docker-compose.staging.yml

version: '3.8'

services:
  postgres:
    image: postgres:15-alpine
    environment:
      POSTGRES_DB: agentpay
      POSTGRES_USER: postgres
      POSTGRES_PASSWORD: postgres
    volumes:
      - postgres_data:/var/lib/postgresql/data
    ports:
      - "5432:5432"
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U postgres"]
      interval: 10s
      timeout: 5s
      retries: 5

  redis:
    image: redis:7-alpine
    ports:
      - "6379:6379"
    command: redis-server --appendonly yes
    volumes:
      - redis_data:/data
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 5s
      retries: 5

  agentpay:
    build: .
    ports:
      - "8000:8000"
    environment:
      # Database
      DATABASE_URL: postgresql://postgres:postgres@postgres/agentpay
      # Security
      API_KEY_SALT: ${API_KEY_SALT:-agentpay-salt}
      SECRET_KEY: ${SECRET_KEY:-agentpay-secret-key}
      # Blockchain
      CHAIN_ID: ${CHAIN_ID:-137}
      USDC_ADDRESS: ${USDC_ADDRESS:-0x2791Bca1f2de4661ED88A30C99A7a9449Aa84174}
      RPC_URL: ${RPC_URL:-https://polygon-rpc.com}
      # Key Management
      KEY_MANAGEMENT_MODE: ${KEY_MANAGEMENT_MODE:-KMS}
      KMS_KEY_ID: ${KMS_KEY_ID}
      KMS_REGION: ${KMS_REGION:-us-east-1}
      AWS_ACCESS_KEY_ID: ${AWS_ACCESS_KEY_ID}
      AWS_SECRET_ACCESS_KEY: ${AWS_SECRET_ACCESS_KEY}
      # Webhooks
      WEBHOOK_RETRY_ATTEMPTS: ${WEBHOOK_RETRY_ATTEMPTS:-3}
      WEBHOOK_TIMEOUT: ${WEBHOOK_TIMEOUT:-5}
      WEBHOOK_SIGNING_SECRET: ${WEBHOOK_SIGNING_SECRET:-webhook-secret-change-me}
      # Rate Limiting
      RATE_LIMIT_ENABLED: ${RATE_LIMIT_ENABLED:-true}
      RATE_LIMIT_REQUESTS_PER_MINUTE: ${RATE_LIMIT_REQUESTS_PER_MINUTE:-100}
      REDIS_URL: redis://redis:6379
      # Idempotency
      IDEMPOTENCY_KEY_TTL: ${IDEMPOTENCY_KEY_TTL:-86400}
      # Gas
      GAS_PRICE_MULTIPLIER: ${GAS_PRICE_MULTIPLIER:-1.2}
      MAX_GAS_PRICE_GWEI: ${MAX_GAS_PRICE_GWEI:-500}
      # Logging
      LOG_LEVEL: ${LOG_LEVEL:-INFO}
      LOG_JSON: ${LOG_JSON:-false}
      # CORS
      CORS_ORIGINS: ${CORS_ORIGINS:-'["*"]'}
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
    restart: unless-stopped

volumes:
  postgres_data:
  redis_data: