docker-compose.yml

x-app-defaults: &x_app_default
  build:
    context: ./
    dockerfile: ./docker/local/app/Dockerfile
  tty: true
  stdin_open: true
  restart: unless-stopped
  env_file:
    - docker/local/app/config.env
    - docker/local/app/config.secrets.env
  volumes:
    - ./data/static:/home/app/data/static
    - ./data/media:/home/app/data/media
    - .:/home/app/src
  depends_on:
    db:
      condition: service_healthy
      restart: true
    redis:
      condition: service_healthy
      restart: true

services:
  db:
    image: postgres:17.6
    container_name: daiv-db
    restart: unless-stopped
    environment:
      POSTGRES_USER: dbuser
      POSTGRES_PASSWORD: dbpass
      POSTGRES_DB: db
    volumes:
      - ./data/db:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U dbuser -d db"]
      interval: 10s
      timeout: 10s
      start_period: 30s
      retries: 5
    ports:
      - "5432:5432"

  redis:
    image: redis:8.6-alpine
    command: redis-server --save "" --appendonly yes --dir /data --maxmemory 512mb --maxmemory-policy volatile-ttl
    restart: unless-stopped
    container_name: daiv-redis
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 5s
    volumes:
      - ./data/redis:/data
    ports:
      - "6379:6379"

  mailpit:
    image: axllent/mailpit:latest
    container_name: daiv-mailpit
    restart: unless-stopped
    ports:
      - "8025:8025"
      - "1025:1025"

  app:
    <<: *x_app_default
    container_name: daiv-app
    command: sh /home/app/docker/start-app
    healthcheck:
      test: ["CMD", "curl", "-f", "-k", "https://localhost:8000/-/alive/"]
      interval: 10s
      timeout: 5s
      retries: 5
    ports:
      - "8000:8000"

  worker:
    <<: *x_app_default
    command: sh /home/app/docker/start-worker
    healthcheck:
      test: ["CMD-SHELL", "grep -q 'db_worker' /proc/*/cmdline 2>/dev/null"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 30s
    ports: []
    deploy:
      mode: replicated
      replicas: 2

  scheduler:
    <<: *x_app_default
    container_name: daiv-scheduler
    command: sh /home/app/docker/start-crontask
    healthcheck:
      test: ["CMD-SHELL", "grep -q 'crontask' /proc/*/cmdline 2>/dev/null"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 30s
    ports: []

  gitlab:
    image: gitlab/gitlab-ce:latest
    container_name: daiv-gitlab
    profiles:
      - gitlab
      - full
    restart: on-failure
    logging:
      driver: "none"
    environment:
      GITLAB_OMNIBUS_CONFIG: |
        external_url 'http://127.0.0.1:8929'
        gitlab_rails['gitlab_shell_ssh_port'] = 2224
        gitlab_rails['log_level'] = 'warn'
        sidekiq['log_level'] = 'warn'
        gitaly['logging_level'] = 'warn'
        nginx['error_log_level'] = 'warn'
        puma['log_level'] = 'warn'
    ports:
      - "8929:8929"
      - "2224:22"
    volumes:
      - "./data/gitlab/config:/etc/gitlab"
      - "./data/gitlab/logs:/var/log/gitlab"
      - "./data/gitlab/data:/var/opt/gitlab"

  gitlab_runner:
    image: gitlab/gitlab-runner:latest
    container_name: daiv-gitlab-runner
    profiles:
      - gitlab
      - full
    restart: unless-stopped
    volumes:
      - ./docker/local/gitlab-runner/config.toml:/etc/gitlab-runner/config.toml
      - /var/run/docker.sock:/var/run/docker.sock
    extra_hosts:
      - "postgres:127.0.0.1"
    depends_on:
      gitlab:
        condition: service_healthy

  sandbox:
    image: ghcr.io/srtab/daiv-sandbox:latest
    profiles:
      - sandbox
      - full
    stdin_open: true
    restart: unless-stopped
    container_name: daiv-sandbox
    group_add:
      - "${DOCKER_GID:-999}"
    env_file:
      - ./docker/local/sandbox/config.env
    ports:
      - "8888:8000"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock

  mcp_sentry:
    image: supercorp/supergateway:latest
    profiles:
      - mcp
      - full
    restart: unless-stopped
    container_name: daiv-mcp-sentry
    command:
      - --stdio
      - "npx @sentry/mcp-server@latest"
      - --outputTransport
      - streamableHttp
      - --healthEndpoint
      - "/healthz"
    env_file:
      - docker/local/app/config.secrets.env
    environment:
      MCP_DISABLE_SKILLS: seer,docs,project-management
    healthcheck:
      test: ["CMD", "wget", "--spider", "-q", "http://localhost:8000/healthz"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 30s

  mcp_context7:
    image: supercorp/supergateway:latest
    profiles:
      - mcp
      - full
    restart: unless-stopped
    container_name: daiv-mcp-context7
    command:
      - --stdio
      - "npx @upstash/context7-mcp@latest"
      - --outputTransport
      - streamableHttp
      - --healthEndpoint
      - "/healthz"
    env_file:
      - docker/local/app/config.secrets.env
    healthcheck:
      test: ["CMD", "wget", "--spider", "-q", "http://localhost:8000/healthz"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 30s

  smee:
    build:
      context: ./
      dockerfile: ./docker/local/smee/Dockerfile
    profiles:
      - github
    container_name: daiv-smee
    restart: unless-stopped
    command: smee --url https://smee.io/GiX7tLSvzqK35HSy --target https://app:8000/api/codebase/callbacks/github/
    environment:
      NODE_TLS_REJECT_UNAUTHORIZED: 0
    depends_on:
      app:
        condition: service_healthy
        restart: true