docker-compose.prod.yml

# Production-style layout: postgres + fastapi + bff + web (+ optional mcp).
# The browser talks only to `bff`; FastAPI and Data are network-internal.
services:
  postgres:
    container_name: wp-postgres
    image: postgres:16-alpine
    environment:
      POSTGRES_DB: ${POSTGRES_DB:-website_profiling}
      POSTGRES_USER: ${POSTGRES_USER:?set POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:?set POSTGRES_PASSWORD}
    volumes:
      - pg-data:/var/lib/postgresql/data
    healthcheck:
      test: ['CMD-SHELL', 'pg_isready -U $$POSTGRES_USER -d $$POSTGRES_DB']
      interval: 5s
      timeout: 3s
      retries: 5

  # One-shot EF Core schema migrator — runs to completion before any service that talks to
  # Postgres starts. Replaces `alembic upgrade head` as schema owner (see services/Schema).
  migrator:
    container_name: wp-migrator
    build:
      context: ./services
      dockerfile: Schema/Dockerfile
    environment:
      DATABASE_URL: postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB:-website_profiling}
    depends_on:
      postgres:
        condition: service_healthy
    restart: "no"

  fastapi:
    container_name: wp-fastapi
    build:
      context: .
      dockerfile: Dockerfile
    image: website-profiling:latest
    depends_on:
      postgres:
        condition: service_healthy
      migrator:
        condition: service_completed_successfully
    environment:
      WP_ROLE: fastapi
      WEBSITE_PROFILING_ROOT: /app
      DATABASE_URL: postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB:-website_profiling}
      DATA_DIR: /data
      PYTHON: /opt/venv/bin/python
      CHROME_PATH: /usr/bin/chromium
      LIGHTHOUSE_PATH: /usr/local/bin/lighthouse
      LIGHTHOUSE_CHROME_FLAGS: --headless --no-sandbox --disable-dev-shm-usage --disable-gpu
      DEPRECATE_PYTHON_INTEGRATIONS: "1"
      DEPRECATE_PYTHON_REPORT_ROUTES: "1"
      CORE_SERVICE_URL: http://core:8094
      REPORT_SERVICE_URL: http://core:8094
    volumes:
      - profiling-data:/data
    healthcheck:
      test: ['CMD', 'node', '-e', "require('http').get('http://127.0.0.1:8096/api/health', (r) => process.exit(r.statusCode === 200 ? 0 : 1)).on('error', () => process.exit(1))"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 30s

  core:
    container_name: wp-core
    build:
      context: .
      dockerfile: services/CoreService/Dockerfile
    environment:
      DATABASE_URL: postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB:-website_profiling}
      ASPNETCORE_URLS: http://+:8094
      FASTAPI_URL: http://fastapi:8096
      AI_SERVICE_URL: http://ai:8092
      WEBSITE_PROFILING_ROOT: /app
      REPORT_SERVICE_USE_PYTHON_BRIDGE: "0"
      USE_FASTAPI_PYTHON_BRIDGE: "1"
      REPORT_SERVICE_WORKER_ENABLED: "1"
      AUTH_SECRET: ${AUTH_SECRET:?set AUTH_SECRET}
      APP_PUBLIC_URL: ${APP_PUBLIC_URL:-}
      GOOGLE_REDIRECT_URI: ${GOOGLE_REDIRECT_URI:-}
    depends_on:
      postgres:
        condition: service_healthy
      migrator:
        condition: service_completed_successfully
      fastapi:
        condition: service_started
    healthcheck:
      test: ['CMD', 'curl', '-fsS', 'http://127.0.0.1:8094/health']
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 20s

  ai:
    container_name: wp-ai
    build:
      context: ./services
      dockerfile: AiService/Dockerfile
    environment:
      DATABASE_URL: postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB:-website_profiling}
      FASTAPI_URL: http://fastapi:8096
      ASPNETCORE_URLS: http://+:8092
      WP_MCP_HTTP: "1"
    depends_on:
      postgres:
        condition: service_healthy
      migrator:
        condition: service_completed_successfully
      fastapi:
        condition: service_started
    healthcheck:
      test: ['CMD', 'curl', '-fsS', 'http://127.0.0.1:8092/health']
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 20s

  bff:
    container_name: wp-bff
    build:
      context: .
      dockerfile: services/Bff/Dockerfile
    depends_on:
      fastapi:
        condition: service_started
      core:
        condition: service_healthy
      ai:
        condition: service_healthy
    ports:
      - '${BFF_PORT:-8090}:8090'
    environment:
      FASTAPI_URL: http://fastapi:8096
      CORE_SERVICE_URL: http://core:8094
      DATA_SERVICE_URL: http://core:8094
      AI_SERVICE_URL: http://ai:8092
      INTEGRATIONS_SERVICE_URL: http://core:8094
      REPORT_SERVICE_URL: http://core:8094
      REPORT_ROUTES: "/api/compare,/api/dashboards,/api/run,/api/jobs,/api/schedule,/api/crawl,/api/pipeline-preview"
      DATA_ROUTES: "/api/report/meta,/api/report/payload,/api/report/history,/api/report/crawl-payload,/api/report/mobile-delta,/api/report/portfolio,/api/portfolio,/api/issues/status,/api/filters,/api/properties,/api/content-drafts,/api/content/score,/api/keywords,/api/page-markdown,/api/alerts,/api/logs,/api/backlinks,/api/pipeline-settings,/api/ui-preferences,/api/client-preferences"
      AI_ROUTES: "/api/chat,/api/links/page-coach,/api/issues/fix-suggestion,/api/issues/action-plan,/api/ai/fix-suggestion,/api/dashboards/ai-generate,/api/content/analyze,/api/content/wizard,/api/llm-settings,/api/secrets,/api/ollama/status,/api/report/audit-tool,/api/mcp-tools"
      INTEGRATIONS_ROUTES: "/api/integrations/google,/api/integrations/bing"
      AUTH_SECRET: ${AUTH_SECRET:?set AUTH_SECRET}
      AUTH_PASSWORD: ${AUTH_PASSWORD:-}
      BFF_ALLOWED_ORIGINS: ${BFF_ALLOWED_ORIGINS:?set BFF_ALLOWED_ORIGINS (the public UI origin)}
      # Cross-site cookie (frontend + BFF on a shared parent domain over HTTPS):
      BFF_COOKIE_SAMESITE: ${BFF_COOKIE_SAMESITE:-None}
      BFF_COOKIE_SECURE: ${BFF_COOKIE_SECURE:-true}
      BFF_COOKIE_DOMAIN: ${BFF_COOKIE_DOMAIN:-}

  web:
    container_name: wp-web
    build:
      context: ./web
      args:
        VITE_BFF_BASE_URL: ${BFF_PUBLIC_URL:?set BFF_PUBLIC_URL (browser-facing BFF origin)}
    depends_on:
      bff:
        condition: service_started
    ports:
      - '${WEB_PORT:-3000}:80'
    healthcheck:
      test: ['CMD', 'wget', '-qO-', 'http://127.0.0.1/home']
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 30s

  mcp:
    container_name: wp-mcp
    build:
      context: ./services
      dockerfile: AiService/Dockerfile
    depends_on:
      ai:
        condition: service_healthy
    environment:
      DATABASE_URL: postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB:-website_profiling}
      FASTAPI_URL: http://fastapi:8096
      ASPNETCORE_URLS: http://+:8092
      WP_MCP_HTTP: "1"
      WP_MCP_DOMAIN: ${WP_MCP_DOMAIN:-core}
      WP_PROPERTY_ID: ${WP_PROPERTY_ID:-}
    profiles:
      - mcp
    ports:
      - '${MCP_PORT:-8000}:8092'

volumes:
  pg-data:
  profiling-data: