docker-compose.yml

version: "3.9"

services:
  # ── SPIR FastAPI Backend ─────────────────────────────────────────────────────
  spir-api:
    build:
      context: .
      dockerfile: Dockerfile
    container_name: spir-api
    restart: unless-stopped
    ports:
      - "8000:8000"
    environment:
      - SPIR_ENV=${SPIR_ENV:-production}
      - SPIR_API_KEY=${SPIR_API_KEY}
      - SPIR_SECRET_KEY=${SPIR_SECRET_KEY}
      - POSTGRES_HOST=postgres
      - POSTGRES_DB=${POSTGRES_DB:-spir}
      - POSTGRES_USER=${POSTGRES_USER:-spir}
      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
      - OPENSEARCH_HOST=opensearch
      - REDIS_HOST=redis
      - SMTP_HOST=${SMTP_HOST}
      - SMTP_PORT=${SMTP_PORT:-587}
      - SMTP_USER=${SMTP_USER}
      - SMTP_PASSWORD=${SMTP_PASSWORD}
      - SMTP_FROM=${SMTP_FROM}
      - SLACK_WEBHOOK_URL=${SLACK_WEBHOOK_URL}
      - TEAMS_WEBHOOK_URL=${TEAMS_WEBHOOK_URL}
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
      opensearch:
        condition: service_healthy
    volumes:
      - spir-forensics:/var/spir/forensics
    networks:
      - spir-net
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8000/health"]
      interval: 30s
      timeout: 10s
      retries: 3

  # ── React Dashboard (served by Nginx) ────────────────────────────────────────
  spir-dashboard:
    image: node:20-alpine
    container_name: spir-dashboard
    restart: unless-stopped
    working_dir: /app
    command: sh -c "npm install && npm start"
    ports:
      - "3000:3000"
    environment:
      - REACT_APP_API_URL=http://localhost:8000
    volumes:
      - ./dashboard:/app
    networks:
      - spir-net

  # ── PostgreSQL ───────────────────────────────────────────────────────────────
  postgres:
    image: postgres:16-alpine
    container_name: spir-postgres
    restart: unless-stopped
    environment:
      - POSTGRES_DB=${POSTGRES_DB:-spir}
      - POSTGRES_USER=${POSTGRES_USER:-spir}
      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD:-spirpassword}
    volumes:
      - postgres-data:/var/lib/postgresql/data
    ports:
      - "5432:5432"
    networks:
      - spir-net
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-spir}"]
      interval: 10s
      timeout: 5s
      retries: 5

  # ── OpenSearch ───────────────────────────────────────────────────────────────
  opensearch:
    image: opensearchproject/opensearch:2.12.0
    container_name: spir-opensearch
    restart: unless-stopped
    environment:
      - discovery.type=single-node
      - OPENSEARCH_INITIAL_ADMIN_PASSWORD=${OPENSEARCH_PASSWORD:-Admin1234!}
      - plugins.security.disabled=false
    volumes:
      - opensearch-data:/usr/share/opensearch/data
    ports:
      - "9200:9200"
    networks:
      - spir-net
    healthcheck:
      test: ["CMD-SHELL", "curl -sk https://localhost:9200 -u admin:${OPENSEARCH_PASSWORD:-Admin1234!} | grep -q 'cluster_name'"]
      interval: 30s
      timeout: 15s
      retries: 5

  # ── Redis ────────────────────────────────────────────────────────────────────
  redis:
    image: redis:7-alpine
    container_name: spir-redis
    restart: unless-stopped
    command: redis-server --requirepass ${REDIS_PASSWORD:-spirredis}
    volumes:
      - redis-data:/data
    ports:
      - "6379:6379"
    networks:
      - spir-net
    healthcheck:
      test: ["CMD", "redis-cli", "--no-auth-warning", "-a", "${REDIS_PASSWORD:-spirredis}", "ping"]
      interval: 10s
      timeout: 5s
      retries: 5

volumes:
  postgres-data:
  opensearch-data:
  redis-data:
  spir-forensics:

networks:
  spir-net:
    driver: bridge