docker-compose.yml

services:
  traefik:
    image: traefik:v3
    command:
      - --providers.docker=true
      - --providers.docker.exposedbydefault=false
      - --providers.docker.network=eoapi-network
      - --entrypoints.web.address=:8080
    ports:
      - "${MY_DOCKER_IP:-127.0.0.1}:8080:8080"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
    depends_on:
      - doc-server
      - stac-auth-proxy
      - raster
      - vector
      - stac-browser

  doc-server:
    image: nginxinc/nginx-unprivileged:alpine
    volumes:
      - ./dockerfiles/landing:/usr/share/nginx/html:ro
    labels:
      - traefik.enable=true
      - traefik.http.routers.doc-server.rule=Path(`/`) || PathPrefix(`/assets/`) || PathPrefix(`/img/`)
      - traefik.http.routers.doc-server.entrypoints=web
      - traefik.http.services.doc-server.loadbalancer.server.port=8080

  stac-browser:
    build:
      context: dockerfiles
      dockerfile: Dockerfile.browser
      args:
        STAC_BROWSER_REPO: https://github.com/pantierra/stac-browser.git
        STAC_BROWSER_REF: 9c299f43c7d8506d5b655c0a1de3924ba38a1f63
    environment:
      SB_pathPrefix: "${EOAPI_BROWSER_PATH_PREFIX:-/browser}"
      SB_catalogUrl: "${EOAPI_STAC_BROWSER_CATALOG_URL:-/stac}"
      SB_catalogTitle: "eoAPI STAC Browser"
      SB_useTileLayerAsFallback: "false"
      SB_historyMode: history
      EOAPI_TILE_SERVER_BASE_URL: "${EOAPI_TILE_SERVER_BASE_URL:-http://127.0.0.1:8080/raster}"
    env_file:
      - path: .env
        required: false
      - path: .stac-browser.env
        required: false
    depends_on:
      - stac-auth-proxy
      - raster
      - database
    labels:
      - traefik.enable=true
      - traefik.http.routers.stac-browser.rule=PathPrefix(`/browser`)
      - traefik.http.routers.stac-browser.entrypoints=web
      - traefik.http.services.stac-browser.loadbalancer.server.port=8080

  stac:
    build:
      context: .
      dockerfile: dockerfiles/Dockerfile.stac
    environment:
      - PYTHONUNBUFFERED=1
      # Application
      - POSTGRES_USER=username
      - POSTGRES_PASS=password
      - POSTGRES_DBNAME=postgis
      - POSTGRES_HOST_READER=database
      - POSTGRES_HOST_WRITER=database
      - POSTGRES_PORT=5432
      - DB_MIN_CONN_SIZE=1
      - DB_MAX_CONN_SIZE=1
      # - TITILER_ENDPOINT=raster
      - ROOT_PATH=/stac
      - TITILER_ENDPOINT=http://127.0.0.1:8080/raster
      - ENABLE_TRANSACTION=true
      - CORS_METHODS=GET,POST,PUT,DELETE,OPTIONS
    env_file:
      - path: .env
        required: false
      - path: .stac.env
        required: false
    depends_on:
      - database
    command: bash -c "bash /tmp/scripts/wait-for-it.sh -t 120 -h database -p 5432 && uvicorn eoapi.stac.app:app --host 0.0.0.0 --port 8081 --workers 1"
    develop:
      watch:
        - action: sync+restart
          path: ./runtimes/eoapi/stac/eoapi
          target: /usr/local/lib/python3.12/site-packages/eoapi
        - action: rebuild
          path: ./runtimes/eoapi/stac
    volumes:
      - ./dockerfiles/scripts:/tmp/scripts

  stac-auth-proxy:
    image: ghcr.io/developmentseed/stac-auth-proxy:v1.1.1@sha256:c827a67bfd8e2eee6ed5be46d1a99d3aca307e18f154316e719d2332d15ea4ef
    environment:
      UPSTREAM_URL: http://stac:8081
      OIDC_DISCOVERY_URL: ${EOAPI_AUTH_OIDC_DISCOVERY_URL:-}
      OIDC_DISCOVERY_INTERNAL_URL: ${EOAPI_AUTH_OIDC_DISCOVERY_INTERNAL_URL:-}
      DEFAULT_PUBLIC: "true"
      OVERRIDE_HOST: "false"
      ROOT_PATH: /stac
    env_file:
      - path: .env
        required: false
    depends_on:
      stac:
        condition: service_started
    labels:
      - traefik.enable=true
      - traefik.http.routers.stac.rule=PathPrefix(`/stac`)
      - traefik.http.routers.stac.entrypoints=web
      - traefik.http.services.stac.loadbalancer.server.port=8000

  raster:
    # At the time of writing, rasterio wheels are not available for arm64 arch
    # so we force the image to be built with linux/amd64
    platform: linux/amd64
    build:
      context: .
      dockerfile: dockerfiles/Dockerfile.raster
    environment:
      - PYTHONUNBUFFERED=1
      # Application
      - POSTGRES_USER=username
      - POSTGRES_PASS=password
      - POSTGRES_DBNAME=postgis
      - POSTGRES_HOST=database
      - POSTGRES_PORT=5432
      - DB_MIN_CONN_SIZE=1
      - DB_MAX_CONN_SIZE=10
      - CPL_TMPDIR=/tmp
      - GDAL_CACHEMAX=75%
      - GDAL_INGESTED_BYTES_AT_OPEN=32768
      - GDAL_DISABLE_READDIR_ON_OPEN=EMPTY_DIR
      - GDAL_HTTP_MERGE_CONSECUTIVE_RANGES=YES
      - GDAL_HTTP_MULTIPLEX=YES
      - GDAL_HTTP_VERSION=2
      - VSI_CACHE=TRUE
      - VSI_CACHE_SIZE=536870912
      - MOSAIC_CONCURRENCY=1
      - ROOT_PATH=/raster
      - AWS_ACCESS_KEY_ID=${AWS_ACCESS_KEY_ID}
      - AWS_SECRET_ACCESS_KEY=${AWS_SECRET_ACCESS_KEY}
      - AWS_SESSION_TOKEN=${AWS_SESSION_TOKEN}
    env_file:
      - path: .env
        required: false
      - path: .raster.env
        required: false
    depends_on:
      - database
    command: bash -c "bash /tmp/scripts/wait-for-it.sh -t 120 -h database -p 5432 && uvicorn eoapi.raster.app:app --host 0.0.0.0 --port 8082 --workers 10"
    labels:
      - traefik.enable=true
      - traefik.http.routers.raster.rule=PathPrefix(`/raster`)
      - traefik.http.routers.raster.entrypoints=web
      - traefik.http.routers.raster.middlewares=raster-stripprefix
      - traefik.http.middlewares.raster-stripprefix.stripprefix.prefixes=/raster
      - traefik.http.services.raster.loadbalancer.server.port=8082
    develop:
      watch:
        - action: sync+restart
          path: ./runtimes/eoapi/raster/eoapi
          target: /usr/local/lib/python3.12/site-packages/eoapi
        - action: rebuild
          path: ./runtimes/eoapi/raster
    volumes:
      - ./dockerfiles/scripts:/tmp/scripts

  vector:
    build:
      context: .
      dockerfile: dockerfiles/Dockerfile.vector
    environment:
      - PYTHONUNBUFFERED=1
      # Application
      - POSTGRES_USER=username
      - POSTGRES_PASS=password
      - POSTGRES_DBNAME=postgis
      - POSTGRES_HOST=database
      - POSTGRES_PORT=5432
      - DB_MIN_CONN_SIZE=1
      - DB_MAX_CONN_SIZE=10
      - DEBUG=TRUE
      - ROOT_PATH=/vector
    env_file:
      - path: .env
        required: false
      - path: .vector.env
        required: false
    command: bash -c "bash /tmp/scripts/wait-for-it.sh -t 120 -h database -p 5432 && uvicorn eoapi.vector.app:app --host 0.0.0.0 --port 8083 --workers 10"
    labels:
      - traefik.enable=true
      - traefik.http.routers.vector.rule=PathPrefix(`/vector`)
      - traefik.http.routers.vector.entrypoints=web
      - traefik.http.routers.vector.middlewares=vector-stripprefix
      - traefik.http.middlewares.vector-stripprefix.stripprefix.prefixes=/vector
      - traefik.http.services.vector.loadbalancer.server.port=8083
    develop:
      watch:
        - action: sync+restart
          path: ./runtimes/eoapi/vector/eoapi
          target: /usr/local/lib/python3.12/site-packages/eoapi
        - action: rebuild
          path: ./runtimes/eoapi/vector
    depends_on:
      - database
    volumes:
      - ./dockerfiles/scripts:/tmp/scripts

  database:
    image: ghcr.io/stac-utils/pgstac:v0.9.11
    environment:
      - POSTGRES_USER=username
      - POSTGRES_PASSWORD=password
      - POSTGRES_DB=postgis
      - PGUSER=username
      - PGPASSWORD=password
      - PGDATABASE=postgis
    ports:
      - "${MY_DOCKER_IP:-127.0.0.1}:5439:5432"
    command: postgres -N 500
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U username -d postgis"]
      interval: 5s
      timeout: 5s
      retries: 12
      start_period: 10s
    volumes:
      - ./.pgdata:/var/lib/postgresql/data

  ingest:
    image: ghcr.io/astral-sh/uv:python3.12-bookworm-slim
    profiles: ["ingest"]
    depends_on:
      database:
        condition: service_healthy
    environment:
      PGUSER: username
      PGPASSWORD: password
      PGHOST: database
      PGPORT: 5432
      PGDATABASE: postgis
    volumes:
      - ./.github/workflows:/workflows:ro
    entrypoint: ["/bin/bash", "/workflows/ingest.sh"]
    restart: "no"

networks:
  default:
    name: eoapi-network