docker-compose.yml

networks:
  vybe_network:
    driver: bridge

volumes:
  postgres_data:
  redis_data:
  prometheus_data:
  grafana_data:

services:
  db:
    image: postgres:16-alpine
    container_name: vybe_db
    environment:
      POSTGRES_DB: ${DATABASE_NAME:-hackathon_db}
      POSTGRES_USER: ${DATABASE_USER:-postgres}
      POSTGRES_PASSWORD: ${DATABASE_PASSWORD:-postgres}
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${DATABASE_USER:-postgres} -d ${DATABASE_NAME:-hackathon_db}"]
      interval: 10s
      timeout: 5s
      retries: 5
    volumes:
      - postgres_data:/var/lib/postgresql/data
    ports:
      - "5432:5432"
    restart: unless-stopped
    networks:
      - vybe_network

  redis:
    image: redis:7-alpine
    container_name: vybe_redis
    command: redis-server --appendonly yes --requirepass ${REDIS_PASSWORD:-vybesecurecache2026}
    volumes:
      - redis_data:/data
    ports:
      - "6379:6379"
    restart: unless-stopped
    networks:
      - vybe_network
    healthcheck:
      test: ["CMD", "redis-cli", "-a", "${REDIS_PASSWORD:-vybesecurecache2026}", "ping"]
      interval: 5s
      timeout: 3s
      retries: 5

  # --- Monitoring (use: docker compose --profile monitoring up) ---

  prometheus:
    image: prom/prometheus:v2.52.0
    container_name: vybe_prometheus
    profiles: [monitoring]
    volumes:
      - ./monitoring/prometheus/prometheus.yml:/etc/prometheus/prometheus.yml
      - ./monitoring/prometheus/alerts.yml:/etc/prometheus/alerts.yml
      - prometheus_data:/prometheus
    command:
      - "--config.file=/etc/prometheus/prometheus.yml"
      - "--storage.tsdb.path=/prometheus"
    ports:
      - "9090:9090"
    restart: unless-stopped
    networks:
      - vybe_network

  grafana:
    image: grafana/grafana:10.4.2
    container_name: vybe_grafana
    profiles: [monitoring]
    depends_on:
      - prometheus
    volumes:
      - ./monitoring/grafana/provisioning/datasources/datasources.yml:/etc/grafana/provisioning/datasources/datasources.yml
      - ./monitoring/grafana/provisioning/dashboards/dashboards.yml:/etc/grafana/provisioning/dashboards/dashboards.yml
      - ./monitoring/grafana/dashboards:/var/lib/grafana/dashboards
      - grafana_data:/var/lib/grafana
    environment:
      - GF_SECURITY_ADMIN_PASSWORD=${GRAFANA_PASSWORD:-vybeproductionadmin598}
      - GF_USERS_ALLOW_SIGN_UP=false
      - GF_AUTH_ANONYMOUS_ENABLED=false
      - GF_AUTH_ANONYMOUS_ORG_ROLE=Viewer
    ports:
      - "3001:3000"
    restart: unless-stopped
    networks:
      - vybe_network

  alertmanager:
    image: prom/alertmanager:v0.27.0
    container_name: vybe_alertmanager
    profiles: [monitoring]
    volumes:
      - ./monitoring/alertmanager/alertmanager.yml:/etc/alertmanager/config.yml.template:ro
      - ./monitoring/alertmanager/entrypoint.sh:/entrypoint.sh:ro
    env_file:
      - ./backend/.env
    entrypoint: ["/bin/sh", "/entrypoint.sh"]
    command:
      - "--config.file=/etc/alertmanager/config.yml"
      - "--storage.path=/alertmanager"
    ports:
      - "9093:9093"
    restart: unless-stopped
    networks:
      - vybe_network
    depends_on:
      - webhook_proxy

  webhook_proxy:
    build:
      context: ./monitoring/webhook-proxy
      dockerfile: Dockerfile
    container_name: vybe_webhook_proxy
    profiles: [monitoring]
    env_file:
      - ./backend/.env
    restart: unless-stopped
    networks:
      - vybe_network
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:5001/health"]
      interval: 10s
      timeout: 5s
      retries: 3

  node_exporter:
    image: prom/node-exporter:v1.8.1
    container_name: vybe_node_exporter
    profiles: [monitoring]
    command:
      - '--path.rootfs=/host'
    pid: host
    volumes:
      - '/:/host:ro'
    restart: unless-stopped
    networks:
      - vybe_network

  cadvisor:
    image: gcr.io/cadvisor/cadvisor:v0.49.1
    container_name: vybe_cadvisor
    profiles: [monitoring]
    privileged: true
    volumes:
      - /:/rootfs:ro
      - /var/run:/var/run:ro
      - /sys:/sys:ro
      - /dev/disk/:/dev/disk:ro
    devices:
      - /dev/kmsg
    restart: unless-stopped
    deploy:
      resources:
        limits:
          cpus: "0.1"
          memory: 64M
        reservations:
          cpus: "0.05"
          memory: 32M
    logging:
      driver: json-file
      options:
        max-size: "5m"
        max-file: "2"
    networks:
      - vybe_network

  postgres_exporter:
    image: prometheuscommunity/postgres-exporter:v0.15.0
    container_name: vybe_postgres_exporter
    profiles: [monitoring]
    environment:
      DATA_SOURCE_NAME: "postgresql://${DATABASE_USER:-postgres}:${DATABASE_PASSWORD:-postgres}@db:5432/${DATABASE_NAME:-hackathon_db}?sslmode=disable"
    depends_on:
      db:
        condition: service_healthy
    restart: unless-stopped
    networks:
      - vybe_network

  redis_exporter:
    image: oliver006/redis_exporter:v1.58.0
    container_name: vybe_redis_exporter
    profiles: [monitoring]
    environment:
      REDIS_ADDR: "redis://:${REDIS_PASSWORD:-vybesecurecache2026}@redis:6379"
    depends_on:
      redis:
        condition: service_healthy
    restart: unless-stopped
    networks:
      - vybe_network