docker-compose.yml

services:
  # ===========================================
  # Frontend Application
  # ===========================================
  frontend:
    build:
      context: .
      dockerfile: Dockerfile
    ports:
      - "8081:80"
    restart: unless-stopped
    depends_on:
      - bff
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:80"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 10s
    networks:
      - app-network

  # ===========================================
  # Phase 1: Core Infrastructure
  # ===========================================

  # PostgreSQL Database
  postgres:
    image: postgres:16-alpine
    container_name: manish-postgres
    ports:
      - "5432:5432"
    environment:
      POSTGRES_USER: ${POSTGRES_USER:-manish}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-manish_secret}
      POSTGRES_DB: ${POSTGRES_DB:-manish_dev}
    volumes:
      - postgres_data:/var/lib/postgresql/data
      - ./infrastructure/postgres/init.sql:/docker-entrypoint-initdb.d/init.sql:ro
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-manish} -d ${POSTGRES_DB:-manish_dev}"]
      interval: 10s
      timeout: 5s
      retries: 5
    restart: unless-stopped
    networks:
      - app-network

  # MongoDB Database
  mongodb:
    image: mongo:7
    container_name: manish-mongodb
    ports:
      - "27018:27017"
    environment:
      MONGO_INITDB_ROOT_USERNAME: ${MONGO_USER:-manish}
      MONGO_INITDB_ROOT_PASSWORD: ${MONGO_PASSWORD:-manish_secret}
      MONGO_INITDB_DATABASE: ${MONGO_DB:-manish_dev}
    volumes:
      - mongodb_data:/data/db
      - ./infrastructure/mongo/init.js:/docker-entrypoint-initdb.d/init.js:ro
    healthcheck:
      test: ["CMD", "mongosh", "--eval", "db.adminCommand('ping')"]
      interval: 10s
      timeout: 5s
      retries: 5
    restart: unless-stopped
    networks:
      - app-network

  # Redis Cache
  redis:
    image: redis:7-alpine
    container_name: manish-redis
    ports:
      - "6379:6379"
    command: redis-server --appendonly yes --requirepass ${REDIS_PASSWORD:-manish_secret}
    volumes:
      - redis_data:/data
    healthcheck:
      test: ["CMD", "redis-cli", "-a", "${REDIS_PASSWORD:-manish_secret}", "ping"]
      interval: 10s
      timeout: 5s
      retries: 5
    restart: unless-stopped
    networks:
      - app-network

  # ===========================================
  # Phase 2: Backend Services (Placeholder)
  # ===========================================

  # Backend-for-Frontend (BFF) - Node.js
  bff:
    build:
      context: ./apps/bff
      dockerfile: Dockerfile
    container_name: manish-bff
    ports:
      - "3001:3001"
    environment:
      NODE_ENV: ${NODE_ENV:-development}
      PORT: 3001
      POSTGRES_HOST: postgres
      POSTGRES_PORT: 5432
      POSTGRES_USER: ${POSTGRES_USER:-manish}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-manish_secret}
      POSTGRES_DB: ${POSTGRES_DB:-manish_dev}
      REDIS_HOST: redis
      REDIS_PORT: 6379
      REDIS_PASSWORD: ${REDIS_PASSWORD:-manish_secret}
      BACKEND_URL: http://backend:8000
      LLM_SERVICE_URL: http://llm-service:8003
      # Google OAuth
      GOOGLE_CLIENT_ID: ${GOOGLE_CLIENT_ID:-}
      GOOGLE_CLIENT_SECRET: ${GOOGLE_CLIENT_SECRET:-}
      GOOGLE_CALLBACK_URL: ${GOOGLE_CALLBACK_URL:-http://localhost:3001/api/auth/google/callback}
      # Frappe/ERPNext OAuth
      FRAPPE_OAUTH_CLIENT_ID: ${FRAPPE_OAUTH_CLIENT_ID:-}
      FRAPPE_OAUTH_CLIENT_SECRET: ${FRAPPE_OAUTH_CLIENT_SECRET:-}
      FRAPPE_URL: ${FRAPPE_URL:-http://localhost:8090}
      FRAPPE_INTERNAL_URL: ${FRAPPE_INTERNAL_URL:-http://manish-frappe-frontend:8080}
      FRAPPE_CALLBACK_URL: ${FRAPPE_CALLBACK_URL:-http://localhost:3001/api/auth/frappe/callback}
      FRAPPE_API_KEY: ${FRAPPE_API_KEY:-}
      FRAPPE_API_SECRET: ${FRAPPE_API_SECRET:-}
      FRAPPE_WEBHOOK_SECRET: ${FRAPPE_WEBHOOK_SECRET:-dev-webhook-secret}
      # Security
      JWT_SECRET: ${JWT_SECRET:-dev-secret-change-in-production}
      SESSION_SECRET: ${SESSION_SECRET:-session-secret-change-in-production}
      FRONTEND_URL: ${FRONTEND_URL:-http://localhost:8081}
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:3001/health"]
      interval: 30s
      timeout: 10s
      retries: 3
    restart: unless-stopped
    networks:
      - app-network

  # Python Backend - FastAPI
  backend:
    build:
      context: ./apps/backend
      dockerfile: Dockerfile
    container_name: manish-backend
    ports:
      - "8000:8000"
    environment:
      ENVIRONMENT: ${NODE_ENV:-development}
      POSTGRES_HOST: postgres
      POSTGRES_PORT: 5432
      POSTGRES_USER: ${POSTGRES_USER:-manish}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-manish_secret}
      POSTGRES_DB: ${POSTGRES_DB:-manish_dev}
      MONGO_HOST: mongodb
      MONGO_PORT: 27017
      MONGO_USER: ${MONGO_USER:-manish}
      MONGO_PASSWORD: ${MONGO_PASSWORD:-manish_secret}
      MONGO_DB: ${MONGO_DB:-manish_dev}
      REDIS_HOST: redis
      REDIS_PORT: 6379
      REDIS_PASSWORD: ${REDIS_PASSWORD:-manish_secret}
      LLM_SERVICE_URL: http://llm-service:8003
      SNOWSTORM_URL: http://snowstorm:8085
    depends_on:
      postgres:
        condition: service_healthy
      mongodb:
        condition: service_healthy
      redis:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8000/health"]
      interval: 30s
      timeout: 10s
      retries: 3
    restart: unless-stopped
    networks:
      - app-network

  # ===========================================
  # Phase 3: AI/ML Services (Placeholder)
  # ===========================================

  # LLM Service - Multi-provider router
  llm-service:
    build:
      context: ./apps/llm-service
      dockerfile: Dockerfile
    container_name: manish-llm-service
    ports:
      - "8003:8003"
    environment:
      ENVIRONMENT: ${NODE_ENV:-development}
      POSTGRES_HOST: postgres
      POSTGRES_PORT: 5432
      POSTGRES_USER: ${POSTGRES_USER:-manish}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-manish_secret}
      POSTGRES_DB: ${POSTGRES_DB:-manish_dev}
      OLLAMA_HOST: http://ollama:11434
      REDIS_HOST: redis
      REDIS_PORT: 6379
      REDIS_PASSWORD: ${REDIS_PASSWORD:-manish_secret}
      ENCRYPTION_KEY: ${ENCRYPTION_KEY:-change_this_32_char_encryption_key}
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8003/health"]
      interval: 30s
      timeout: 10s
      retries: 3
    restart: unless-stopped
    networks:
      - app-network

  # CopilotKit Service - AI Agent Runtime
  copilot-service:
    build:
      context: ./apps/copilot-service
      dockerfile: Dockerfile
    container_name: manish-copilot-service
    ports:
      - "8004:8004"
    environment:
      NODE_ENV: ${NODE_ENV:-development}
      PORT: 8004
      POSTGRES_HOST: postgres
      POSTGRES_PORT: 5432
      POSTGRES_USER: ${POSTGRES_USER:-manish}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-manish_secret}
      POSTGRES_DB: ${POSTGRES_DB:-manish_dev}
      REDIS_HOST: redis
      REDIS_PORT: 6379
      REDIS_PASSWORD: ${REDIS_PASSWORD:-manish_secret}
      LLM_SERVICE_URL: http://llm-service:8003
      SNOWSTORM_URL: http://snowstorm:8085
      JWT_SECRET: ${JWT_SECRET:-dev-secret-change-in-production}
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
      llm-service:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8004/health"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 10s
    restart: unless-stopped
    networks:
      - app-network

  # Ollama - Self-hosted LLMs
  ollama:
    image: ollama/ollama
    container_name: manish-ollama
    ports:
      - "11434:11434"
    volumes:
      - ollama_data:/root/.ollama
    restart: unless-stopped
    networks:
      - app-network
    # GPU support (uncomment if available)
    # deploy:
    #   resources:
    #     reservations:
    #       devices:
    #         - driver: nvidia
    #           count: 1
    #           capabilities: [gpu]

  # Python Workers - Celery
  workers:
    build:
      context: ./apps/workers
      dockerfile: Dockerfile
    container_name: manish-workers
    environment:
      CELERY_BROKER_URL: redis://:${REDIS_PASSWORD:-manish_secret}@redis:6379/0
      CELERY_RESULT_BACKEND: redis://:${REDIS_PASSWORD:-manish_secret}@redis:6379/0
      POSTGRES_HOST: postgres
      POSTGRES_PORT: 5432
      POSTGRES_USER: ${POSTGRES_USER:-manish}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-manish_secret}
      POSTGRES_DB: ${POSTGRES_DB:-manish_dev}
      MONGO_HOST: mongodb
      MONGO_PORT: 27017
      MONGO_USER: ${MONGO_USER:-manish}
      MONGO_PASSWORD: ${MONGO_PASSWORD:-manish_secret}
      MONGO_DB: ${MONGO_DB:-manish_dev}
      LLM_SERVICE_URL: http://llm-service:8003
      SNOWSTORM_URL: http://snowstorm:8080
    depends_on:
      redis:
        condition: service_healthy
      postgres:
        condition: service_healthy
      mongodb:
        condition: service_healthy
      llm-service:
        condition: service_healthy
    restart: unless-stopped
    networks:
      - app-network

  # ===========================================
  # Phase 4: Real-time & Healthcare
  # ===========================================

  # LiveKit Server
  livekit:
    image: livekit/livekit-server
    container_name: manish-livekit
    ports:
      - "7880:7880"   # HTTP
      - "7881:7881"   # WebRTC TCP
      - "7882:7882/udp" # WebRTC UDP
    command: --config /etc/livekit.yaml
    volumes:
      - ./infrastructure/livekit/livekit.yaml:/etc/livekit.yaml:ro
    restart: unless-stopped
    networks:
      - app-network

  # Snowstorm SNOMED CT Server
  snowstorm:
    image: snomedinternational/snowstorm:latest
    container_name: manish-snowstorm
    ports:
      - "8085:8080"
    environment:
      JAVA_OPTS: "-Xms2g -Xmx4g"
    depends_on:
      - elasticsearch
    restart: unless-stopped
    networks:
      - app-network

  # Elasticsearch (required by Snowstorm)
  elasticsearch:
    image: docker.elastic.co/elasticsearch/elasticsearch:8.11.0
    container_name: manish-elasticsearch
    environment:
      - discovery.type=single-node
      - xpack.security.enabled=false
      - "ES_JAVA_OPTS=-Xms1g -Xmx1g"
    volumes:
      - elasticsearch_data:/usr/share/elasticsearch/data
    healthcheck:
      test: ["CMD-SHELL", "curl -f http://localhost:9200/_cluster/health || exit 1"]
      interval: 30s
      timeout: 10s
      retries: 5
    restart: unless-stopped
    networks:
      - app-network

# ===========================================
# Phase 5: Company Website (WordPress + Next.js)
# ===========================================

  # MariaDB for WordPress
  mariadb:
    image: mariadb:11
    container_name: manish-mariadb
    ports:
      - "3307:3306"
    environment:
      MYSQL_ROOT_PASSWORD: ${WP_DB_ROOT_PASSWORD:-wordpress_root_secret}
      MYSQL_DATABASE: ${WP_DB_NAME:-wordpress}
      MYSQL_USER: ${WP_DB_USER:-wordpress}
      MYSQL_PASSWORD: ${WP_DB_PASSWORD:-wordpress_secret}
    volumes:
      - mariadb_data:/var/lib/mysql
    healthcheck:
      test: ["CMD", "healthcheck.sh", "--connect", "--innodb_initialized"]
      interval: 10s
      timeout: 5s
      retries: 5
    restart: unless-stopped
    networks:
      - app-network
    profiles:
      - website

  # WordPress CMS (Headless)
  wordpress:
    image: wordpress:6.7-php8.3-apache
    container_name: manish-wordpress
    ports:
      - "8082:80"
    environment:
      WORDPRESS_DB_HOST: mariadb:3306
      WORDPRESS_DB_NAME: ${WP_DB_NAME:-wordpress}
      WORDPRESS_DB_USER: ${WP_DB_USER:-wordpress}
      WORDPRESS_DB_PASSWORD: ${WP_DB_PASSWORD:-wordpress_secret}
      WORDPRESS_TABLE_PREFIX: wp_
      WORDPRESS_DEBUG: ${WP_DEBUG:-true}
      # Enable REST API CORS for headless
      WORDPRESS_CONFIG_EXTRA: |
        define('WP_HOME', 'http://localhost:8082');
        define('WP_SITEURL', 'http://localhost:8082');
        define('WP_ALLOW_MULTISITE', false);
        define('DISALLOW_FILE_EDIT', true);
    volumes:
      - wordpress_data:/var/www/html
      - ./infrastructure/wordpress/uploads.ini:/usr/local/etc/php/conf.d/uploads.ini:ro
    depends_on:
      mariadb:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:80/wp-admin/install.php"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 30s
    restart: unless-stopped
    networks:
      - app-network
    profiles:
      - website

  # Company Website Frontend (Next.js)
  website:
    build:
      context: ./apps/website
      dockerfile: Dockerfile
    container_name: manish-website
    ports:
      - "8084:3000"
    environment:
      NODE_ENV: ${NODE_ENV:-development}
      WORDPRESS_API_URL: http://wordpress:80/wp-json
      NEXT_PUBLIC_WORDPRESS_URL: ${NEXT_PUBLIC_WORDPRESS_URL:-http://localhost:8082}
      NEXT_PUBLIC_SITE_URL: ${NEXT_PUBLIC_SITE_URL:-http://localhost:8084}
    depends_on:
      - wordpress
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:3000"]
      interval: 30s
      timeout: 10s
      retries: 3
    restart: unless-stopped
    networks:
      - app-network
    profiles:
      - website

  # phpMyAdmin (optional, for database management)
  phpmyadmin:
    image: phpmyadmin:latest
    container_name: manish-phpmyadmin
    ports:
      - "8083:80"
    environment:
      PMA_HOST: mariadb
      PMA_PORT: 3306
      MYSQL_ROOT_PASSWORD: ${WP_DB_ROOT_PASSWORD:-wordpress_root_secret}
    depends_on:
      - mariadb
    restart: unless-stopped
    networks:
      - app-network
    profiles:
      - debug

# ===========================================
# Phase 6: ERPNext / Frappe (v16)
# Access: http://localhost:8090
# Post-setup: see README for site creation steps
# ===========================================

  # Dedicated MariaDB for Frappe (utf8mb4 required)
  frappe-db:
    image: mariadb:10.6
    container_name: manish-frappe-db
    ports:
      - "3308:3306"
    environment:
      MYSQL_ROOT_PASSWORD: ${FRAPPE_DB_PASSWORD:-frappe_secret}
      MYSQL_DATABASE: frappe
      MYSQL_USER: frappe
      MYSQL_PASSWORD: ${FRAPPE_DB_PASSWORD:-frappe_secret}
    volumes:
      - frappe_db_data:/var/lib/mysql
      - ./infrastructure/frappe/mariadb.cnf:/etc/mysql/conf.d/frappe.cnf:ro
    healthcheck:
      test: ["CMD", "healthcheck.sh", "--connect", "--innodb_initialized"]
      interval: 10s
      timeout: 5s
      retries: 5
    restart: unless-stopped
    networks:
      - app-network

  # One-time configurator — writes common_site_config.json
  frappe-configurator:
    image: frappe/erpnext:v16
    container_name: manish-frappe-configurator
    command:
      - >
        ls -1 apps > sites/apps.txt;
        bench set-config -g db_host frappe-db;
        bench set-config -gp db_port 3306;
        bench set-config -g redis_cache "redis://:${REDIS_PASSWORD:-manish_secret}@redis:6379/1";
        bench set-config -g redis_queue "redis://:${REDIS_PASSWORD:-manish_secret}@redis:6379/2";
        bench set-config -g redis_socketio "redis://:${REDIS_PASSWORD:-manish_secret}@redis:6379/3";
        bench set-config -gp socketio_port 9000;
    entrypoint: ["bash", "-c"]
    volumes:
      - frappe_sites:/home/frappe/frappe-bench/sites
      - frappe_logs:/home/frappe/frappe-bench/logs
      - frappe_apps:/home/frappe/frappe-bench/apps
      - frappe_env:/home/frappe/frappe-bench/env
    depends_on:
      frappe-db:
        condition: service_healthy
      redis:
        condition: service_healthy
    restart: on-failure
    networks:
      - app-network

  # Frappe backend — app server
  frappe-backend:
    image: frappe/erpnext:v16
    container_name: manish-frappe-backend
    command: ["/home/frappe/frappe-bench/env/bin/gunicorn", "--chdir=/home/frappe/frappe-bench/sites", "--bind=0.0.0.0:8000", "--timeout=120", "--workers=2", "--worker-class=gthread", "--threads=4", "--worker-tmp-dir=/dev/shm", "--preload", "frappe.app:application"]
    volumes:
      - frappe_sites:/home/frappe/frappe-bench/sites
      - frappe_logs:/home/frappe/frappe-bench/logs
      - frappe_apps:/home/frappe/frappe-bench/apps
      - frappe_env:/home/frappe/frappe-bench/env
    depends_on:
      frappe-configurator:
        condition: service_completed_successfully
    healthcheck:
      test: ["CMD", "curl", "-f", "-H", "Host: erpnext.localhost", "http://localhost:8000"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 60s
    restart: unless-stopped
    networks:
      - app-network

  # Frappe frontend — Nginx reverse proxy
  frappe-frontend:
    image: frappe/erpnext:v16
    container_name: manish-frappe-frontend
    command: ["nginx-entrypoint.sh"]
    ports:
      - "8090:8080"
    environment:
      BACKEND: frappe-backend:8000
      FRAPPE_SITE_NAME_HEADER: erpnext.localhost
      SOCKETIO: frappe-websocket:9000
      UPSTREAM_REAL_IP_ADDRESS: 127.0.0.1
      UPSTREAM_REAL_IP_HEADER: X-Forwarded-For
      PROXY_READ_TIMEOUT: 120s
      CLIENT_MAX_BODY_SIZE: 50m
    volumes:
      - frappe_sites:/home/frappe/frappe-bench/sites
      - frappe_logs:/home/frappe/frappe-bench/logs
      - frappe_apps:/home/frappe/frappe-bench/apps
      - frappe_env:/home/frappe/frappe-bench/env
    depends_on:
      - frappe-backend
      - frappe-websocket
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8080"]
      interval: 30s
      timeout: 10s
      retries: 3
    restart: unless-stopped
    networks:
      - app-network

  # Frappe websocket — Socket.IO
  frappe-websocket:
    image: frappe/erpnext:v16
    container_name: manish-frappe-websocket
    command: ["node", "/home/frappe/frappe-bench/apps/frappe/socketio.js"]
    volumes:
      - frappe_sites:/home/frappe/frappe-bench/sites
      - frappe_logs:/home/frappe/frappe-bench/logs
      - frappe_apps:/home/frappe/frappe-bench/apps
      - frappe_env:/home/frappe/frappe-bench/env
    depends_on:
      frappe-configurator:
        condition: service_completed_successfully
    restart: unless-stopped
    networks:
      - app-network

  # Frappe queue — short/default jobs
  frappe-queue-short:
    image: frappe/erpnext:v16
    container_name: manish-frappe-queue-short
    command: ["bench", "worker", "--queue", "default,short"]
    volumes:
      - frappe_sites:/home/frappe/frappe-bench/sites
      - frappe_logs:/home/frappe/frappe-bench/logs
      - frappe_apps:/home/frappe/frappe-bench/apps
      - frappe_env:/home/frappe/frappe-bench/env
    depends_on:
      frappe-configurator:
        condition: service_completed_successfully
    restart: unless-stopped
    networks:
      - app-network

  # Frappe queue — long jobs
  frappe-queue-long:
    image: frappe/erpnext:v16
    container_name: manish-frappe-queue-long
    command: ["bench", "worker", "--queue", "long,default,short"]
    volumes:
      - frappe_sites:/home/frappe/frappe-bench/sites
      - frappe_logs:/home/frappe/frappe-bench/logs
      - frappe_apps:/home/frappe/frappe-bench/apps
      - frappe_env:/home/frappe/frappe-bench/env
    depends_on:
      frappe-configurator:
        condition: service_completed_successfully
    restart: unless-stopped
    networks:
      - app-network

  # Frappe scheduler
  frappe-scheduler:
    image: frappe/erpnext:v16
    container_name: manish-frappe-scheduler
    command: ["bench", "schedule"]
    volumes:
      - frappe_sites:/home/frappe/frappe-bench/sites
      - frappe_logs:/home/frappe/frappe-bench/logs
      - frappe_apps:/home/frappe/frappe-bench/apps
      - frappe_env:/home/frappe/frappe-bench/env
    depends_on:
      frappe-configurator:
        condition: service_completed_successfully
    restart: unless-stopped
    networks:
      - app-network

# ===========================================
# Networks
# ===========================================
networks:
  app-network:
    driver: bridge

# ===========================================
# Volumes
# ===========================================
volumes:
  postgres_data:
  mongodb_data:
  redis_data:
  ollama_data:
  elasticsearch_data:
  mariadb_data:
  wordpress_data:
  frappe_db_data:
  frappe_sites:
  frappe_logs:
  frappe_apps:
  frappe_env: