docker-compose.prod.yml

# Docker Compose for LSI Ecosystem - Production
# This configuration is optimized for production deployment

version: '3.9'

services:
  # ========================================================================
  # LSI Production Service
  # ========================================================================
  lsi:
    image: lsi-ecosystem:latest
    container_name: lsi-prod
    restart: always
    ports:
      - "3000:3000"
    environment:
      - NODE_ENV=production
      - LSI_LOG_LEVEL=info
      - ZHIPU_API_KEY=${ZHIPU_API_KEY}
      - OPENAI_API_KEY=${OPENAI_API_KEY:-}
      - ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY:-}
      - VECTOR_DB_TYPE=${VECTOR_DB_TYPE:-chroma}
      - CHROMA_HOST=chroma
      - CHROMA_PORT=8000
      - POSTGRES_HOST=postgres
      - POSTGRES_PORT=5432
      - POSTGRES_USER=${POSTGRES_USER:-lsi}
      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
      - POSTGRES_DB=${POSTGRES_DB:-lsi_db}
      - REDIS_HOST=redis
      - REDIS_PORT=6379
      - LSI_DATA_PATH=/app/data
    volumes:
      - lsi_data:/app/data
      - lsi_logs:/app/logs
      - lsi_cartridges:/app/cartridges
    networks:
      - lsi-network
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
      chroma:
        condition: service_healthy
    deploy:
      resources:
        limits:
          cpus: '2'
          memory: 2G
        reservations:
          cpus: '0.5'
          memory: 512M
    healthcheck:
      test: ["CMD", "node", "-e", "require('http').get('http://localhost:3000/health', (r) => {process.exit(r.statusCode === 200 ? 0 : 1)})"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s
    logging:
      driver: "json-file"
      options:
        max-size: "10m"
        max-file: "3"

  # ========================================================================
  # PostgreSQL Production Database
  # ========================================================================
  postgres:
    image: postgres:15-alpine
    container_name: lsi-postgres-prod
    restart: always
    environment:
      - POSTGRES_USER=${POSTGRES_USER:-lsi}
      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
      - POSTGRES_DB=${POSTGRES_DB:-lsi_db}
      - POSTGRES_INITDB_ARGS=--encoding=UTF-8 --lc-collate=C --lc-ctype=C
    ports:
      - "${POSTGRES_PORT:-5432}:5432"
    volumes:
      - postgres_prod:/var/lib/postgresql/data
    networks:
      - lsi-network
    deploy:
      resources:
        limits:
          cpus: '1'
          memory: 1G
        reservations:
          cpus: '0.25'
          memory: 256M
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-lsi}"]
      interval: 10s
      timeout: 5s
      retries: 5
    logging:
      driver: "json-file"
      options:
        max-size: "10m"
        max-file: "3"

  # ========================================================================
  # Redis Production Cache
  # ========================================================================
  redis:
    image: redis:7-alpine
    container_name: lsi-redis-prod
    restart: always
    ports:
      - "${REDIS_PORT:-6379}:6379"
    volumes:
      - redis_prod:/data
    networks:
      - lsi-network
    command: >
      redis-server
      --appendonly yes
      --appendfsync everysec
      --maxmemory 256mb
      --maxmemory-policy allkeys-lru
    deploy:
      resources:
        limits:
          cpus: '0.5'
          memory: 512M
        reservations:
          cpus: '0.1'
          memory: 128M
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 3s
      retries: 5
    logging:
      driver: "json-file"
      options:
        max-size: "10m"
        max-file: "3"

  # ========================================================================
  # Chroma Vector Database Production
  # ========================================================================
  chroma:
    image: chromadb/chroma:latest
    container_name: lsi-chroma-prod
    restart: always
    ports:
      - "${CHROMA_PORT:-8000}:8000"
    volumes:
      - chroma_prod:/chroma/chroma
    environment:
      - ANONYMIZED_TELEMETRY=False
      - CHROMA_SERVER_AUTH_CREDENTIALS_FILE=/chroma/auth.toml
      - CHROMA_SERVER_AUTH_PROVIDER=chromadb.auth.token.TokenAuthServerProvider
      - CHROMA_SERVER_AUTH_CREDENTIALS=${CHROMA_TOKEN:-}
      - PERSIST_DIRECTORY=/chroma/chroma
    networks:
      - lsi-network
    deploy:
      resources:
        limits:
          cpus: '1'
          memory: 1G
        reservations:
          cpus: '0.25'
          memory: 256M
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8000/api/v1/heartbeat"]
      interval: 30s
      timeout: 10s
      retries: 5
      start_period: 30s
    logging:
      driver: "json-file"
      options:
        max-size: "10m"
        max-file: "3"

  # ========================================================================
  # Nginx Reverse Proxy (optional)
  # ========================================================================
  nginx:
    image: nginx:alpine
    container_name: lsi-nginx
    restart: always
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro
      - ./nginx/ssl:/etc/nginx/ssl:ro
      - ./nginx/logs:/var/log/nginx
    networks:
      - lsi-network
    depends_on:
      - lsi
    deploy:
      resources:
        limits:
          cpus: '0.5'
          memory: 256M
        reservations:
          cpus: '0.1'
          memory: 64M
    logging:
      driver: "json-file"
      options:
        max-size: "10m"
        max-file: "3"

  # ========================================================================
  # Watchtower - Auto-update containers
  # ========================================================================
  watchtower:
    image: containrrr/watchtower
    container_name: lsi-watchtower
    restart: always
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    environment:
      - WATCHTOWER_CLEANUP=true
      - WATCHTOWER_POLL_INTERVAL=86400
      - WATCHTOWER_LABEL_ENABLE=auto-update
    networks:
      - lsi-network

networks:
  lsi-network:
    driver: bridge

volumes:
  lsi_data:
    driver: local
  lsi_logs:
    driver: local
  lsi_cartridges:
    driver: local
  postgres_prod:
    driver: local
  redis_prod:
    driver: local
  chroma_prod:
    driver: local