compose.dev.yml

# compose.dev.yml — Development overrides: ports, colbert reranking, relaxed defaults, ML profile-gating.
# Usage: COMPOSE_FILE=compose.yml:compose.dev.yml docker compose up -d
#
# WARNING: This file contains hardcoded dev-only passwords (miniosecret, clickhouse, etc.).
#          These defaults are safe for local development only. Do NOT reuse this file
#          for any internet-facing or shared environment.

services:
  postgres:
    ports:
      - "127.0.0.1:5432:5432"
    environment:
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-postgres}
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U postgres"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 10s

  redis:
    ports:
      - "127.0.0.1:6379:6379"
    environment:
      REDIS_PASSWORD: ${REDIS_PASSWORD:-dev_redis_pass}
    command: >
      redis-server
      --requirepass ${REDIS_PASSWORD:-dev_redis_pass}
      --maxmemory ${REDIS_MAXMEMORY:-512mb}
      --maxmemory-policy volatile-lfu
      --maxmemory-samples 10

  qdrant:
    ports:
      - "127.0.0.1:6333:6333"
      - "127.0.0.1:6334:6334"

  bge-m3:
    ports:
      - "127.0.0.1:8000:8000"
    deploy:
      resources:
        limits:
          memory: ${BGE_M3_MEMORY_LIMIT:-4G}

  user-base:
    ports:
      - "127.0.0.1:8003:8000"

  docling:
    ports:
      - "127.0.0.1:5001:5001"

  litellm:
    profiles: ["bot", "voice", "full"]
    ports:
      - "127.0.0.1:4000:4000"
    environment:
      LANGFUSE_PUBLIC_KEY: ${LANGFUSE_PUBLIC_KEY:-pk-lf-dev}
      LANGFUSE_SECRET_KEY: ${LANGFUSE_SECRET_KEY:-sk-lf-dev}
    deploy:
      resources:
        limits:
          memory: 1G

  bot:
    profiles: ["bot", "full"]
    environment:
      RERANK_PROVIDER: colbert
      RERANK_CANDIDATES_MAX: "${RERANK_CANDIDATES_MAX:-10}"
      COLBERT_TIMEOUT: "${COLBERT_TIMEOUT:-120}"
      LANGFUSE_PUBLIC_KEY: ${LANGFUSE_PUBLIC_KEY:-pk-lf-dev}
      LANGFUSE_SECRET_KEY: ${LANGFUSE_SECRET_KEY:-sk-lf-dev}
      OTEL_SERVICE_NAME: "${OTEL_SERVICE_NAME:-telegram-bot}"

  # ML services — profile-gated on dev (VPS: always-on via compose.yml base)
  clickhouse:
    profiles: ["ml", "full"]
    ports:
      - "127.0.0.1:8123:8123"
      - "127.0.0.1:9009:9000"
    environment:
      CLICKHOUSE_PASSWORD: ${CLICKHOUSE_PASSWORD:-clickhouse}

  minio:
    profiles: ["ml", "full"]
    ports:
      - "127.0.0.1:9090:9000"
      - "127.0.0.1:9091:9001"
    command: -c 'mkdir -p /data/langfuse && minio server --address ":9000" --console-address ":9001" /data'
    environment:
      MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD:-miniosecret}

  redis-langfuse:
    profiles: ["ml", "full"]
    ports:
      - "127.0.0.1:6380:6379"
    command: redis-server --requirepass ${LANGFUSE_REDIS_PASSWORD:-langfuseredis}
    healthcheck:
      test: ["CMD", "redis-cli", "-a", "${LANGFUSE_REDIS_PASSWORD:-langfuseredis}", "ping"]
      interval: 5s
      timeout: 5s
      retries: 3

  langfuse-worker:
    profiles: ["ml", "full"]
    environment:
      CLICKHOUSE_PASSWORD: ${CLICKHOUSE_PASSWORD:-clickhouse}
      LANGFUSE_S3_EVENT_UPLOAD_SECRET_ACCESS_KEY: ${MINIO_ROOT_PASSWORD:-miniosecret}
      LANGFUSE_S3_MEDIA_UPLOAD_SECRET_ACCESS_KEY: ${MINIO_ROOT_PASSWORD:-miniosecret}
      REDIS_AUTH: ${LANGFUSE_REDIS_PASSWORD:-langfuseredis}

