docker-compose.yml

# Memoria — All-in-One
#
# Usage:
#   docker compose up -d

services:

  matrixone-init:
    image: ${MATRIXONE_IMAGE:-matrixorigin/matrixone:latest}
    user: root
    entrypoint: ["sh", "-c", "chown -R ${DOCKER_UID:-1000}:${DOCKER_GID:-1000} /mo-data && mkdir -p /logs && chown -R ${DOCKER_UID:-1000}:${DOCKER_GID:-1000} /logs"]
    volumes:
      - ${MATRIXONE_DATA_DIR:-./data/matrixone}:/mo-data
      - ./data/logs/matrixone:/logs
    networks:
      - memoria-net

  matrixone:
    image: ${MATRIXONE_IMAGE:-matrixorigin/matrixone:latest}
    hostname: matrixone
    user: "${DOCKER_UID:-1000}:${DOCKER_GID:-1000}"
    depends_on:
      matrixone-init:
        condition: service_completed_successfully
    ports:
      - "${MATRIXONE_PORT:-6001}:6001"
      - "${MATRIXONE_DEBUG_PORT:-}:6060"
    volumes:
      - ${MATRIXONE_DATA_DIR:-./data/matrixone}:/mo-data
      - ./data/logs/matrixone:/logs
      - ./config/matrixone:/etc/memoria:ro
    entrypoint: ["/mo-service"]
    command: ["-debug-http=:12345", "-launch", "/etc/memoria/launch.toml"]
    environment:
      - TZ=Asia/Shanghai
    networks:
      - memoria-net
    healthcheck:
      test: ["CMD-SHELL", "timeout 2 bash -c 'echo > /dev/tcp/127.0.0.1/6001' 2>/dev/null"]
      interval: 10s
      timeout: 5s
      retries: 12
      start_period: 30s
    restart: unless-stopped
    logging:
      driver: json-file
      options:
        max-size: "50m"
        max-file: "3"

  api:
    build:
      context: .
      dockerfile: memoria/Dockerfile
      args:
        - http_proxy=${http_proxy:-}
        - https_proxy=${https_proxy:-}
        - no_proxy=${no_proxy:-}
    hostname: memoria-api
    ports:
      - "${API_PORT:-8100}:8100"
    user: "${DOCKER_UID:-1000}:${DOCKER_GID:-1000}"
    volumes:
      - ${MEMORIA_LOG_DIR:-./data/logs/api}:/var/log/memoria
    environment:
      - RUST_LOG=${RUST_LOG:-info,memoria_api=info,memoria_service=info,tower_http=info}
      - DATABASE_URL=${DATABASE_URL:-mysql://root:${MEMORIA_DB_PASSWORD:-111}@matrixone:6001/${MEMORIA_DB_NAME:-memoria}}
      - MASTER_KEY=${MEMORIA_MASTER_KEY:?Set MEMORIA_MASTER_KEY in .env (min 16 chars)}
      - EMBEDDING_PROVIDER=${MEMORIA_EMBEDDING_PROVIDER:-openai}
      - EMBEDDING_MODEL=${MEMORIA_EMBEDDING_MODEL:-BAAI/bge-m3}
      - EMBEDDING_DIM=${MEMORIA_EMBEDDING_DIM:-1024}
      - EMBEDDING_API_KEY=${MEMORIA_EMBEDDING_API_KEY:-}
      - EMBEDDING_BASE_URL=${MEMORIA_EMBEDDING_BASE_URL:-}
      - EMBEDDING_ENDPOINTS=${MEMORIA_EMBEDDING_ENDPOINTS:-}
      - LLM_API_KEY=${MEMORIA_LLM_API_KEY:-}
      - LLM_BASE_URL=${MEMORIA_LLM_BASE_URL:-}
      - LLM_MODEL=${MEMORIA_LLM_MODEL:-gpt-4o-mini}
      # Background worker tuning
      - ENTITY_WORKER_COUNT=${ENTITY_WORKER_COUNT:-4}
      - ENTITY_POOL_SIZE=${ENTITY_POOL_SIZE:-8}
      - ENTITY_QUEUE_SIZE=${ENTITY_QUEUE_SIZE:-512}
      # Distributed coordination
      - MEMORIA_INSTANCE_ID=${MEMORIA_INSTANCE_ID:-}
      - MEMORIA_LOCK_TTL_SECS=${MEMORIA_LOCK_TTL_SECS:-120}
      - MEMORIA_GOVERNANCE_ENABLED=${MEMORIA_GOVERNANCE_ENABLED:-false}
      # Governance plugins
      - MEMORIA_GOVERNANCE_PLUGIN_BINDING=${MEMORIA_GOVERNANCE_PLUGIN_BINDING:-default}
      - MEMORIA_GOVERNANCE_PLUGIN_SUBJECT=${MEMORIA_GOVERNANCE_PLUGIN_SUBJECT:-system}
      # Security & Rate Limiting
      - MEMORIA_API_KEY_SECRET=${MEMORIA_API_KEY_SECRET:-}
      - MEMORIA_RATE_LIMIT_AUTH_KEYS=${MEMORIA_RATE_LIMIT_AUTH_KEYS:-1000,60}
    depends_on:
      matrixone:
        condition: service_healthy
    networks:
      - memoria-net
    logging:
      driver: json-file
      options:
        max-size: "50m"
        max-file: "3"
    restart: unless-stopped

  # ── Monitoring (opt-in: docker compose --profile monitoring up -d) ──────

  prometheus:
    image: prom/prometheus:latest
    profiles: ["monitoring"]
    hostname: prometheus
    ports:
      - "${PROMETHEUS_PORT:-9090}:9090"
    volumes:
      - ./config/prometheus:/etc/prometheus:ro
      - prometheus-data:/prometheus
    command:
      - "--config.file=/etc/prometheus/prometheus.yml"
      - "--storage.tsdb.retention.time=7d"
      - "--web.enable-lifecycle"
    depends_on:
      api:
        condition: service_started
    networks:
      - memoria-net
    restart: unless-stopped

  grafana:
    image: grafana/grafana:latest
    profiles: ["monitoring"]
    hostname: grafana
    ports:
      - "${GRAFANA_PORT:-3000}:3000"
    environment:
      - GF_SECURITY_ADMIN_USER=${GRAFANA_ADMIN_USER:-admin}
      - GF_SECURITY_ADMIN_PASSWORD=${GRAFANA_ADMIN_PASSWORD:-memoria}
      - GF_USERS_ALLOW_SIGN_UP=false
    volumes:
      - ./config/grafana/provisioning:/etc/grafana/provisioning:ro
      - ./grafana:/dashboards:ro
      - grafana-data:/var/lib/grafana
    depends_on:
      prometheus:
        condition: service_started
    networks:
      - memoria-net
    restart: unless-stopped

volumes:
  prometheus-data:
  grafana-data:

networks:
  memoria-net:
    driver: bridge