compose.yml

## compose project name #########################################################
##
## The compose project is pinned so container, volume, and network names remain
## stable across different shells and editors.
##
name: move37

## utils ##########################################################################
##
## recreate docker network
##
##    docker network remove move37-network 2>/dev/null; docker network create move37-network
##
## rebuild and start the full stack
##
##    docker compose down -v && docker compose up -d --build
##
## stop everything and remove local state
##
##    docker compose down -v
##
## full docker cleanup
##
##    docker system prune -a --volumes
##
services:
  ### db ###########################################################################
  ##
  ## run only postgres
  ##
  ##    docker compose up -d --build db
  ##
  ## inspect connection from host
  ##
  ##    docker compose exec db psql -U move37 -d move37 -c "\dt;"
  ##
  ## reset db data
  ##
  ##    docker compose down -v db
  ##
  ## logs
  ##
  ##    docker compose logs -f db
  ##
  ## notes
  ##
  ##    - this image runs postgres and then `alembic upgrade head`
  ##    - init scripts in `src/move37/db/initdb.d` run only on first database bootstrap
  ##    - migrations live in `src/move37/alembic`
  ##
  db:
    build:
      context: .
      dockerfile: ./src/move37/db/Dockerfile
    container_name: move37-db
    environment:
      - POSTGRES_DB=${MOVE37_POSTGRES_DB:-move37}
      - POSTGRES_USER=${MOVE37_POSTGRES_USER:-move37}
      - POSTGRES_PASSWORD=${MOVE37_POSTGRES_PASSWORD:-move37}
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U $$POSTGRES_USER -d $$POSTGRES_DB -h 127.0.0.1 -p 5432"]
      interval: 5s
      timeout: 5s
      retries: 20
    ports:
      - "${MOVE37_POSTGRES_HOST_PORT:-55432}:5432"
    volumes:
      - ./src/move37/db:/app/move37/db:ro
      - move37-db-data:/var/lib/postgresql/data
    networks:
      - move37

  ### api ##########################################################################
  ##
  ## quick start
  ##
  ##    docker compose up -d --build db api
  ##
  ## logs
  ##
  ##    docker compose logs -f api
  ##
  ## health check
  ##
  ##    curl -s http://localhost:18080/health
  ##
  ## authenticated checks
  ##
  ##    export MOVE37_TOKEN=move37-dev-token
  ##    curl -s http://localhost:18080/v1/auth/me \
  ##      -H "Authorization: Bearer ${MOVE37_TOKEN}" | jq
  ##
  ##    curl -s http://localhost:18080/v1/graph \
  ##      -H "Authorization: Bearer ${MOVE37_TOKEN}" | jq '.nodes | length'
  ##
  ## MCP SSE handshake (returns endpoint event and keeps the stream open)
  ##
  ##    curl -N \
  ##      -H "Accept: text/event-stream" \
  ##      -H "Authorization: Bearer ${MOVE37_TOKEN}" \
  ##      http://localhost:18080/v1/mcp/sse
  ##
  ## MCP streamable HTTP initialize
  ##
  ##    curl -s \
  ##      -H "Content-Type: application/json" \
  ##      -H "Authorization: Bearer ${MOVE37_TOKEN}" \
  ##      -X POST http://localhost:18080/v1/mcp/sse \
  ##      -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{}}' | jq
  ##
  ## MCP list tools
  ##
  ##    curl -s \
  ##      -H "Content-Type: application/json" \
  ##      -H "Authorization: Bearer ${MOVE37_TOKEN}" \
  ##      -X POST http://localhost:18080/v1/mcp/sse \
  ##      -d '{"jsonrpc":"2.0","id":2,"method":"tools/list","params":{}}' | jq
  ##
  ## MCP call tool over streamable HTTP
  ##
  ##    curl -s \
  ##      -H "Content-Type: application/json" \
  ##      -H "Authorization: Bearer ${MOVE37_TOKEN}" \
  ##      -X POST http://localhost:18080/v1/mcp/sse \
  ##      -d '{"jsonrpc":"2.0","id":3,"method":"tools/call","params":{"name":"graph.get","arguments":{}}}' | jq
  ##
  ## MCP POST via SSE session (use sessionId from the endpoint event)
  ##
  ##    export SESSION_ID=<from-sse-event>
  ##    curl -s \
  ##      -H "Content-Type: application/json" \
  ##      -H "Authorization: Bearer ${MOVE37_TOKEN}" \
  ##      -X POST "http://localhost:18080/v1/mcp/messages?session_id=${SESSION_ID}" \
  ##      -d '{"jsonrpc":"2.0","id":4,"method":"tools/call","params":{"name":"activity.create","arguments":{"title":"Read race plan","notes":"","startDate":"2026-03-20","bestBefore":"","expectedTime":0.5,"realTime":0,"expectedEffort":null,"realEffort":null}}}'
  ##
  ## notes
  ##
  ##    - MOVE37_DATABASE_URL defaults to the postgres service in this compose file
  ##    - MOVE37_API_BEARER_TOKEN secures all /v1 endpoints
  ##    - first graph fetch seeds the default training graph for the configured subject
  ##    - schema changes should go through Alembic revisions, not SQLAlchemy `create_all`
  ##    - MCP is exposed under `/v1/mcp/*` and uses the same bearer auth as REST
  ##    - graph operations are exposed as MCP tools through the internal tool registry
  ##    - OTEL_* env vars are wired here for future telemetry exporters
  ##
  api:
    build:
      context: .
      dockerfile: ./src/move37/api/Dockerfile
    container_name: move37-api
    environment:
      - MOVE37_DATABASE_URL=${MOVE37_DATABASE_URL:-postgresql+psycopg://move37:move37@db:5432/move37}
      - MOVE37_API_BEARER_TOKEN=${MOVE37_API_BEARER_TOKEN:-move37-dev-token}
      - MOVE37_API_BEARER_SUBJECT=${MOVE37_API_BEARER_SUBJECT:-local-user}
      - MOVE37_AI_BASE_URL=${MOVE37_AI_BASE_URL:-http://move37-ai:8090}
      - MOVE37_MILVUS_URI=${MOVE37_MILVUS_URI:-http://milvus-standalone:19530}
      - OPENAI_API_KEY=${OPENAI_API_KEY:-}
      - LANGFUSE_HOST=${LANGFUSE_HOST:-http://langfuse-web:3000}
      - LANGFUSE_PUBLIC_KEY=${LANGFUSE_PUBLIC_KEY:-}
      - LANGFUSE_SECRET_KEY=${LANGFUSE_SECRET_KEY:-}
      - OTEL_ENABLED=${OTEL_ENABLED:-false}
      - OTEL_SERVICE_NAME=${OTEL_SERVICE_NAME:-move37-api}
      - OTEL_EXPORTER_OTLP_ENDPOINT=${OTEL_EXPORTER_OTLP_ENDPOINT:-http://otel-collector:4318}
      - OTEL_METRICS_EXPORT_INTERVAL_MS=${OTEL_METRICS_EXPORT_INTERVAL_MS:-5000}
    depends_on:
      db:
        condition: service_healthy
      move37-ai:
        condition: service_started
    ports:
      - "${MOVE37_API_HOST_PORT:-18080}:8080"
    networks:
      - move37

  ### web ##########################################################################
  ##
  ## rebuild and start only the web container
  ##
  ##    docker compose up -d --build web
  ##
  ## browser entrypoint
  ##
  ##    open http://localhost:5174
  ##
  ## debug
  ##
  ##    docker compose logs -f web
  ##    docker compose exec web sh -lc 'ls -la /usr/share/nginx/html'
  ##
  ## notes
  ##
  ##    - nginx proxies /v1 and /health to the api container
  ##    - set WEB_STANDALONE_DEBUG=true to serve the UI without an API backend
  ##    - set `VITE_MOVE37_API_TOKEN` at build time if you want the bundled UI to carry a token
  ##
  web:
    build:
      context: .
      dockerfile: ./src/move37/web/Dockerfile
      args:
        VITE_MOVE37_API_BASE_URL: ${VITE_MOVE37_API_BASE_URL:-}
        VITE_MOVE37_API_TOKEN: ${VITE_MOVE37_API_TOKEN:-move37-dev-token}
    container_name: move37-web
    environment:
      - WEB_STANDALONE_DEBUG=${WEB_STANDALONE_DEBUG:-false}
    depends_on:
      - api
    ports:
      - "5174:80"
    networks:
      - move37

  ### ai / rag ####################################################################
  move37-ai:
    build:
      context: .
      dockerfile: ./src/move37/rag/Dockerfile
    container_name: move37-ai
    environment:
      - MOVE37_DATABASE_URL=${MOVE37_DATABASE_URL:-postgresql+psycopg://move37:move37@db:5432/move37}
      - MOVE37_MILVUS_URI=${MOVE37_MILVUS_URI:-http://milvus-standalone:19530}
      - MOVE37_MILVUS_COLLECTION=${MOVE37_MILVUS_COLLECTION:-note_chunks_v1}
      - OPENAI_API_KEY=${OPENAI_API_KEY:-}
      - MOVE37_EMBEDDING_MODEL=${MOVE37_EMBEDDING_MODEL:-text-embedding-3-large}
      - MOVE37_CHAT_MODEL=${MOVE37_CHAT_MODEL:-gpt-4.1-mini}
      - LANGFUSE_HOST=${LANGFUSE_HOST:-http://langfuse-web:3000}
      - LANGFUSE_PUBLIC_KEY=${LANGFUSE_PUBLIC_KEY:-}
      - LANGFUSE_SECRET_KEY=${LANGFUSE_SECRET_KEY:-}
    depends_on:
      db:
        condition: service_healthy
      milvus-standalone:
        condition: service_started
    ports:
      - "18090:8090"
    networks:
      - move37

  move37-notes-worker:
    build:
      context: .
      dockerfile: ./src/move37/worker/Dockerfile
    container_name: move37-notes-worker
    environment:
      - MOVE37_DATABASE_URL=${MOVE37_DATABASE_URL:-postgresql+psycopg://move37:move37@db:5432/move37}
      - MOVE37_MILVUS_URI=${MOVE37_MILVUS_URI:-http://milvus-standalone:19530}
      - MOVE37_MILVUS_COLLECTION=${MOVE37_MILVUS_COLLECTION:-note_chunks_v1}
      - OPENAI_API_KEY=${OPENAI_API_KEY:-}
      - MOVE37_EMBEDDING_MODEL=${MOVE37_EMBEDDING_MODEL:-text-embedding-3-large}
      - LANGFUSE_HOST=${LANGFUSE_HOST:-http://langfuse-web:3000}
      - LANGFUSE_PUBLIC_KEY=${LANGFUSE_PUBLIC_KEY:-}
      - LANGFUSE_SECRET_KEY=${LANGFUSE_SECRET_KEY:-}
    depends_on:
      db:
        condition: service_healthy
      milvus-standalone:
        condition: service_started
    networks:
      - move37

  ### milvus ######################################################################
  milvus-etcd:
    image: quay.io/coreos/etcd:v3.5.5
    container_name: move37-milvus-etcd
    environment:
      - ETCD_AUTO_COMPACTION_MODE=revision
      - ETCD_AUTO_COMPACTION_RETENTION=1000
      - ETCD_QUOTA_BACKEND_BYTES=4294967296
      - ETCD_SNAPSHOT_COUNT=50000
    command: etcd -advertise-client-urls=http://milvus-etcd:2379 -listen-client-urls http://0.0.0.0:2379 --data-dir /etcd
    volumes:
      - move37-milvus-etcd-data:/etcd
    networks:
      - move37

  milvus-minio:
    image: minio/minio:RELEASE.2024-10-02T17-50-41Z
    container_name: move37-milvus-minio
    environment:
      - MINIO_ROOT_USER=${MILVUS_MINIO_ROOT_USER:-minioadmin}
      - MINIO_ROOT_PASSWORD=${MILVUS_MINIO_ROOT_PASSWORD:-minioadmin}
    command: minio server /data
    volumes:
      - move37-milvus-minio-data:/data
    networks:
      - move37

  milvus-standalone:
    image: milvusdb/milvus:v2.5.5
    container_name: move37-milvus
    command: ["milvus", "run", "standalone"]
    environment:
      - ETCD_ENDPOINTS=milvus-etcd:2379
      - MINIO_ADDRESS=milvus-minio:9000
    depends_on:
      - milvus-etcd
      - milvus-minio
    ports:
      - "19530:19530"
      - "9091:9091"
    volumes:
      - move37-milvus-data:/var/lib/milvus
    networks:
      - move37

  ### langfuse ####################################################################
  langfuse-postgres:
    image: postgres:16-alpine
    container_name: move37-langfuse-postgres
    environment:
      - POSTGRES_DB=${LANGFUSE_POSTGRES_DB:-langfuse}
      - POSTGRES_USER=${LANGFUSE_POSTGRES_USER:-langfuse}
      - POSTGRES_PASSWORD=${LANGFUSE_POSTGRES_PASSWORD:-langfuse}
    volumes:
      - move37-langfuse-postgres-data:/var/lib/postgresql/data
    networks:
      - move37

  langfuse-redis:
    image: redis:7-alpine
    container_name: move37-langfuse-redis
    networks:
      - move37

  langfuse-clickhouse:
    image: clickhouse/clickhouse-server:24.8-alpine
    container_name: move37-langfuse-clickhouse
    environment:
      - CLICKHOUSE_DB=${LANGFUSE_CLICKHOUSE_DB:-default}
      - CLICKHOUSE_USER=${LANGFUSE_CLICKHOUSE_USER:-default}
      - CLICKHOUSE_PASSWORD=${LANGFUSE_CLICKHOUSE_PASSWORD:-}
    volumes:
      - move37-langfuse-clickhouse-data:/var/lib/clickhouse
    networks:
      - move37

  langfuse-web:
    image: ghcr.io/langfuse/langfuse:3
    container_name: move37-langfuse-web
    environment:
      - DATABASE_URL=postgresql://${LANGFUSE_POSTGRES_USER:-langfuse}:${LANGFUSE_POSTGRES_PASSWORD:-langfuse}@langfuse-postgres:5432/${LANGFUSE_POSTGRES_DB:-langfuse}
      - DIRECT_URL=postgresql://${LANGFUSE_POSTGRES_USER:-langfuse}:${LANGFUSE_POSTGRES_PASSWORD:-langfuse}@langfuse-postgres:5432/${LANGFUSE_POSTGRES_DB:-langfuse}
      - REDIS_CONNECTION_STRING=redis://langfuse-redis:6379
      - CLICKHOUSE_URL=http://langfuse-clickhouse:8123
      - NEXTAUTH_URL=${LANGFUSE_HOST:-http://localhost:3002}
      - NEXTAUTH_SECRET=${LANGFUSE_NEXTAUTH_SECRET:-move37-langfuse-secret}
      - SALT=${LANGFUSE_SALT:-move37-langfuse-salt}
      - TELEMETRY_ENABLED=false
    depends_on:
      - langfuse-postgres
      - langfuse-redis
      - langfuse-clickhouse
    ports:
      - "3002:3000"
    networks:
      - move37

  langfuse-worker:
    image: ghcr.io/langfuse/langfuse:3
    container_name: move37-langfuse-worker
    command: ["worker"]
    environment:
      - DATABASE_URL=postgresql://${LANGFUSE_POSTGRES_USER:-langfuse}:${LANGFUSE_POSTGRES_PASSWORD:-langfuse}@langfuse-postgres:5432/${LANGFUSE_POSTGRES_DB:-langfuse}
      - DIRECT_URL=postgresql://${LANGFUSE_POSTGRES_USER:-langfuse}:${LANGFUSE_POSTGRES_PASSWORD:-langfuse}@langfuse-postgres:5432/${LANGFUSE_POSTGRES_DB:-langfuse}
      - REDIS_CONNECTION_STRING=redis://langfuse-redis:6379
      - CLICKHOUSE_URL=http://langfuse-clickhouse:8123
      - NEXTAUTH_URL=${LANGFUSE_HOST:-http://localhost:3002}
      - NEXTAUTH_SECRET=${LANGFUSE_NEXTAUTH_SECRET:-move37-langfuse-secret}
      - SALT=${LANGFUSE_SALT:-move37-langfuse-salt}
      - TELEMETRY_ENABLED=false
    depends_on:
      - langfuse-postgres
      - langfuse-redis
      - langfuse-clickhouse
    networks:
      - move37

  ### devtools #####################################################################
  ##
  ## build or rebuild the repo bootstrap image
  ##
  ##    docker compose build devtools
  ##
  ## validate local bootstrap prerequisites
  ##
  ##    export GITHUB_TOKEN="$(gh auth token)"
  ##    docker compose run --rm devtools doctor
  ##
  ## plan repo settings against the default config
  ##
  ##    export GITHUB_TOKEN="$(gh auth token)"
  ##    docker compose run --rm devtools bootstrap plan
  ##
  ## apply repo settings against the default config
  ##
  ##    export GITHUB_TOKEN="$(gh auth token)"
  ##    docker compose run --rm devtools bootstrap apply
  ##
  ## notes
  ##
  ##    - this service is profile-gated and is not started by `docker compose up`
  ##    - authenticate on the host with `gh auth login`, then pass `GITHUB_TOKEN`
  ##    - set `MOVE37_AWS_DIR=$HOME/.aws` if you want profile-based AWS auth in the container
  ##    - otherwise pass AWS env vars before running `infra *` commands
  ##    - the repo is bind-mounted at `/workspace` so `.env` files and configs are visible
  ##
  devtools:
    profiles: ["devtools"]
    build:
      context: .
      dockerfile: ./devtools/Dockerfile
    environment:
      - GITHUB_TOKEN=${GITHUB_TOKEN:-}
      - MV37_DEVTOOLS_DEFAULT_CONFIG=${MV37_DEVTOOLS_DEFAULT_CONFIG:-devtools/config/move37.repo.toml}
      - AWS_PROFILE=${AWS_PROFILE:-}
      - AWS_REGION=${AWS_REGION:-}
      - AWS_DEFAULT_REGION=${AWS_DEFAULT_REGION:-}
      - AWS_ACCOUNT_ID=${AWS_ACCOUNT_ID:-}
      - CDK_DEFAULT_ACCOUNT=${CDK_DEFAULT_ACCOUNT:-}
      - CDK_DEFAULT_REGION=${CDK_DEFAULT_REGION:-}
      - AWS_ACCESS_KEY_ID=${AWS_ACCESS_KEY_ID:-}
      - AWS_SECRET_ACCESS_KEY=${AWS_SECRET_ACCESS_KEY:-}
      - AWS_SESSION_TOKEN=${AWS_SESSION_TOKEN:-}
      - AWS_ROLE_ARN=${AWS_ROLE_ARN:-}
      - AWS_WEB_IDENTITY_TOKEN_FILE=${AWS_WEB_IDENTITY_TOKEN_FILE:-}
      - MOVE37_DEPLOY_ENV=${MOVE37_DEPLOY_ENV:-}
      - MOVE37_DEPLOY_BRANCH=${MOVE37_DEPLOY_BRANCH:-}
    volumes:
      - .:/workspace
      - ${MOVE37_AWS_DIR:-/tmp/move37-no-aws}:/root/.aws:ro
    working_dir: /workspace
    networks:
      - move37

  ### fern docs ####################################################################
  ##
  ## build and run the public developer docs locally
  ##
  ##    docker compose --profile docs up --build fern-docs
  ##
  ## stop the docs container
  ##
  ##    docker compose --profile docs stop fern-docs
  ##
  ## notes
  ##
  ##    - this container exports the FastAPI OpenAPI spec on startup
  ##    - `fern docs dev` serves the API reference, SDK docs, and CLI guides
  ##    - set FERN_TOKEN if you later run local SDK generation with `fern generate --local`
  ##
  fern-docs:
    profiles: ["docs"]
    build:
      context: .
      dockerfile: ./fern/Dockerfile
    container_name: move37-fern-docs
    environment:
      - MOVE37_DATABASE_URL=${MOVE37_DATABASE_URL:-sqlite+pysqlite:////tmp/move37-openapi.db}
      - MOVE37_API_BEARER_TOKEN=${MOVE37_API_BEARER_TOKEN:-move37-dev-token}
      - MOVE37_API_BEARER_SUBJECT=${MOVE37_API_BEARER_SUBJECT:-docs-user}
      - FERN_TOKEN=${FERN_TOKEN:-}
    volumes:
      - .:/workspace
    working_dir: /workspace/fern
    command: ["sh", "-lc", "python3 scripts/export_openapi.py && HOST=0.0.0.0 fern docs dev --port 3000"]
    ports:
      - "3000:3000"
    networks:
      - move37

  ### observability ############################################################
  ##
  ## architecture
  ##
  ##    OTLP emitters -> otel-collector -> prometheus (metrics)
  ##                  -> otel-collector -> debug exporter (traces in collector logs)
  ##    docker logs -> promtail -> loki -> grafana (logs)
  ##
  ## service roles
  ##
  ##    otel-collector : ingests OTLP telemetry and exposes a Prometheus scrape endpoint
  ##    prometheus     : scrapes and stores metrics time-series
  ##    loki           : stores container logs
  ##    promtail       : tails docker container logs and ships them to loki
  ##    grafana        : query and visualization UI for Prometheus and Loki
  ##
  ## start / stop stack
  ##
  ##    docker compose up -d otel-collector prometheus loki promtail grafana
  ##    docker compose stop otel-collector prometheus loki promtail grafana
  ##    docker compose rm -f otel-collector prometheus loki promtail grafana
  ##
  ## service status
  ##
  ##    docker compose ps otel-collector prometheus loki promtail grafana
  ##
  ## endpoints
  ##
  ##    host:
  ##      Grafana    http://localhost:3001 (admin/admin)
  ##      Prometheus http://localhost:9090
  ##      Loki       http://localhost:3100
  ##
  ## quick checks (metrics + logs)
  ##
  ##    curl -s "http://localhost:9090/api/v1/targets" | jq '.data.activeTargets[] | {job: .labels.job, health: .health}'
  ##    curl -s "http://localhost:3100/loki/api/v1/labels" | jq
  ##    curl -sG "http://localhost:3100/loki/api/v1/query_range" \
  ##      --data-urlencode 'query={compose_project="move37"}' \
  ##      --data-urlencode "limit=20" | jq
  ##
  ## deep debugging commands
  ##
  ##    docker compose logs -f otel-collector
  ##    docker compose logs -f promtail
  ##    docker compose logs -f loki
  ##    docker compose logs -f prometheus
  ##    docker compose exec promtail sh -lc 'cat /tmp/positions.yaml'
  ##
  otel-collector:
    image: otel/opentelemetry-collector-contrib:0.107.0
    container_name: move37-otel-collector
    command: ["--config=/etc/otelcol-contrib/config.yaml"]
    healthcheck:
      test: ["CMD", "/otelcol-contrib", "validate", "--config=/etc/otelcol-contrib/config.yaml"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 5s
    volumes:
      - ./src/move37/otel/otel-collector-config.yaml:/etc/otelcol-contrib/config.yaml:ro
    ports:
      - "4317:4317"
      - "4318:4318"
      - "9464:9464"
    networks:
      - move37

  prometheus:
    image: prom/prometheus:v2.54.1
    container_name: move37-prometheus
    command:
      - "--config.file=/etc/prometheus/prometheus.yml"
      - "--storage.tsdb.path=/prometheus"
      - "--web.enable-lifecycle"
    volumes:
      - ./src/move37/prometheus/prometheus.yml:/etc/prometheus/prometheus.yml:ro
      - move37-prometheus-data:/prometheus
    ports:
      - "9090:9090"
    depends_on:
      - otel-collector
    networks:
      - move37

  loki:
    image: grafana/loki:2.9.10
    container_name: move37-loki
    command: ["-config.file=/etc/loki/local-config.yaml"]
    volumes:
      - ./src/move37/loki/loki-config.yaml:/etc/loki/local-config.yaml:ro
      - move37-loki-data:/loki
    ports:
      - "3100:3100"
    networks:
      - move37

  promtail:
    image: grafana/promtail:3.0.0
    container_name: move37-promtail
    command: ["-config.file=/etc/promtail/config.yml"]
    volumes:
      - ./src/move37/promtail/promtail-config.yaml:/etc/promtail/config.yml:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro
    depends_on:
      - loki
    networks:
      - move37

  grafana:
    image: grafana/grafana:11.1.4
    container_name: move37-grafana
    environment:
      - GF_SECURITY_ADMIN_USER=${GRAFANA_ADMIN_USER:-admin}
      - GF_SECURITY_ADMIN_PASSWORD=${GRAFANA_ADMIN_PASSWORD:-admin}
      - GF_USERS_ALLOW_SIGN_UP=false
    volumes:
      - ./src/move37/grafana/provisioning/datasources:/etc/grafana/provisioning/datasources:ro
      - ./src/move37/grafana/provisioning/dashboards:/etc/grafana/provisioning/dashboards:ro
      - ./src/move37/grafana/dashboards:/etc/grafana/dashboards:ro
      - move37-grafana-data:/var/lib/grafana
    ports:
      - "3001:3000"
    depends_on:
      - prometheus
      - loki
    networks:
      - move37

## persistent resources ###########################################################
##
## move37-db-data keeps postgres state between restarts.
##
volumes:
  move37-db-data:
    name: move37-db-data
  move37-milvus-data:
    name: move37-milvus-data
  move37-milvus-etcd-data:
    name: move37-milvus-etcd-data
  move37-milvus-minio-data:
    name: move37-milvus-minio-data
  move37-prometheus-data:
    name: move37-prometheus-data
  move37-loki-data:
    name: move37-loki-data
  move37-grafana-data:
    name: move37-grafana-data
  move37-langfuse-postgres-data:
    name: move37-langfuse-postgres-data
  move37-langfuse-clickhouse-data:
    name: move37-langfuse-clickhouse-data

## shared network #################################################################
##
## This stack expects the external docker network to exist before startup.
##
networks:
  move37:
    name: move37-network
    external: true