  langfuse:
    profiles: ["ml", "full"]
    ports:
      - "127.0.0.1:3001:3000"
    environment:
      LANGFUSE_INIT_ORG_ID: ${LANGFUSE_INIT_ORG_ID:-dev-org}
      LANGFUSE_INIT_ORG_NAME: ${LANGFUSE_INIT_ORG_NAME:-Local Dev}
      LANGFUSE_INIT_PROJECT_ID: ${LANGFUSE_INIT_PROJECT_ID:-dev-project}
      LANGFUSE_INIT_PROJECT_NAME: ${LANGFUSE_INIT_PROJECT_NAME:-Local Dev}
      LANGFUSE_INIT_PROJECT_PUBLIC_KEY: ${LANGFUSE_INIT_PROJECT_PUBLIC_KEY:-pk-lf-dev}
      LANGFUSE_INIT_PROJECT_SECRET_KEY: ${LANGFUSE_INIT_PROJECT_SECRET_KEY:-sk-lf-dev}
      CLICKHOUSE_PASSWORD: ${CLICKHOUSE_PASSWORD:-clickhouse}
      LANGFUSE_S3_EVENT_UPLOAD_SECRET_ACCESS_KEY: ${MINIO_ROOT_PASSWORD:-miniosecret}
      LANGFUSE_S3_MEDIA_UPLOAD_SECRET_ACCESS_KEY: ${MINIO_ROOT_PASSWORD:-miniosecret}
      REDIS_AUTH: ${LANGFUSE_REDIS_PASSWORD:-langfuseredis}
    deploy:
      resources:
        limits:
          memory: 1G

  ingestion:
    profiles: ["ingest", "full"]
    environment:
      LANGFUSE_PUBLIC_KEY: ${LANGFUSE_PUBLIC_KEY:-pk-lf-dev}
      LANGFUSE_SECRET_KEY: ${LANGFUSE_SECRET_KEY:-sk-lf-dev}
      OTEL_SERVICE_NAME: "${OTEL_SERVICE_NAME:-ingestion}"

  loki:
    ports:
      - "127.0.0.1:3100:3100"

  alertmanager:
    ports:
      - "127.0.0.1:9093:9093"

  rag-api:
    ports:
      - "127.0.0.1:8080:8080"
    environment:
      LANGFUSE_PUBLIC_KEY: ${LANGFUSE_PUBLIC_KEY:-pk-lf-dev}
      LANGFUSE_SECRET_KEY: ${LANGFUSE_SECRET_KEY:-sk-lf-dev}
      OTEL_SERVICE_NAME: "${OTEL_SERVICE_NAME:-rag-api}"

  livekit-server:
    ports:
      - "127.0.0.1:7880:7880"
      - "127.0.0.1:7881:7881"
      - "127.0.0.1:50000-50100:50000-50100/udp"
    environment:
      LIVEKIT_API_KEY: ${LIVEKIT_API_KEY:-devkey}
      LIVEKIT_API_SECRET: ${LIVEKIT_API_SECRET:-secret}

  livekit-sip:
    ports:
      - "127.0.0.1:5060:5060/udp"
      - "127.0.0.1:5061:5061/tcp"
      - "127.0.0.1:10000-10100:10000-10100/udp"
    environment:
      LIVEKIT_API_KEY: ${LIVEKIT_API_KEY:-devkey}
      LIVEKIT_API_SECRET: ${LIVEKIT_API_SECRET:-secret}

  voice-agent:
    environment:
      LIVEKIT_API_KEY: ${LIVEKIT_API_KEY:-devkey}
      LIVEKIT_API_SECRET: ${LIVEKIT_API_SECRET:-secret}
      LANGFUSE_PUBLIC_KEY: ${LANGFUSE_PUBLIC_KEY:-pk-lf-dev}
      LANGFUSE_SECRET_KEY: ${LANGFUSE_SECRET_KEY:-sk-lf-dev}

  mini-app-api:
    ports:
      - "127.0.0.1:8090:8090"
    environment:
      LANGFUSE_PUBLIC_KEY: ${LANGFUSE_PUBLIC_KEY:-pk-lf-dev}
      LANGFUSE_SECRET_KEY: ${LANGFUSE_SECRET_KEY:-sk-lf-dev}
      OTEL_SERVICE_NAME: "${OTEL_SERVICE_NAME:-mini-app-api}"

  mini-app-frontend:
    ports:
      - "127.0.0.1:8091:80"