docker-compose.yml

version: "3.8"

services:
    postgres:
        image: pgvector/pgvector:pg16
        environment:
            POSTGRES_DB: deepmail
            POSTGRES_USER: deepmail
            POSTGRES_PASSWORD: ${DB_PASSWORD:-deepmail_dev_password}
        volumes:
            - postgres_data:/var/lib/postgresql/data
            - ./migrations:/docker-entrypoint-initdb.d
        ports:
            - "5432:5432"
        healthcheck:
            test: ["CMD-SHELL", "pg_isready -U deepmail"]
            interval: 5s
            timeout: 5s
            retries: 5

    redis:
        image: redis:7-alpine
        command: redis-server --appendonly yes --maxmemory 256mb --maxmemory-policy allkeys-lru
        ports:
            - "6379:6379"
        volumes:
            - redis_data:/data
        healthcheck:
            test: ["CMD", "redis-cli", "ping"]
            interval: 5s
            timeout: 3s
            retries: 5

    nats:
        image: nats:2.10-alpine
        ports:
            - "4222:4222"
            - "8222:8222"
        command: ["-js", "-m", "8222"]
        volumes:
            - nats_data:/data

    # Build Zig rate limiter library first
    zig-builder:
        image: rust:1.78-slim
        working_dir: /workspace
        volumes:
            - .:/workspace
        command: >
            bash -c "
              apt-get update && apt-get install -y curl &&
              curl -fsSL https://ziglang.org/download/0.12.0/zig-linux-x86_64-0.12.0.tar.xz | tar -xJ &&
              mv zig-linux-x86_64-0.12.0 /usr/local/zig &&
              ln -sf /usr/local/zig/zig /usr/local/bin/zig &&
              cd /workspace/zig-modules/rate-limiter && zig build -Doptimize=ReleaseFast
            "
        profiles:
            - build

    deepmail-auth:
        build:
            context: .
            dockerfile: crates/deepmail-auth/Dockerfile
        environment:
            - DEEPMAIL_AUTH_DATABASE_URL=postgres://deepmail:${DB_PASSWORD:-deepmail_dev_password}@postgres:5432/deepmail_auth
            - DEEPMAIL_AUTH_GRPC_ADDR=0.0.0.0:50051
            - DEEPMAIL_AUTH_NATS_URL=nats://nats:4222
            - DEEPMAIL_AUTH_JWT_PRIVATE_KEY_PEM=${JWT_PRIVATE_KEY}
            - DEEPMAIL_AUTH_JWT_PUBLIC_KEY_PEM=${JWT_PUBLIC_KEY}
            - DEEPMAIL_AUTH_SMTP_GRPC_ADDR=http://deepmail-otp-smtp:50052
            - DEEPMAIL_AUTH_JWT_ACCESS_EXPIRY_SECONDS=900
            - DEEPMAIL_AUTH_JWT_REFRESH_EXPIRY_DAYS=7
            - DEEPMAIL_AUTH_OTP_EXPIRY_SECONDS=600
            - DEEPMAIL_AUTH_OTP_MAX_ATTEMPTS=5
            - DEEPMAIL_AUTH_LOCKOUT_DURATION_MINUTES=15
            - DEEPMAIL_AUTH_LOCKOUT_MAX_ATTEMPTS=5
        depends_on:
            postgres:
                condition: service_healthy
            nats:
                condition: service_started
            zig-builder:
                condition: service_completed_successfully
        ports:
            - "50051:50051"
        volumes:
            - ./zig-modules/rate-limiter/zig-out/lib:/usr/local/lib:ro

    deepmail-otp-smtp:
        build:
            context: .
            dockerfile: crates/deepmail-otp-smtp/Dockerfile
        environment:
            - DEEPMAIL_OTP_SMTP_ENABLED=true
            - DEEPMAIL_OTP_SMTP_HOST=smtp.gmail.com
            - DEEPMAIL_OTP_SMTP_PORT=587
            - DEEPMAIL_OTP_SMTP_USERNAME=${SMTP_USERNAME}
            - DEEPMAIL_OTP_SMTP_PASSWORD=${SMTP_APP_PASSWORD}
            - DEEPMAIL_OTP_SMTP_STARTTLS=true
            - DEEPMAIL_OTP_SMTP_FROM_EMAIL=${SMTP_FROM_EMAIL:-security@deepmail.local}
            - DEEPMAIL_OTP_SMTP_FROM_NAME=DeepMail Security
        ports:
            - "50052:50052"
        depends_on:
            nats:
                condition: service_started

    deepmail-gateway:
        build:
            context: .
            dockerfile: crates/deepmail-gateway/Dockerfile
        environment:
            - DEEPMAIL_GATEWAY_DATABASE_URL=postgres://deepmail:${DB_PASSWORD:-deepmail_dev_password}@postgres:5432/deepmail_gateway
            - DEEPMAIL_GATEWAY_INGEST_DATABASE_URL=postgres://deepmail:${DB_PASSWORD:-deepmail_dev_password}@postgres:5432/deepmail_ingest
            - DEEPMAIL_GATEWAY_REDIS_URL=redis://redis:6379
            - DEEPMAIL_GATEWAY_HTTP_PORT=8080
            - DEEPMAIL_GATEWAY_CORS_ALLOW_ORIGIN=http://localhost:3000
            - DEEPMAIL_GATEWAY_AUTH_GRPC_URL=http://deepmail-auth:50051
            - DEEPMAIL_GATEWAY_SCORING_GRPC_URL=http://deepmail-scoring:50053
            - DEEPMAIL_GATEWAY_REPORT_GRPC_URL=http://deepmail-report:50054
            - DEEPMAIL_GATEWAY_IOC_GRPC_URL=http://deepmail-ioc:50055
            - DEEPMAIL_GATEWAY_GRAPH_GRPC_URL=http://deepmail-graph:50056
            - DEEPMAIL_GATEWAY_TENANT_GRPC_URL=http://deepmail-tenant:50057
            - DEEPMAIL_GATEWAY_BILLING_GRPC_URL=http://deepmail-billing:50058
            - DEEPMAIL_GATEWAY_NOTIFY_GRPC_URL=http://deepmail-notify:50059
            - DEEPMAIL_GATEWAY_RATE_LIMIT_PER_MINUTE=100
            - RUST_LOG=info
        depends_on:
            postgres:
                condition: service_healthy
            redis:
                condition: service_healthy
            deepmail-auth:
                condition: service_started
            zig-builder:
                condition: service_completed_successfully
        ports:
            - "8080:8080"
        volumes:
            - ./zig-modules/rate-limiter/zig-out/lib:/usr/local/lib:ro

    # Placeholder services (build from source)
    deepmail-scoring:
        build:
            context: .
            dockerfile: crates/deepmail-scoring/Dockerfile
        environment:
            - DEEPMAIL_SCORING_DATABASE_URL=postgres://deepmail:${DB_PASSWORD:-deepmail_dev_password}@postgres:5432/deepmail_scoring
            - DEEPMAIL_SCORING_GRPC_ADDR=0.0.0.0:50053
            - DEEPMAIL_SCORING_NATS_URL=nats://nats:4222
        depends_on:
            postgres:
                condition: service_healthy
            nats:
                condition: service_started
        ports:
            - "50053:50053"

    deepmail-report:
        build:
            context: .
            dockerfile: crates/deepmail-report/Dockerfile
        environment:
            - DEEPMAIL_REPORT_DATABASE_URL=postgres://deepmail:${DB_PASSWORD:-deepmail_dev_password}@postgres:5432/deepmail_report
            - DEEPMAIL_REPORT_GRPC_ADDR=0.0.0.0:50054
        depends_on:
            postgres:
                condition: service_healthy
        ports:
            - "50054:50054"

    deepmail-ioc:
        build:
            context: .
            dockerfile: crates/deepmail-ioc/Dockerfile
        environment:
            - DEEPMAIL_IOC_DATABASE_URL=postgres://deepmail:${DB_PASSWORD:-deepmail_dev_password}@postgres:5432/deepmail_ioc
            - DEEPMAIL_IOC_GRPC_ADDR=0.0.0.0:50055
        depends_on:
            postgres:
                condition: service_healthy
        ports:
            - "50055:50055"

    deepmail-graph:
        build:
            context: .
            dockerfile: crates/deepmail-graph/Dockerfile
        environment:
            - DEEPMAIL_GRAPH_DATABASE_URL=postgres://deepmail:${DB_PASSWORD:-deepmail_dev_password}@postgres:5432/deepmail_graph
            - DEEPMAIL_GRAPH_GRPC_ADDR=0.0.0.0:50056
        depends_on:
            postgres:
                condition: service_healthy
        ports:
            - "50056:50056"

    deepmail-tenant:
        build:
            context: .
            dockerfile: crates/deepmail-tenant/Dockerfile
        environment:
            - DEEPMAIL_TENANT_DATABASE_URL=postgres://deepmail:${DB_PASSWORD:-deepmail_dev_password}@postgres:5432/deepmail_tenant
            - DEEPMAIL_TENANT_GRPC_ADDR=0.0.0.0:50057
        depends_on:
            postgres:
                condition: service_healthy
        ports:
            - "50057:50057"

    deepmail-billing:
        build:
            context: .
            dockerfile: crates/deepmail-billing/Dockerfile
        environment:
            - DEEPMAIL_BILLING_DATABASE_URL=postgres://deepmail:${DB_PASSWORD:-deepmail_dev_password}@postgres:5432/deepmail_billing
            - DEEPMAIL_BILLING_GRPC_ADDR=0.0.0.0:50058
        depends_on:
            postgres:
                condition: service_healthy
        ports:
            - "50058:50058"

    deepmail-notify:
        build:
            context: .
            dockerfile: crates/deepmail-notify/Dockerfile
        environment:
            - DEEPMAIL_NOTIFY_DATABASE_URL=postgres://deepmail:${DB_PASSWORD:-deepmail_dev_password}@postgres:5432/deepmail_notify
            - DEEPMAIL_NOTIFY_GRPC_ADDR=0.0.0.0:50059
            - DEEPMAIL_NOTIFY_NATS_URL=nats://nats:4222
        depends_on:
            postgres:
                condition: service_healthy
            nats:
                condition: service_started
        ports:
            - "50059:50059"

    deepmail-dashboard:
        build:
            context: .
            dockerfile: deepmail-dashboard/Dockerfile
        environment:
            - NEXT_PUBLIC_API_URL=http://localhost:8080
            - NODE_ENV=development
        ports:
            - "3000:3000"
        depends_on:
            - deepmail-gateway
        volumes:
            - deepmail-dashboard-node-modules:/app/node_modules
            - ./deepmail-dashboard:/app

volumes:
    postgres_data:
    redis_data:
    nats_data:
    deepmail-dashboard-node-modules:

networks:
    default:
        name: deepmail-network