docker-compose.dev.yaml

# Development services for DFE Engine API
#
# Prism mock server -- frontend devs can develop against the API contract
# without running the real backend:
#
#   docker compose -f docker-compose.dev.yaml up prism
#
# Then point dfe-ui at http://localhost:4010 instead of :8000
#
# TypeScript type generation (run from host):
#   npx openapi-typescript openapi/openapi.json -o types.ts

services:
  prism:
    # Digest-pinned (#106) so the floating major tag cannot be repointed.
    image: stoplight/prism:5@sha256:3f6d29e31bfe0b99587f0f6f79c423858dd6a2ea7e1e4658273ed930a78a9acf
    command: mock /spec/openapi.json --host 0.0.0.0
    ports:
      - "4010:4010"
    volumes:
      - ./openapi:/spec:ro
    # Bounded so a runaway mock cannot take the dev host down (#106).
    deploy:
      resources:
        limits:
          cpus: "0.5"
          memory: 256M

  # A local ClickHouse for `make e2e-server`: plain HTTP on 127.0.0.1:8123 with
  # the password .env.e2e.example carries. One node with its own Keeper, which the
  # replicated tables need. The multi-arch digest of the 26.3 LTS tag dfe-infra
  # pins, so it runs natively on Apple silicon.
  clickhouse:
    image: clickhouse/clickhouse-server:26.3.17.56@sha256:422be85ae7344058369cdd366ac0efea9daa8428b55c9cf50258e83a7d12fcb3
    environment:
      CLICKHOUSE_PASSWORD: ${DFE_ENGINE_CLICKHOUSE_PASSWORD:-dfe-local-dev}
      # The engine creates roles, quotas and row policies for each org.
      CLICKHOUSE_DEFAULT_ACCESS_MANAGEMENT: "1"
    ports:
      - "127.0.0.1:${DFE_ENGINE_CLICKHOUSE_PORT:-8123}:8123"
    volumes:
      - ./dev/clickhouse/single-node.xml:/etc/clickhouse-server/config.d/single-node.xml:ro
    healthcheck:
      test: ["CMD", "wget", "-qO-", "http://127.0.0.1:8123/ping"]
      interval: 5s
      timeout: 3s
      retries: 20
    deploy:
      resources:
        limits:
          cpus: "2"
          memory: 3G