docker-compose.prod.example.yml

x-main-image: &main-image
  image: ${MEMEXPERT_MAIN_IMAGE:-ghcr.io/averyanalex/memexpert/main:main}

x-worker-image: &worker-image
  image: ${MEMEXPERT_WORKER_IMAGE:-ghcr.io/averyanalex/memexpert/worker:main}

x-app-env: &app-env
  APP_HOST: 0.0.0.0
  APP_PORT: 8000
  DATABASE_URL: postgresql+asyncpg://${POSTGRES_USER:?set POSTGRES_USER}:${POSTGRES_PASSWORD:?set POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB:?set POSTGRES_DB}
  DATABASE_CONNECT_TIMEOUT_SECONDS: ${DATABASE_CONNECT_TIMEOUT_SECONDS:-5.0}
  DATABASE_POOL_SIZE: ${DATABASE_POOL_SIZE:-4}
  DATABASE_MAX_OVERFLOW: ${DATABASE_MAX_OVERFLOW:-2}
  DATABASE_POOL_TIMEOUT_SECONDS: ${DATABASE_POOL_TIMEOUT_SECONDS:-5.0}
  DATABASE_APPLICATION_NAME: ${DATABASE_APPLICATION_NAME:-memexpert}
  REDIS_URL: redis://redis:6379/0
  RABBITMQ_URL: amqp://${RABBITMQ_DEFAULT_USER:?set RABBITMQ_DEFAULT_USER}:${RABBITMQ_DEFAULT_PASS:?set RABBITMQ_DEFAULT_PASS}@rabbitmq:5672/
  QDRANT_URL: http://qdrant:6333
  MEILISEARCH_URL: http://meilisearch:7700
  MEILISEARCH_MASTER_KEY: ${MEILISEARCH_MASTER_KEY:?set MEILISEARCH_MASTER_KEY}
  SEARCH_CANDIDATE_POOL_LIMIT_PER_SOURCE: ${SEARCH_CANDIDATE_POOL_LIMIT_PER_SOURCE:-200}
  RECOMMENDATION_ENABLED: ${RECOMMENDATION_ENABLED:-false}
  RECOMMENDATION_SHADOW_MODE: ${RECOMMENDATION_SHADOW_MODE:-true}
  RECOMMENDATION_CANARY_PERCENT: ${RECOMMENDATION_CANARY_PERCENT:-0}
  RECOMMENDATION_SHADOW_TIMEOUT_SECONDS: ${RECOMMENDATION_SHADOW_TIMEOUT_SECONDS:-0.25}
  RECOMMENDATION_FEED_POOL_MAX_PER_VIEWER: ${RECOMMENDATION_FEED_POOL_MAX_PER_VIEWER:-4}
  S3_ENDPOINT: http://minio:9000
  S3_ACCESS_KEY: ${S3_ACCESS_KEY:?set S3_ACCESS_KEY}
  S3_SECRET_KEY: ${S3_SECRET_KEY:?set S3_SECRET_KEY}
  S3_BUCKET: ${S3_BUCKET:?set S3_BUCKET}
  S3_REGION: ${S3_REGION:-us-east-1}
  IMGPROXY_BASE_URL: http://imgproxy:8080
  IMGPROXY_PUBLIC_BASE_URL: ${IMGPROXY_PUBLIC_BASE_URL:?set IMGPROXY_PUBLIC_BASE_URL}
  IMGPROXY_KEY: ${IMGPROXY_KEY:?set IMGPROXY_KEY}
  IMGPROXY_SALT: ${IMGPROXY_SALT:?set IMGPROXY_SALT}
  MEDIA_PUBLIC_BASE_URL: ${MEDIA_PUBLIC_BASE_URL:-}
  PIPELINE_OPERATOR_TOKEN: ${PIPELINE_OPERATOR_TOKEN:?set PIPELINE_OPERATOR_TOKEN}
  PIPELINE_ALLOWED_MIME_TYPES: ${PIPELINE_ALLOWED_MIME_TYPES:-image/jpeg,image/png,image/webp,image/gif,video/mp4,video/quicktime,video/webm}
  PIPELINE_TRANSCODE_TIMEOUT_SECONDS: ${PIPELINE_TRANSCODE_TIMEOUT_SECONDS:-180.0}
  PIPELINE_BROKER_CONNECTION_TIMEOUT_SECONDS: ${PIPELINE_BROKER_CONNECTION_TIMEOUT_SECONDS:-10.0}
  PIPELINE_CAPACITY_CLOSE_PENDING_COUNT: ${PIPELINE_CAPACITY_CLOSE_PENDING_COUNT:-1000}
  PIPELINE_CAPACITY_REOPEN_PENDING_COUNT: ${PIPELINE_CAPACITY_REOPEN_PENDING_COUNT:-500}
  PIPELINE_CAPACITY_CLOSE_OLDEST_AGE_SECONDS: ${PIPELINE_CAPACITY_CLOSE_OLDEST_AGE_SECONDS:-3600}
  PIPELINE_CAPACITY_REOPEN_OLDEST_AGE_SECONDS: ${PIPELINE_CAPACITY_REOPEN_OLDEST_AGE_SECONDS:-900}
