From 30da404a56589827e8ac8750e99d3a437567cb14 Mon Sep 17 00:00:00 2001
From: Metbcy <amirbredy1@gmail.com>
Date: Wed, 3 Jun 2026 14:44:20 +0000
Subject: [PATCH] fix(compose): repair docker-compose, add redis service

PR #15 squash left a malformed docker-compose.yml: a duplicated
frontend block tail, a redis-data volume but no redis service, and
the obsolete version key. Repair the structure and add a real
redis:7-alpine service so SECURESCAN_REDIS_URL is wired end to end.

- Drop obsolete version field
- Add redis service with appendonly persistence and ping healthcheck
- Backend now depends_on redis and accepts SECURESCAN_REDIS_URL and
  SECURESCAN_REDIS_KEY_PREFIX from the environment
- Compose now validates with docker compose config
---
 docker-compose.yml | 25 +++++++++++++++----------
 1 file changed, 15 insertions(+), 10 deletions(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 27b6dae..a1632eb 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,5 +1,3 @@
-version: "3.9"
-
 services:
   backend:
     build:
@@ -10,10 +8,14 @@ services:
     environment:
       - SECURESCAN_DATABASE_PATH=/data/securescan.db
       - SECURESCAN_GROQ_API_KEY=${GROQ_API_KEY:-}
+      - SECURESCAN_REDIS_URL=${SECURESCAN_REDIS_URL:-}
+      - SECURESCAN_REDIS_KEY_PREFIX=${SECURESCAN_REDIS_KEY_PREFIX:-ss:}
     volumes:
       - scan-data:/data
     # NOTE: Docker socket mount removed for security.
     # For container scanning with Trivy, use DinD or mount specific image tarballs.
+    depends_on:
+      - redis
     restart: unless-stopped
 
   frontend:
@@ -28,15 +30,18 @@ services:
       - backend
     restart: unless-stopped
 
-volumes:
-  scan-data:
-  redis-data:
-      - "3000:3000"
-    environment:
-      - NEXT_PUBLIC_API_URL=http://backend:8000
-    depends_on:
-      - backend
+  redis:
+    image: redis:7-alpine
+    command: ["redis-server", "--appendonly", "yes"]
+    volumes:
+      - redis-data:/data
+    healthcheck:
+      test: ["CMD", "redis-cli", "ping"]
+      interval: 10s
+      timeout: 3s
+      retries: 5
     restart: unless-stopped
 
 volumes:
   scan-data:
+  redis-data: