docker-compose.yml

# ══════════════════════════════════════════════════════════════════════════════
#                         VERIFYDEV BACKEND INFRASTRUCTURE
# ══════════════════════════════════════════════════════════════════════════════
#  █░█ █▀▀ █▀█ █ █▀▀ █▄█ █▀▄ █▀▀ █░█
#  ▀▄▀ ██▄ █▀▄ █ █▀░ ░█░ █▄▀ ██▄ ▀▄▀
# ══════════════════════════════════════════════════════════════════════════════
#
#  🔐 SECURITY: All secrets loaded from .env file (never commit secrets!)
#  🚀 QUICK START: docker compose up -d
#  📊 MONITORING: docker compose logs -f [service-name]
#  🔄 REBUILD: docker compose up -d --build [service-name]
#
# ══════════════════════════════════════════════════════════════════════════════

services:

  # ┌──────────────────────────────────────────────────────────────────────────┐
  # │                           🌐 API GATEWAY                                  │
  # │  NGINX-based reverse proxy for all microservices                         │
  # └──────────────────────────────────────────────────────────────────────────┘
  gateway:
    build: ./gateway
    container_name: verifydev-gateway
    ports:
      - "${GATEWAY_PORT:-8000}:80"
    volumes:
      - ./gateway/ssl:/etc/nginx/ssl:ro
    depends_on:
      - auth-service
      - user-service
      - job-service
      - recruiter-service
      - resume-service
      - project-analyzer
      - chat-service
    restart: unless-stopped
    healthcheck:
      test: [ "CMD", "curl", "-f", "http://localhost/health" ]
      interval: 30s
      timeout: 10s
      retries: 3
    networks:
      - verifydev-network
    deploy:
      resources:
        limits:
          memory: 256M
          cpus: '0.25'
    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "3"

  # ┌──────────────────────────────────────────────────────────────────────────┐
  # │                         📦 INFRASTRUCTURE                                 │
  # └──────────────────────────────────────────────────────────────────────────┘

  # ─────────────────────────── Redis Cache ───────────────────────────────────
  redis:
    image: redis:7-alpine
    container_name: verifydev-redis
    ports:
      - "6379:6379"
    volumes:
      - redis_data:/data
    command: redis-server --appendonly yes --requirepass "${REDIS_PASSWORD}"
    healthcheck:
      test: [ "CMD", "redis-cli", "ping" ]
      interval: 10s
      timeout: 5s
      retries: 5
    networks:
      - verifydev-network
    deploy:
      resources:
        limits:
          memory: 256M
          cpus: '0.25'
    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "3"

  # ─────────────────────────── RabbitMQ Message Broker ───────────────────────
  rabbitmq:
    image: rabbitmq:3.12-management-alpine
    container_name: verifydev-rabbitmq
    environment:
      RABBITMQ_DEFAULT_USER: ${RABBITMQ_USER:-verifydev}
      RABBITMQ_DEFAULT_PASS: ${RABBITMQ_PASS:?RABBITMQ_PASS is required}
    ports:
      - "5672:5672" # AMQP protocol
      - "15672:15672" # Management UI
    volumes:
      - rabbitmq_data:/var/lib/rabbitmq
    healthcheck:
      test: [ "CMD", "rabbitmq-diagnostics", "check_running" ]
      interval: 30s
      timeout: 10s
      retries: 5
    networks:
      - verifydev-network
    deploy:
      resources:
        limits:
          memory: 512M
          cpus: '0.5'
    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "3"

  # ┌──────────────────────────────────────────────────────────────────────────┐
  # │                        🔐 CORE SERVICES (Node.js)                         │
  # └──────────────────────────────────────────────────────────────────────────┘

  # ─────────────────────────── Auth Service ──────────────────────────────────
  auth-service:
    build: ./auth-service
    container_name: verifydev-auth
    ports:
      - "${AUTH_SERVICE_PORT:-3001}:3001"
    environment:
      - NODE_ENV=${NODE_ENV:-development}
      - PORT=3001
      - DATABASE_URL=${DATABASE_URL:?DATABASE_URL is required}
      - REDIS_URL=redis://:${REDIS_PASSWORD}@redis:6379
      - GITHUB_CLIENT_ID=${GITHUB_CLIENT_ID:?GITHUB_CLIENT_ID is required}
      - GITHUB_CLIENT_SECRET=${GITHUB_CLIENT_SECRET:?GITHUB_CLIENT_SECRET is required}
      - GITHUB_CALLBACK_URL=${GITHUB_CALLBACK_URL:-http://localhost:8000/api/v1/auth/github/callback}
      - GOOGLE_CLIENT_ID=${GOOGLE_CLIENT_ID:-}
      - GOOGLE_CLIENT_SECRET=${GOOGLE_CLIENT_SECRET:-}
      - GOOGLE_CALLBACK_URL=${GOOGLE_CALLBACK_URL:-http://localhost:8000/api/v1/auth/google/callback}
      - JWT_ACCESS_SECRET=${JWT_ACCESS_SECRET:?JWT_ACCESS_SECRET is required}
      - JWT_REFRESH_SECRET=${JWT_REFRESH_SECRET:?JWT_REFRESH_SECRET is required}
      - FRONTEND_URL=${FRONTEND_URL:-http://localhost:3000}
      - ALLOWED_ORIGINS=${CORS_ORIGIN:-http://localhost:3000}
      - SMTP_USER=${SMTP_USER:-}
      - SMTP_PASSWORD=${SMTP_PASSWORD:-}
      - SMTP_FROM=${SMTP_FROM:-}
    depends_on:
      redis:
        condition: service_healthy
    restart: unless-stopped
    networks:
      - verifydev-network
    deploy:
      resources:
        limits:
          memory: 512M
          cpus: '0.5'
    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "3"

  # ─────────────────────────── User Service ──────────────────────────────────
  user-service:
    build:
      context: .
      dockerfile: ./user-service/Dockerfile
    container_name: verifydev-user
    ports:
      - "${USER_SERVICE_PORT:-3002}:3002"
      - "${USER_SERVICE_GRPC_PORT:-50051}:50051"
    environment:
      - NODE_ENV=${NODE_ENV:-development}
      - PORT=3002
      - GRPC_PORT=50051
      - DATABASE_URL=${DATABASE_URL:?DATABASE_URL is required}
      - REDIS_URL=redis://:${REDIS_PASSWORD}@redis:6379
      - RABBITMQ_URL=amqp://${RABBITMQ_USER:-verifydev}:${RABBITMQ_PASS}@rabbitmq:5672
      - JWT_ACCESS_SECRET=${JWT_ACCESS_SECRET:?JWT_ACCESS_SECRET is required}
      - AUTH_SERVICE_URL=http://auth-service:3001
      - ALLOWED_ORIGINS=${CORS_ORIGIN:-http://localhost:3000}
      - GITHUB_TOKEN=${GITHUB_TOKEN:-}
    depends_on:
      rabbitmq:
        condition: service_healthy
      redis:
        condition: service_healthy
    restart: unless-stopped
    networks:
      - verifydev-network
    deploy:
      resources:
        limits:
          memory: 512M
          cpus: '0.5'
    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "3"

  # ─────────────────────────── Job Service ───────────────────────────────────
  job-service:
    build:
      context: .
      dockerfile: ./job-service/Dockerfile
    container_name: verifydev-job
    ports:
      - "${JOB_SERVICE_PORT:-3004}:3004"
    environment:
      - NODE_ENV=${NODE_ENV:-development}
      - PORT=3004
      - DATABASE_URL=${DATABASE_URL:?DATABASE_URL is required}
      - JWT_ACCESS_SECRET=${JWT_ACCESS_SECRET:?JWT_ACCESS_SECRET is required}
      - ALLOWED_ORIGINS=${CORS_ORIGIN:-http://localhost:3000}
      - USER_SERVICE_GRPC=user-service:50051
    depends_on:
      - user-service
    restart: unless-stopped
    networks:
      - verifydev-network
    deploy:
      resources:
        limits:
          memory: 512M
          cpus: '0.5'
    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "3"

  # ─────────────────────────── Recruiter Service ─────────────────────────────
  recruiter-service:
    build:
      context: .
      dockerfile: ./recruiter-service/Dockerfile
    container_name: verifydev-recruiter
    ports:
      - "${RECRUITER_SERVICE_PORT:-3005}:3005"
      - "${RECRUITER_SERVICE_GRPC_PORT:-50054}:50054"
    environment:
      - NODE_ENV=${NODE_ENV:-development}
      - PORT=3005
      - GRPC_PORT=50054
      - DATABASE_URL=${DATABASE_URL:?DATABASE_URL is required}
      - JWT_ACCESS_SECRET=${JWT_ACCESS_SECRET:?JWT_ACCESS_SECRET is required}
      - JWT_REFRESH_SECRET=${JWT_REFRESH_SECRET:?JWT_REFRESH_SECRET is required}
      - ALLOWED_ORIGINS=${CORS_ORIGIN:-http://localhost:3000}
      - USER_SERVICE_GRPC=user-service:50051
      - JOB_SERVICE_GRPC=job-service:50052
    depends_on:
      - user-service
      - job-service
    restart: unless-stopped
    networks:
      - verifydev-network
    deploy:
      resources:
        limits:
          memory: 512M
          cpus: '0.5'
    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "3"

  # ─────────────────────────── Chat Service ──────────────────────────────────
  chat-service:
    build: ./chat-service
    container_name: verifydev-chat
    ports:
      - "${CHAT_SERVICE_PORT:-3006}:3006"
    environment:
      - PORT=3006
      - DATABASE_URL=${CHAT_DATABASE_URL:-${DATABASE_URL}}
      - REDIS_HOST=redis
      - REDIS_PORT=6379
      - REDIS_PASSWORD=${REDIS_PASSWORD:-}
      - RABBITMQ_URL=amqp://${RABBITMQ_USER:-verifydev}:${RABBITMQ_PASS}@rabbitmq:5672
      - JWT_ACCESS_SECRET=${JWT_ACCESS_SECRET:?JWT_ACCESS_SECRET is required}
      - CORS_ORIGIN=${CORS_ORIGIN:-http://localhost:3000}
    depends_on:
      redis:
        condition: service_healthy
      rabbitmq:
        condition: service_healthy
    restart: unless-stopped
    networks:
      - verifydev-network
    deploy:
      resources:
        limits:
          memory: 512M
          cpus: '0.5'
    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "3"

  # ─────────────────────────── Aura Processor ────────────────────────────────
  aura-processor:
    build: ./aura-processor
    container_name: verifydev-aura
    environment:
      - NODE_ENV=${NODE_ENV:-development}
      - DATABASE_URL=${DATABASE_URL:?DATABASE_URL is required}
      - RABBITMQ_URL=amqp://${RABBITMQ_USER:-verifydev}:${RABBITMQ_PASS}@rabbitmq:5672
      - CONSUME_QUEUE=project.analyzed
      - EXCHANGE_NAME=project.events
      - GEMINI_API_KEY=${GEMINI_API_KEY}
    depends_on:
      rabbitmq:
        condition: service_healthy
    restart: unless-stopped
    networks:
      - verifydev-network
    deploy:
      resources:
        limits:
          memory: 512M
          cpus: '0.5'
    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "3"

  # ┌──────────────────────────────────────────────────────────────────────────┐
  # │                        ⚡ HIGH-PERFORMANCE SERVICES (Go)                  │
  # └──────────────────────────────────────────────────────────────────────────┘

  # ─────────────────────────── Project Analyzer ──────────────────────────────
  project-analyzer:
    build: ./project-analyzer
    container_name: verifydev-analyzer
    ports:
      - "${ANALYZER_SERVICE_PORT:-8001}:8001"
    environment:
      - ENV=${NODE_ENV:-development}
      - PORT=8001
      - RABBITMQ_URL=amqp://${RABBITMQ_USER:-verifydev}:${RABBITMQ_PASS}@rabbitmq:5672/
      - EXCHANGE_NAME=project.events
      - CONSUME_QUEUE=project.analyze.request
      - PUBLISH_QUEUE=project.analyzed
      - CLONE_DIR=/tmp/repos
      - GITHUB_TOKEN=${GITHUB_TOKEN:-}
      # Worker Pool Configuration
      - WORKER_COUNT=${ANALYZER_WORKER_COUNT:-4}
      - PREFETCH_COUNT=${ANALYZER_PREFETCH_COUNT:-4}
      - ANALYSIS_TIMEOUT_SEC=${ANALYSIS_TIMEOUT_SEC:-120}
    volumes:
      - analyzer_repos:/tmp/repos
    depends_on:
      rabbitmq:
        condition: service_healthy
    restart: unless-stopped
    networks:
      - verifydev-network
    deploy:
      resources:
        limits:
          memory: 1G
          cpus: '1.0'
    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "3"

  # ─────────────────────────── Resume Service ────────────────────────────────
  resume-service:
    build: ./resume-service
    container_name: verifydev-resume
    ports:
      - "${RESUME_SERVICE_PORT:-8003}:8003"
    environment:
      - ENV=${NODE_ENV:-development}
      - PORT=8003
      - DATABASE_URL=${DATABASE_URL:?DATABASE_URL is required}
      - RABBITMQ_URL=amqp://${RABBITMQ_USER:-verifydev}:${RABBITMQ_PASS}@rabbitmq:5672/
    restart: unless-stopped
    networks:
      - verifydev-network
    deploy:
      resources:
        limits:
          memory: 512M
          cpus: '0.5'
    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "3"
  # ┌──────────────────────────────────────────────────────────────────────────┐
  # │                          🤖 AI SERVICES (DISABLED)                        │
  # └──────────────────────────────────────────────────────────────────────────┘
  # NOTE: ai-service temporarily disabled - uncomment when needed
  # ai-service:
  #   build:
  #     context: ./ai-service
  #     dockerfile: Dockerfile.dev
  #   container_name: verifydev-ai
  #   ports:
  #     - "${AI_SERVICE_PORT:-3008}:3008"
  #   environment:
  #     - NODE_ENV=${NODE_ENV:-development}
  #     - PORT=3008
  #     - OLLAMA_HOST=${OLLAMA_HOST:-http://localhost:11434}
  #     - OLLAMA_MODEL=${OLLAMA_MODEL:-llama3.2}
  #     - WHATSAPP_TOKEN=${WHATSAPP_TOKEN:-}
  #     - WHATSAPP_PHONE_NUMBER_ID=${WHATSAPP_PHONE_NUMBER_ID:-}
  #     - WHATSAPP_VERIFY_TOKEN=${WHATSAPP_VERIFY_TOKEN:-verifydev_webhook_secret}
  #     - JOB_SERVICE_URL=http://job-service:3004
  #     - USER_SERVICE_URL=http://user-service:3002
  #   volumes:
  #     - ./ai-service:/app
  #     - /app/node_modules
  #   depends_on:
  #     - job-service
  #     - user-service
  #   restart: unless-stopped
  #   networks:
  #     - verifydev-network
  #   deploy:
  #     resources:
  #       limits:
  #         memory: 512M
  #         cpus: '0.5'
  #   logging:
  #     driver: json-file
  #     options:
  #       max-size: "10m"
  #       max-file: "3"

  # ══════════════════════════════════════════════════════════════════════════════
  #                              💾 PERSISTENT VOLUMES
  # ══════════════════════════════════════════════════════════════════════════════
volumes:
  redis_data:
    driver: local
  rabbitmq_data:
    driver: local
  analyzer_repos:
    driver: local

# ══════════════════════════════════════════════════════════════════════════════
#                              🔗 NETWORK CONFIGURATION
# ══════════════════════════════════════════════════════════════════════════════
networks:
  verifydev-network:
    driver: bridge
    name: verifydev-network