  PIPELINE_CIRCUIT_FAILURE_THRESHOLD: ${PIPELINE_CIRCUIT_FAILURE_THRESHOLD:-3}
  PIPELINE_CIRCUIT_COOLDOWN_SECONDS: ${PIPELINE_CIRCUIT_COOLDOWN_SECONDS:-30}
  PIPELINE_STUCK_RECLAIM_AFTER_SECONDS: ${PIPELINE_STUCK_RECLAIM_AFTER_SECONDS:-900}
  RECOVERY_TELEGRAM_POLL_INTERVAL_SECONDS: ${RECOVERY_TELEGRAM_POLL_INTERVAL_SECONDS:-5}
  RECOVERY_TELEGRAM_BATCH_SIZE: ${RECOVERY_TELEGRAM_BATCH_SIZE:-10}
  PIPELINE_BROKER_SOURCE_ENGAGEMENT_CAPTURE_QUEUE: ${PIPELINE_BROKER_SOURCE_ENGAGEMENT_CAPTURE_QUEUE:-pipeline.source_engagement_capture}
  PIPELINE_BROKER_SOURCE_CHANNEL_AUDIENCE_CAPTURE_QUEUE: ${PIPELINE_BROKER_SOURCE_CHANNEL_AUDIENCE_CAPTURE_QUEUE:-pipeline.source_channel_audience_capture}
  PIPELINE_STORAGE_CONNECTION_TIMEOUT_SECONDS: ${PIPELINE_STORAGE_CONNECTION_TIMEOUT_SECONDS:-10.0}
  PIPELINE_VOYAGE_PROVIDER_MODE: ${PIPELINE_VOYAGE_PROVIDER_MODE:-live}
  PIPELINE_VOYAGE_MODEL: ${PIPELINE_VOYAGE_MODEL:-voyage-multimodal-3.5}
  PIPELINE_VOYAGE_OUTPUT_DIMENSIONS: ${PIPELINE_VOYAGE_OUTPUT_DIMENSIONS:-1024}
  PIPELINE_VOYAGE_API_URL: ${PIPELINE_VOYAGE_API_URL:-https://api.voyageai.com/v1/multimodalembeddings}
  PIPELINE_VOYAGE_API_KEY: ${PIPELINE_VOYAGE_API_KEY:-}
  PIPELINE_VOYAGE_TIMEOUT_SECONDS: ${PIPELINE_VOYAGE_TIMEOUT_SECONDS:-30.0}
  PIPELINE_CLASSIFICATION_PROVIDER_MODE: ${PIPELINE_CLASSIFICATION_PROVIDER_MODE:-live}
  PIPELINE_CLASSIFICATION_API_URL: ${PIPELINE_CLASSIFICATION_API_URL:-}
  PIPELINE_CLASSIFICATION_API_KEY: ${PIPELINE_CLASSIFICATION_API_KEY:-}
  PIPELINE_CLASSIFICATION_MODEL: ${PIPELINE_CLASSIFICATION_MODEL:-memexpert-nsfw-v1}
  PIPELINE_CLASSIFICATION_TIMEOUT_SECONDS: ${PIPELINE_CLASSIFICATION_TIMEOUT_SECONDS:-15.0}
  PIPELINE_CLASSIFICATION_NSFW_THRESHOLD: ${PIPELINE_CLASSIFICATION_NSFW_THRESHOLD:-0.5}
  PIPELINE_SEO_PROVIDER_MODE: ${PIPELINE_SEO_PROVIDER_MODE:-static}
  PIPELINE_SEO_MODEL: ${PIPELINE_SEO_MODEL:-gpt-5-mini}
  PIPELINE_SEO_API_BASE_URL: ${PIPELINE_SEO_API_BASE_URL:-}
  PIPELINE_SEO_API_KEY: ${PIPELINE_SEO_API_KEY:-}
  PIPELINE_SEO_TIMEOUT_SECONDS: ${PIPELINE_SEO_TIMEOUT_SECONDS:-30.0}
  PIPELINE_SEO_MAX_ATTEMPTS: ${PIPELINE_SEO_MAX_ATTEMPTS:-2}
  PIPELINE_SEO_IMAGE_MAX_BYTES: ${PIPELINE_SEO_IMAGE_MAX_BYTES:-5242880}
  PIPELINE_SEO_PROMPT_VERSION: ${PIPELINE_SEO_PROMPT_VERSION:-meme-seo-v1}
  AUTH_JWT_SECRET: ${AUTH_JWT_SECRET:?set AUTH_JWT_SECRET}
  AUTH_ACCESS_TOKEN_TTL_SECONDS: ${AUTH_ACCESS_TOKEN_TTL_SECONDS:-2592000}
  AUTH_ACCESS_COOKIE_NAME: ${AUTH_ACCESS_COOKIE_NAME:-memexpert_access_token}
  AUTH_ACCESS_COOKIE_SECURE: ${AUTH_ACCESS_COOKIE_SECURE:-true}
  AUTH_ACCESS_COOKIE_HTTPONLY: ${AUTH_ACCESS_COOKIE_HTTPONLY:-true}
  AUTH_ACCESS_COOKIE_SAMESITE: ${AUTH_ACCESS_COOKIE_SAMESITE:-lax}
  AUTH_ACCESS_COOKIE_PATH: ${AUTH_ACCESS_COOKIE_PATH:-/}
  AUTH_ACCESS_COOKIE_DOMAIN: ${AUTH_ACCESS_COOKIE_DOMAIN:-}
  AUTH_TELEGRAM_BOT_TOKEN: ${AUTH_TELEGRAM_BOT_TOKEN:-}
  AUTH_TELEGRAM_BOT_USERNAME: ${AUTH_TELEGRAM_BOT_USERNAME:-}
  AUTH_TELEGRAM_LOGIN_MAX_AGE_SECONDS: ${AUTH_TELEGRAM_LOGIN_MAX_AGE_SECONDS:-300}
  AUTH_TELEGRAM_MINIAPP_MAX_AGE_SECONDS: ${AUTH_TELEGRAM_MINIAPP_MAX_AGE_SECONDS:-300}
  AUTH_TELEGRAM_LINK_CODE_TTL_SECONDS: ${AUTH_TELEGRAM_LINK_CODE_TTL_SECONDS:-600}
  AUTH_TELEGRAM_LINK_RETURN_URL: ${AUTH_TELEGRAM_LINK_RETURN_URL:-}
  AUTH_GOOGLE_CLIENT_ID: ${AUTH_GOOGLE_CLIENT_ID:-}
  AUTH_GOOGLE_CLIENT_SECRET: ${AUTH_GOOGLE_CLIENT_SECRET:-}
  AUTH_GOOGLE_REDIRECT_URI: ${AUTH_GOOGLE_REDIRECT_URI:-}
  AUTH_GOOGLE_TOKEN_URL: ${AUTH_GOOGLE_TOKEN_URL:-https://oauth2.googleapis.com/token}
  AUTH_GOOGLE_USERINFO_URL: ${AUTH_GOOGLE_USERINFO_URL:-https://openidconnect.googleapis.com/v1/userinfo}
  AUTH_GOOGLE_TIMEOUT_SECONDS: ${AUTH_GOOGLE_TIMEOUT_SECONDS:-10.0}
  SECURITY_CORS_ALLOWED_ORIGINS: ${SECURITY_CORS_ALLOWED_ORIGINS:?set SECURITY_CORS_ALLOWED_ORIGINS}
  SECURITY_CORS_ALLOWED_ORIGIN_REGEX: ${SECURITY_CORS_ALLOWED_ORIGIN_REGEX:-^https://([a-z0-9-]+\.)?memexpert\.net$}
  SECURITY_RATE_LIMIT_ANALYTICS_WRITE_MAX_REQUESTS: ${SECURITY_RATE_LIMIT_ANALYTICS_WRITE_MAX_REQUESTS:-6000}
  SECURITY_RATE_LIMIT_ANALYTICS_WRITE_WINDOW_SECONDS: ${SECURITY_RATE_LIMIT_ANALYTICS_WRITE_WINDOW_SECONDS:-60}
  TELEGRAM_SESSION_ENCRYPTION_SECRET: ${TELEGRAM_SESSION_ENCRYPTION_SECRET:?set TELEGRAM_SESSION_ENCRYPTION_SECRET}
  CRAWLER_MAX_REQUESTS_PER_SECOND: ${CRAWLER_MAX_REQUESTS_PER_SECOND:-15.0}
  CRAWLER_LIVE_MODE_ENABLED: ${CRAWLER_LIVE_MODE_ENABLED:-true}
  CRAWLER_RECONCILE_INTERVAL_SECONDS: ${CRAWLER_RECONCILE_INTERVAL_SECONDS:-10.0}
  CRAWLER_FRESHNESS_SLO_P50_SECONDS: ${CRAWLER_FRESHNESS_SLO_P50_SECONDS:-60.0}
  CRAWLER_FRESHNESS_SLO_P95_SECONDS: ${CRAWLER_FRESHNESS_SLO_P95_SECONDS:-180.0}
  CRAWLER_DEFAULT_CATCHUP_MESSAGE_LIMIT: ${CRAWLER_DEFAULT_CATCHUP_MESSAGE_LIMIT:-5000}
  RUNTIME_HEALTH_FILE: /tmp/memexpert-runtime-health.json
  RUNTIME_HEALTH_INTERVAL_SECONDS: ${RUNTIME_HEALTH_INTERVAL_SECONDS:-10.0}
  RUNTIME_HEALTH_STALE_AFTER_SECONDS: ${RUNTIME_HEALTH_STALE_AFTER_SECONDS:-45.0}
  RUNTIME_HEALTH_OPERATION_TIMEOUT_SECONDS: ${RUNTIME_HEALTH_OPERATION_TIMEOUT_SECONDS:-900.0}
  SCHEDULER_MATERIALIZED_VIEW_REFRESH_ENABLED: ${SCHEDULER_MATERIALIZED_VIEW_REFRESH_ENABLED:-true}
  SCHEDULER_MATERIALIZED_VIEW_REFRESH_INTERVAL_SECONDS: ${SCHEDULER_MATERIALIZED_VIEW_REFRESH_INTERVAL_SECONDS:-900}
  SCHEDULER_SOURCE_ENGAGEMENT_CAPTURE_ENABLED: ${SCHEDULER_SOURCE_ENGAGEMENT_CAPTURE_ENABLED:-true}
  SCHEDULER_SOURCE_ENGAGEMENT_CAPTURE_INTERVAL_SECONDS: ${SCHEDULER_SOURCE_ENGAGEMENT_CAPTURE_INTERVAL_SECONDS:-21600}
  SCHEDULER_SOURCE_ENGAGEMENT_CAPTURE_BATCH_SIZE: ${SCHEDULER_SOURCE_ENGAGEMENT_CAPTURE_BATCH_SIZE:-100}
  SCHEDULER_SOURCE_ENGAGEMENT_CAPTURE_LEASE_TIMEOUT_SECONDS: ${SCHEDULER_SOURCE_ENGAGEMENT_CAPTURE_LEASE_TIMEOUT_SECONDS:-1800}
  SCHEDULER_SOURCE_CHANNEL_AUDIENCE_CAPTURE_ENABLED: ${SCHEDULER_SOURCE_CHANNEL_AUDIENCE_CAPTURE_ENABLED:-true}
  SCHEDULER_SOURCE_CHANNEL_AUDIENCE_CAPTURE_INTERVAL_SECONDS: ${SCHEDULER_SOURCE_CHANNEL_AUDIENCE_CAPTURE_INTERVAL_SECONDS:-3600}
  SCHEDULER_SOURCE_CHANNEL_AUDIENCE_CAPTURE_BATCH_SIZE: ${SCHEDULER_SOURCE_CHANNEL_AUDIENCE_CAPTURE_BATCH_SIZE:-100}
  SCHEDULER_SOURCE_CHANNEL_AUDIENCE_CAPTURE_PER_SESSION_BATCH_SIZE: ${SCHEDULER_SOURCE_CHANNEL_AUDIENCE_CAPTURE_PER_SESSION_BATCH_SIZE:-20}
  SCHEDULER_SOURCE_CHANNEL_AUDIENCE_CAPTURE_LEASE_TIMEOUT_SECONDS: ${SCHEDULER_SOURCE_CHANNEL_AUDIENCE_CAPTURE_LEASE_TIMEOUT_SECONDS:-1800}
  SCHEDULER_MOTD_ENABLED: ${SCHEDULER_MOTD_ENABLED:-true}
  SCHEDULER_MOTD_INTERVAL_SECONDS: ${SCHEDULER_MOTD_INTERVAL_SECONDS:-86400}
  MOTD_ALGORITHM_VERSION: ${MOTD_ALGORITHM_VERSION:-motd_v2}
  MOTD_CANDIDATE_LOOKBACK_DAYS: ${MOTD_CANDIDATE_LOOKBACK_DAYS:-30}
  MOTD_CANDIDATE_LIMIT: ${MOTD_CANDIDATE_LIMIT:-50}
  MOTD_MIN_QUALITY_SCORE: ${MOTD_MIN_QUALITY_SCORE:-0.5}
  MOTD_POPULARITY_WEIGHT: ${MOTD_POPULARITY_WEIGHT:-0.35}
  MOTD_TRENDING_GROWTH_WEIGHT: ${MOTD_TRENDING_GROWTH_WEIGHT:-0.30}
  MOTD_NOVELTY_WEIGHT: ${MOTD_NOVELTY_WEIGHT:-0.20}
  MOTD_QUALITY_WEIGHT: ${MOTD_QUALITY_WEIGHT:-0.15}
  SCHEDULER_SEARCH_INDEX_SYNC_ENABLED: ${SCHEDULER_SEARCH_INDEX_SYNC_ENABLED:-true}
  SCHEDULER_SEARCH_INDEX_SYNC_INTERVAL_SECONDS: ${SCHEDULER_SEARCH_INDEX_SYNC_INTERVAL_SECONDS:-600}
  SCHEDULER_SEO_BACKLOG_BATCHES_ENABLED: ${SCHEDULER_SEO_BACKLOG_BATCHES_ENABLED:-true}
  SCHEDULER_SEO_BACKLOG_BATCHES_INTERVAL_SECONDS: ${SCHEDULER_SEO_BACKLOG_BATCHES_INTERVAL_SECONDS:-900}
  SCHEDULER_RABBITMQ_OUTBOX_PUBLISHER_ENABLED: ${SCHEDULER_RABBITMQ_OUTBOX_PUBLISHER_ENABLED:-true}
  SCHEDULER_RABBITMQ_OUTBOX_PUBLISHER_INTERVAL_SECONDS: ${SCHEDULER_RABBITMQ_OUTBOX_PUBLISHER_INTERVAL_SECONDS:-5}
  SCHEDULER_RABBITMQ_OUTBOX_PUBLISHER_BATCH_SIZE: ${SCHEDULER_RABBITMQ_OUTBOX_PUBLISHER_BATCH_SIZE:-100}
  SCHEDULER_RABBITMQ_OUTBOX_PUBLISHER_STALE_TIMEOUT_SECONDS: ${SCHEDULER_RABBITMQ_OUTBOX_PUBLISHER_STALE_TIMEOUT_SECONDS:-300}
  SCHEDULER_RECOVERY_DISPATCH_ENABLED: ${SCHEDULER_RECOVERY_DISPATCH_ENABLED:-true}
  SCHEDULER_RECOVERY_DISPATCH_INTERVAL_SECONDS: ${SCHEDULER_RECOVERY_DISPATCH_INTERVAL_SECONDS:-5}
  SCHEDULER_RECOVERY_DISPATCH_BATCH_SIZE: ${SCHEDULER_RECOVERY_DISPATCH_BATCH_SIZE:-50}
  SCHEDULER_PIPELINE_CAPACITY_REFRESH_ENABLED: ${SCHEDULER_PIPELINE_CAPACITY_REFRESH_ENABLED:-true}
  SCHEDULER_PIPELINE_CAPACITY_REFRESH_INTERVAL_SECONDS: ${SCHEDULER_PIPELINE_CAPACITY_REFRESH_INTERVAL_SECONDS:-15}
  SCHEDULER_TELEGRAM_LOGIN_CLEANUP_ENABLED: ${SCHEDULER_TELEGRAM_LOGIN_CLEANUP_ENABLED:-true}
  SCHEDULER_TELEGRAM_LOGIN_CLEANUP_INTERVAL_SECONDS: ${SCHEDULER_TELEGRAM_LOGIN_CLEANUP_INTERVAL_SECONDS:-60}
  SCHEDULER_TELEGRAM_LOGIN_CLEANUP_BATCH_SIZE: ${SCHEDULER_TELEGRAM_LOGIN_CLEANUP_BATCH_SIZE:-100}
  SCHEDULER_ADVISORY_LOCK_ENABLED: ${SCHEDULER_ADVISORY_LOCK_ENABLED:-true}
  SCHEDULER_ADVISORY_LOCK_KEY: ${SCHEDULER_ADVISORY_LOCK_KEY:-0,0}

x-worker-env: &worker-env
  <<: *app-env
  RUNTIME_HEALTH_FILE: /tmp/memexpert-runtime-health.json
  RUNTIME_HEALTH_INTERVAL_SECONDS: "10.0"
  RUNTIME_HEALTH_STALE_AFTER_SECONDS: "45.0"
  RUNTIME_HEALTH_OPERATION_TIMEOUT_SECONDS: "900.0"
  DATABASE_POOL_TIMEOUT_SECONDS: "5.0"
  PIPELINE_OCR_PROVIDER_MODE: ${PIPELINE_OCR_PROVIDER_MODE:-live}
  PIPELINE_OCR_PRIMARY_ENGINE: ${PIPELINE_OCR_PRIMARY_ENGINE:-paddleocr}
  PIPELINE_OCR_PADDLE_COMMAND: ${PIPELINE_OCR_PADDLE_COMMAND:?set PIPELINE_OCR_PADDLE_COMMAND}
  PIPELINE_OCR_FALLBACK_ENGINE: ${PIPELINE_OCR_FALLBACK_ENGINE:-}
  PIPELINE_OCR_FALLBACK_COMMAND: ${PIPELINE_OCR_FALLBACK_COMMAND:-}
  PIPELINE_OCR_TIMEOUT_SECONDS: ${PIPELINE_OCR_TIMEOUT_SECONDS:-120.0}
  PIPELINE_OCR_LOW_CONFIDENCE_THRESHOLD: ${PIPELINE_OCR_LOW_CONFIDENCE_THRESHOLD:-0.6}

services:
  postgres:
    image: postgres:16.14
    restart: unless-stopped
    command:
      - postgres
      - -c
      - shared_preload_libraries=pg_stat_statements
      - -c
      - pg_stat_statements.track=all
      - -c
      - pg_stat_statements.track_planning=on
      - -c
      - track_io_timing=on
    environment:
      POSTGRES_USER: ${POSTGRES_USER:?set POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:?set POSTGRES_PASSWORD}
      POSTGRES_DB: ${POSTGRES_DB:?set POSTGRES_DB}
    volumes:
      - postgres_data:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U $${POSTGRES_USER} -d $${POSTGRES_DB}"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 20s

  redis:
    image: redis:7.4.9
    restart: unless-stopped
    command: ["redis-server", "--appendonly", "yes"]
    volumes:
      - redis_data:/data
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 5s

  rabbitmq:
    image: rabbitmq:4.3.1-management
    user: rabbitmq
    restart: unless-stopped
    environment:
      RABBITMQ_DEFAULT_USER: ${RABBITMQ_DEFAULT_USER:?set RABBITMQ_DEFAULT_USER}
      RABBITMQ_DEFAULT_PASS: ${RABBITMQ_DEFAULT_PASS:?set RABBITMQ_DEFAULT_PASS}
    volumes:
      - rabbitmq_data:/var/lib/rabbitmq
    healthcheck:
      test: ["CMD", "rabbitmq-diagnostics", "-q", "ping"]
      interval: 10s
      timeout: 10s
      retries: 5
      start_period: 30s

  qdrant:
    image: qdrant/qdrant@sha256:0bd98fa7977f1e75694779359ca4e212822e5a71334e28421182f72f209d5286
    restart: unless-stopped
    volumes:
      - qdrant_data:/qdrant/storage
    healthcheck:
      test:
        [
          "CMD-SHELL",
          "bash -lc 'exec 3<>/dev/tcp/127.0.0.1/6333 && printf \"GET /readyz HTTP/1.1\\r\\nHost: localhost\\r\\nConnection: close\\r\\n\\r\\n\" >&3 && grep -q \"200 OK\" <&3'",
        ]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 20s

  meilisearch:
    image: getmeili/meilisearch:v1.46.1
    restart: unless-stopped
    environment:
      MEILI_MASTER_KEY: ${MEILISEARCH_MASTER_KEY:?set MEILISEARCH_MASTER_KEY}
      MEILI_ENV: production
      MEILI_NO_ANALYTICS: "true"
    volumes:
      - meili_data:/meili_data
    healthcheck:
      test: ["CMD-SHELL", "wget --spider --quiet http://127.0.0.1:7700/health || exit 1"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 20s

  minio:
    image: minio/minio:RELEASE.2025-09-07T16-13-09Z
    restart: unless-stopped
    command: server /data --console-address ":9001"
    environment:
      MINIO_ROOT_USER: ${S3_ACCESS_KEY:?set S3_ACCESS_KEY}
      MINIO_ROOT_PASSWORD: ${S3_SECRET_KEY:?set S3_SECRET_KEY}
    volumes:
      - minio_data:/data
    healthcheck:
      test: ["CMD-SHELL", "curl -fsS http://127.0.0.1:9000/minio/health/live || exit 1"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 20s

  minio-init:
    image: minio/mc:RELEASE.2025-08-13T08-35-41Z
    entrypoint: [""]
    restart: "no"
    depends_on:
      minio:
        condition: service_healthy
    environment:
      MINIO_ROOT_USER: ${S3_ACCESS_KEY:?set S3_ACCESS_KEY}
      MINIO_ROOT_PASSWORD: ${S3_SECRET_KEY:?set S3_SECRET_KEY}
      S3_BUCKET: ${S3_BUCKET:?set S3_BUCKET}
    command:
      [
        "/bin/sh",
        "-c",
        "mc alias set memexpert http://minio:9000 \"$${MINIO_ROOT_USER}\" \"$${MINIO_ROOT_PASSWORD}\" && mc mb --ignore-existing \"memexpert/$${S3_BUCKET}\"",
      ]

  imgproxy:
    image: darthsim/imgproxy:v4.0.4
    restart: unless-stopped
    environment:
      IMGPROXY_USE_S3: "true"
      IMGPROXY_S3_ENDPOINT: http://minio:9000
      IMGPROXY_S3_REGION: ${S3_REGION:-us-east-1}
      IMGPROXY_S3_USE_PATH_STYLE: "true"
      AWS_ACCESS_KEY_ID: ${S3_ACCESS_KEY:?set S3_ACCESS_KEY}
      AWS_SECRET_ACCESS_KEY: ${S3_SECRET_KEY:?set S3_SECRET_KEY}
      IMGPROXY_BIND: ":8080"
      IMGPROXY_KEY: ${IMGPROXY_KEY:?set IMGPROXY_KEY}
      IMGPROXY_SALT: ${IMGPROXY_SALT:?set IMGPROXY_SALT}
    depends_on:
      minio:
        condition: service_healthy
    ports:
      - "${IMGPROXY_BIND_ADDRESS:-127.0.0.1}:${IMGPROXY_PORT:-8080}:8080"
    healthcheck:
      test: ["CMD", "imgproxy", "health"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 10s

  migrate:
    <<: *main-image
    restart: "no"
    command: ["alembic", "upgrade", "head"]
    environment: *app-env
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
      rabbitmq:
        condition: service_healthy
      qdrant:
        condition: service_healthy
      meilisearch:
        condition: service_healthy
      minio-init:
        condition: service_completed_successfully
      imgproxy:
        condition: service_healthy
    healthcheck:
      disable: true

  api:
    <<: *main-image
    restart: unless-stopped
    environment:
      <<: *app-env
      TELEGRAM_API_ID: ${TELEGRAM_API_ID:?set TELEGRAM_API_ID}
      TELEGRAM_API_HASH: ${TELEGRAM_API_HASH:?set TELEGRAM_API_HASH}
    ports:
      - "${API_PORT:-8000}:8000"
    depends_on:
      migrate:
        condition: service_completed_successfully

  worker-media:
    <<: *worker-image
    restart: unless-stopped
    command: ["memexpert-workers", "--role", "media"]
    environment:
      <<: *worker-env
      PIPELINE_WORKER_PREFETCH_COUNT: "1"
      DATABASE_POOL_SIZE: "2"
      DATABASE_MAX_OVERFLOW: "1"
      DATABASE_APPLICATION_NAME: memexpert-worker-media
    depends_on:
      migrate:
        condition: service_completed_successfully
      rabbitmq:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "memexpert-runtime-health"]
      interval: 15s
      timeout: 5s
      retries: 3
      start_period: 60s
    mem_limit: 4g
    cpus: 4.0
    pids_limit: 256

  worker-ocr:
    <<: *worker-image
    restart: unless-stopped
    command: ["memexpert-workers", "--role", "ocr"]
    environment:
      <<: *worker-env
      PIPELINE_WORKER_PREFETCH_COUNT: "2"
      PIPELINE_OCR_PADDLE_COMMAND: /opt/paddleocr-venv/bin/python /app/scripts/paddleocr_json.py --input {input} --cpu-threads 8
      OMP_NUM_THREADS: "8"
      OPENBLAS_NUM_THREADS: "8"
      MKL_NUM_THREADS: "8"
      NUMEXPR_NUM_THREADS: "8"
      DATABASE_POOL_SIZE: "2"
      DATABASE_MAX_OVERFLOW: "1"
      DATABASE_APPLICATION_NAME: memexpert-worker-ocr
    depends_on:
      migrate:
        condition: service_completed_successfully
      rabbitmq:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "memexpert-runtime-health"]
      interval: 15s
      timeout: 5s
      retries: 3
      start_period: 300s
    mem_limit: 8g
    cpus: 16.0
    pids_limit: 384

  worker-enrichment:
    <<: *worker-image
    restart: unless-stopped
    command: ["memexpert-workers", "--role", "enrichment"]
    environment:
      <<: *worker-env
      PIPELINE_WORKER_PREFETCH_COUNT: "2"
      DATABASE_POOL_SIZE: "3"
      DATABASE_MAX_OVERFLOW: "1"
      DATABASE_APPLICATION_NAME: memexpert-worker-enrichment
    depends_on:
      migrate:
        condition: service_completed_successfully
      rabbitmq:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "memexpert-runtime-health"]
      interval: 15s
      timeout: 5s
      retries: 3
      start_period: 60s
    mem_limit: 4g
    cpus: 4.0
    pids_limit: 192

  worker-sync:
    <<: *worker-image
    restart: unless-stopped
    command: ["memexpert-workers", "--role", "sync"]
    environment:
      <<: *worker-env
      PIPELINE_WORKER_PREFETCH_COUNT: "4"
      DATABASE_POOL_SIZE: "3"
      DATABASE_MAX_OVERFLOW: "1"
      DATABASE_APPLICATION_NAME: memexpert-worker-sync
    depends_on:
      migrate:
        condition: service_completed_successfully
      rabbitmq:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "memexpert-runtime-health"]
      interval: 15s
      timeout: 5s
      retries: 3
      start_period: 60s
    mem_limit: 2g
    cpus: 2.0
    pids_limit: 128

  worker-telegram:
    <<: *worker-image
    restart: unless-stopped
    command: ["memexpert-workers", "--role", "telegram"]
    environment:
      <<: *worker-env
      PIPELINE_WORKER_PREFETCH_COUNT: "1"
      DATABASE_POOL_SIZE: "2"
      DATABASE_MAX_OVERFLOW: "1"
      DATABASE_APPLICATION_NAME: memexpert-worker-telegram
      TELEGRAM_API_ID: ${TELEGRAM_API_ID:?set TELEGRAM_API_ID}
      TELEGRAM_API_HASH: ${TELEGRAM_API_HASH:?set TELEGRAM_API_HASH}
    depends_on:
      migrate:
        condition: service_completed_successfully
      rabbitmq:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "memexpert-runtime-health"]
      interval: 15s
      timeout: 5s
      retries: 3
      start_period: 60s
    mem_limit: 2g
    cpus: 2.0
    pids_limit: 128

  telegram-crawler:
    <<: *worker-image
    restart: unless-stopped
    command: ["memexpert-telegram-crawler"]
    environment:
      <<: *app-env
      DATABASE_APPLICATION_NAME: memexpert-telegram-crawler
      TELEGRAM_API_ID: ${TELEGRAM_API_ID:?set TELEGRAM_API_ID}
      TELEGRAM_API_HASH: ${TELEGRAM_API_HASH:?set TELEGRAM_API_HASH}
    depends_on:
      migrate:
        condition: service_completed_successfully
    healthcheck:
      test: ["CMD", "memexpert-runtime-health"]
      interval: 15s
      timeout: 5s
      retries: 3
      start_period: 300s

  scheduler:
    <<: *main-image
    restart: unless-stopped
    command: ["memexpert-scheduler"]
    environment:
      <<: *app-env
      DATABASE_APPLICATION_NAME: memexpert-scheduler
      TELEGRAM_API_ID: ${TELEGRAM_API_ID:?set TELEGRAM_API_ID}
      TELEGRAM_API_HASH: ${TELEGRAM_API_HASH:?set TELEGRAM_API_HASH}
    depends_on:
      migrate:
        condition: service_completed_successfully
    healthcheck:
      test: ["CMD", "memexpert-runtime-health"]
      interval: 15s
      timeout: 5s
      retries: 3
      start_period: 60s

  bot:
    <<: *main-image
    profiles: ["bot"]
    restart: unless-stopped
    command: ["sh", "-c", ": \"$${AUTH_TELEGRAM_BOT_TOKEN:?set AUTH_TELEGRAM_BOT_TOKEN when enabling the bot profile}\" && exec memexpert-bot"]
    environment:
      <<: *app-env
      AUTH_TELEGRAM_BOT_TOKEN: ${AUTH_TELEGRAM_BOT_TOKEN:-}
    depends_on:
      migrate:
        condition: service_completed_successfully
    healthcheck:
      disable: true

  frontend:
    image: ${MEMEXPERT_FRONTEND_IMAGE:-ghcr.io/averyanalex/memexpert/frontend:main}
    restart: unless-stopped
    environment:
      HOST: 0.0.0.0
      PORT: 3000
      ORIGIN: ${FRONTEND_ORIGIN:?set FRONTEND_ORIGIN}
      API_BASE_URL: http://api:8000
    ports:
      - "${FRONTEND_PORT:-3000}:3000"
    depends_on:
      api:
        condition: service_healthy

volumes:
  postgres_data:
  redis_data:
  rabbitmq_data:
  qdrant_data:
  meili_data:
  minio_data: