docker-compose.yml

version: '3.8'

services:
  # Zookeeper for Kafka
  zookeeper:
    image: confluentinc/cp-zookeeper:7.5.0
    container_name: cloudhawk-zookeeper
    environment:
      ZOOKEEPER_CLIENT_PORT: 2181
      ZOOKEEPER_TICK_TIME: 2000
    ports:
      - "2181:2181"
    networks:
      - cloudhawk-net

  # Kafka Message Broker
  kafka:
    image: confluentinc/cp-kafka:7.5.0
    container_name: cloudhawk-kafka
    depends_on:
      - zookeeper
    ports:
      - "9092:9092"
      - "9094:9094"
    environment:
      KAFKA_BROKER_ID: 1
      KAFKA_ZOOKEEPER_CONNECT: zookeeper:2181
      KAFKA_ADVERTISED_LISTENERS: PLAINTEXT://kafka:9092,PLAINTEXT_HOST://localhost:9094
      KAFKA_LISTENER_SECURITY_PROTOCOL_MAP: PLAINTEXT:PLAINTEXT,PLAINTEXT_HOST:PLAINTEXT
      KAFKA_INTER_BROKER_LISTENER_NAME: PLAINTEXT
      KAFKA_OFFSETS_TOPIC_REPLICATION_FACTOR: 1
      KAFKA_AUTO_CREATE_TOPICS_ENABLE: 'true'
    networks:
      - cloudhawk-net
    healthcheck:
      test: ["CMD", "kafka-broker-api-versions", "--bootstrap-server", "localhost:9092"]
      interval: 10s
      timeout: 10s
      retries: 5

  # TimescaleDB (PostgreSQL with time-series)
  timescaledb:
    image: timescale/timescaledb:latest-pg15
    container_name: cloudhawk-timescaledb
    environment:
      POSTGRES_DB: cloudhawk
      POSTGRES_USER: cloudhawk
      POSTGRES_PASSWORD: cloudhawk_secure_2024
    ports:
      - "5432:5432"
    volumes:
      - timescale-data:/var/lib/postgresql/data
    networks:
      - cloudhawk-net
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U cloudhawk"]
      interval: 10s
      timeout: 5s
      retries: 5

  # Redis for real-time cache
  redis:
    image: redis:7-alpine
    container_name: cloudhawk-redis
    ports:
      - "6379:6379"
    volumes:
      - redis-data:/data
    networks:
      - cloudhawk-net
    command: redis-server --appendonly yes
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 3s
      retries: 5

  # Elasticsearch for log storage
  elasticsearch:
    image: docker.elastic.co/elasticsearch/elasticsearch:8.11.0
    container_name: cloudhawk-elasticsearch
    environment:
      - discovery.type=single-node
      - "ES_JAVA_OPTS=-Xms512m -Xmx512m"
      - xpack.security.enabled=false
    ports:
      - "9200:9200"
    volumes:
      - es-data:/usr/share/elasticsearch/data
    networks:
      - cloudhawk-net
    healthcheck:
      test: ["CMD-SHELL", "curl -f http://localhost:9200/_cluster/health || exit 1"]
      interval: 30s
      timeout: 10s
      retries: 5

  # Prometheus for metrics
  prometheus:
    image: prom/prometheus:latest
    container_name: cloudhawk-prometheus
    ports:
      - "9090:9090"
    volumes:
      - ./services/prometheus/prometheus.yml:/etc/prometheus/prometheus.yml
      - prometheus-data:/prometheus
    command:
      - '--config.file=/etc/prometheus/prometheus.yml'
      - '--storage.tsdb.path=/prometheus'
    networks:
      - cloudhawk-net

  # Grafana for visualization
  grafana:
    image: grafana/grafana:latest
    container_name: cloudhawk-grafana
    ports:
      - "3001:3000"
    environment:
      - GF_SECURITY_ADMIN_PASSWORD=admin
      - GF_INSTALL_PLUGINS=grafana-clock-panel
    volumes:
      - grafana-data:/var/lib/grafana
    networks:
      - cloudhawk-net
    depends_on:
      - prometheus

  # CloudTrail Event Simulator
  event-simulator:
    build:
      context: ./services/event-simulator
      dockerfile: Dockerfile
    container_name: cloudhawk-event-simulator
    depends_on:
      kafka:
        condition: service_healthy
    environment:
      KAFKA_BOOTSTRAP_SERVERS: kafka:9092
      KAFKA_TOPIC: cloudtrail-events
      EVENT_RATE: 100
    networks:
      - cloudhawk-net
    restart: unless-stopped

  # Stream Processor
  stream-processor:
    build:
      context: ./services/stream-processor
      dockerfile: Dockerfile
    container_name: cloudhawk-stream-processor
    depends_on:
      kafka:
        condition: service_healthy
      redis:
        condition: service_healthy
      timescaledb:
        condition: service_healthy
    environment:
      KAFKA_BOOTSTRAP_SERVERS: kafka:9092
      KAFKA_TOPIC: cloudtrail-events
      REDIS_HOST: redis
      REDIS_PORT: 6379
      POSTGRES_HOST: timescaledb
      POSTGRES_PORT: 5432
      POSTGRES_USER: cloudhawk
      POSTGRES_PASSWORD: cloudhawk_secure_2024
      POSTGRES_DB: cloudhawk
      ELASTICSEARCH_HOST: elasticsearch
      ELASTICSEARCH_PORT: 9200
    networks:
      - cloudhawk-net
    restart: unless-stopped

  # ML Anomaly Detection Engine
  ml-engine:
    build:
      context: ./services/ml-engine
      dockerfile: Dockerfile
    container_name: cloudhawk-ml-engine
    depends_on:
      - redis
      - timescaledb
    environment:
      REDIS_HOST: redis
      REDIS_PORT: 6379
      POSTGRES_HOST: timescaledb
      POSTGRES_PORT: 5432
      POSTGRES_USER: cloudhawk
      POSTGRES_PASSWORD: cloudhawk_secure_2024
      POSTGRES_DB: cloudhawk
      MODEL_RETRAIN_INTERVAL: 3600
    networks:
      - cloudhawk-net
    restart: unless-stopped

  # FastAPI Backend
  api:
    build:
      context: ./services/api
      dockerfile: Dockerfile
    container_name: cloudhawk-api
    ports:
      - "8000:8000"
    depends_on:
      - redis
      - timescaledb
      - elasticsearch
    environment:
      REDIS_HOST: redis
      REDIS_PORT: 6379
      POSTGRES_HOST: timescaledb
      POSTGRES_PORT: 5432
      POSTGRES_USER: cloudhawk
      POSTGRES_PASSWORD: cloudhawk_secure_2024
      POSTGRES_DB: cloudhawk
      ELASTICSEARCH_HOST: elasticsearch
      ELASTICSEARCH_PORT: 9200
      JWT_SECRET: your-super-secret-jwt-key-change-in-production
    networks:
      - cloudhawk-net
    restart: unless-stopped

  # React Dashboard
  dashboard:
    build:
      context: ./services/dashboard
      dockerfile: Dockerfile
    container_name: cloudhawk-dashboard
    ports:
      - "3000:80"
    depends_on:
      - api
    networks:
      - cloudhawk-net
    restart: unless-stopped

volumes:
  timescale-data:
  redis-data:
  es-data:
  prometheus-data:
  grafana-data:

networks:
  cloudhawk-net:
    driver: bridge