORT:-5672}:5672"
      - "${RABBITMQ_MGMT_PORT:-15672}:15672"
    volumes:
      - chassis_rabbit_data:/var/lib/rabbitmq
      - ./infrastructure/rabbitmq/definitions.json:/etc/rabbitmq/definitions.json
      - ./infrastructure/rabbitmq/rabbitmq.conf:/etc/rabbitmq/rabbitmq.conf
    healthcheck:
      test: ["CMD", "rabbitmq-diagnostics", "check_port_connectivity"]
      interval: 10s
      timeout: 5s
      retries: 5

  seq:
    image: datalust/seq:latest
    container_name: chassis-seq
    restart: unless-stopped
    environment:
      ACCEPT_EULA: "Y"
    ports:
      - "5341:5341"
      - "5342:80"
    volumes:
      - chassis_seq_data:/data

  identity-service:
    build:
      context: ./services/identity-service
      dockerfile: Dockerfile
    container_name: chassis-identity
    ports:
      - "${IDENTITY_SERVICE_PORT:-3001}:3001"
    environment:
      - DATABASE_URL=postgresql://chassis_app:chassis_app_pwd@postgres:5432/saas_chassis?schema=iam
      - REDIS_URL=redis://:${REDIS_PASSWORD}@redis:6379
      - RABBITMQ_URL=amqp://${RABBITMQ_DEFAULT_USER}:${RABBITMQ_DEFAULT_PASS}@rabbitmq:5672
      - JWT_SECRET=${JWT_SECRET}
      - JWT_EXPIRY=${JWT_EXPIRY:-15m}
      - JWT_REFRESH_EXPIRY=${JWT_REFRESH_EXPIRY:-7d}
      - PORT=3001
      - NODE_ENV=production
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
      rabbitmq:
        condition: service_healthy
    healthcheck:
      test: ["CMD-SHELL", "wget -qO- http://localhost:3001/health || exit 1"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 30s

  tenant-manager:
    build:
      context: ./services/tenant-manager
      dockerfile: Dockerfile
    container_name: chassis-tenant-manager
    ports:
      - "${TENANT_MANAGER_PORT:-3002}:3002"
    environment:
      - DATABASE_URL=postgresql://chassis_app:chassis_app_pwd@postgres:5432/saas_chassis?schema=tenant_mgmt
      - REDIS_URL=redis://:${REDIS_PASSWORD}@redis:6379
      - RABBITMQ_URL=amqp://${RABBITMQ_DEFAULT_USER}:${RABBITMQ_DEFAULT_PASS}@rabbitmq:5672
      - JWT_SECRET=${JWT_SECRET}
      - INTERNAL_SERVICE_TOKEN=${INTERNAL_SERVICE_TOKEN}
      - IDENTITY_SERVICE_URL=http://identity-service:3001
      - PORT=3002
      - NODE_ENV=production
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
      rabbitmq:
        condition: service_healthy
      identity-service:
        condition: service_started
    healthcheck:
      test: ["CMD-SHELL", "wget -qO- http://localhost:3002/health || exit 1"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 30s

  billing-engine:
    build:
      context: ./services/billing-engine
      dockerfile: Dockerfile
    container_name: chassis-billing
    ports:
      - "${BILLING_ENGINE_PORT:-3003}:3003"
    environment:
      - DATABASE_URL=postgresql://chassis_app:chassis_app_pwd@postgres:5432/saas_chassis?schema=billing
      - REDIS_URL=redis://:${REDIS_PASSWORD}@redis:6379
      - RABBITMQ_URL=amqp://${RABBITMQ_DEFAULT_USER}:${RABBITMQ_DEFAULT_PASS}@rabbitmq:5672
      - JWT_SECRET=${JWT_SECRET}
      - STRIPE_SECRET_KEY=${STRIPE_SECRET_KEY:-}
      - STRIPE_WEBHOOK_SECRET=${STRIPE_WEBHOOK_SECRET:-}
      - STRIPE_SUCCESS_URL=${STRIPE_SUCCESS_URL:-http://localhost:3000/billing/success}
      - STRIPE_CANCEL_URL=${STRIPE_CANCEL_URL:-http://localhost:3000/billing/cancel}
      - STRIPE_PORTAL_RETURN_URL=${STRIPE_PORTAL_RETURN_URL:-http://localhost:3000/billing}
      - INTERNAL_SERVICE_TOKEN=${INTERNAL_SERVICE_TOKEN}
      - PORT=3003
      - NODE_ENV=production
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
      rabbitmq:
        condition: service_healthy
      tenant-manager:
        condition: service_started
    healthcheck:
      test: ["CMD-SHELL", "wget -qO- http://localhost:3003/health || exit 1"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 30s

  universal-ledger:
    build:
      context: ./services/universal-ledger
      dockerfile: Dockerfile
    container_name: chassis-ledger
    ports:
      - "${LEDGER_SERVICE_PORT:-3006}:3006"
    environment:
      - DATABASE_URL=Host=postgres;Database=saas_chassis;Username=chassis_app;Password=chassis_app_pwd;SearchPath=ledger
      - RABBITMQ_URL=amqp://${RABBITMQ_DEFAULT_USER}:${RABBITMQ_DEFAULT_PASS}@rabbitmq:5672
      - SEQ_URL=http://seq:5341
      - ASPNETCORE_ENVIRONMENT=Production
    depends_on:
      postgres:
        condition: service_healthy
      rabbitmq:
        condition: service_healthy
    healthcheck:
      test: ["CMD-SHELL", "wget -qO- http://localhost:3006/health || exit 1"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 30s

  api-gateway:
    build:
      context: ./services/api-gateway
      dockerfile: Dockerfile
    container_name: chassis-gateway
    ports:
      - "${API_GATEWAY_PORT:-8080}:8080"
    environment:
      - PORT=8080
      - JWT_SECRET=${JWT_SECRET}
      - REDIS_URL=redis://:${REDIS_PASSWORD}@redis:6379
      - INTERNAL_SERVICE_TOKEN=${INTERNAL_SERVICE_TOKEN}
      - IDENTITY_SERVICE_URL=http://identity-service:3001
      - TENANT_MANAGER_URL=http://tenant-manager:3002
      - BILLING_ENGINE_URL=http://billing-engine:3003
      - AUDIT_SERVICE_URL=http://audit-service:3005
      - LEDGER_SERVICE_URL=http://universal-ledger:3006
      # Product routes are NOT configured here — the chassis is product-agnostic.
      # When a product (e.g., BariManager) is deployed, it registers itself by
      # adding to PRODUCT_ROUTES. See 10-BARIMANAGER-IMPLEMENTATION.md for how
      # BariManager's docker-compose.override.yml injects its route.
      - PRODUCT_ROUTES=${PRODUCT_ROUTES:-}
    depends_on:
      redis:
        condition: service_healthy
    healthcheck:
      test: ["CMD-SHELL", "wget -qO- http://localhost:8080/health || exit 1"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 30s

  audit-service:
    build:
      context: ./services/audit-service
      dockerfile: Dockerfile
    container_name: chassis-audit
    ports:
      - "${AUDIT_SERVICE_PORT:-3005}:3005"
    environment:
      - DATABASE_URL=postgresql://chassis_app:chassis_app_pwd@postgres:5432/saas_chassis
      - RABBITMQ_URL=amqp://${RABBITMQ_DEFAULT_USER}:${RABBITMQ_DEFAULT_PASS}@rabbitmq:5672
      - PORT=3005
    depends_on:
      postgres:
        condition: service_healthy
      rabbitmq:
        condition: service_healthy
    healthcheck:
      test: ["CMD-SHELL", "wget -qO- http://localhost:3005/health || exit 1"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 30s

  flyway:
    image: flyway/flyway:10-alpine
    container_name: chassis-flyway
    depends_on:
      postgres:
        condition: service_healthy
    volumes:
      - ./migrations/iam:/flyway/sql/iam
      - ./migrations/billing:/flyway/sql/billing
      - ./migrations/tenants:/flyway/sql/tenants
      - ./migrations/ledger:/flyway/sql/ledger
    environment:
      - FLYWAY_URL=jdbc:postgresql://postgres:5432/${POSTGRES_DB:-saas_chassis}
      - FLYWAY_USER=${POSTGRES_USER}
      - FLYWAY_PASSWORD=${POSTGRES_PASSWORD}
      - FLYWAY_SCHEMAS=iam,billing,tenant_mgmt,ledger
      - FLYWAY_LOCATIONS=filesystem:/flyway/sql
      - FLYWAY_CONNECT_RETRIES=5
    command: migrate
    profiles:
      - migrate

volumes:
  chassis_pgdata:
  chassis_redis_data:
  chassis_rabbit_data:
  chassis_seq_data: