docker-compose.full.yml

version: '3.8'
name: 'full-cosmo'
services:

  # Services for the demo

  employees:
    container_name: employees
    environment:
      OTEL_AUTH_TOKEN: ${OTEL_AUTH_TOKEN}
      OTEL_HTTP_ENDPOINT: ${OTEL_HTTP_ENDPOINT:-otelcollector:4318}
    build:
      context: ./demo
      dockerfile: Dockerfile.employees
    profiles:
      - subgraphs
    ports:
      - '4001:4001'
    networks:
      - primary

  family:
    container_name: family
    environment:
      OTEL_AUTH_TOKEN: ${OTEL_AUTH_TOKEN}
      OTEL_HTTP_ENDPOINT: ${OTEL_HTTP_ENDPOINT:-otelcollector:4318}
    build:
      context: ./demo
      dockerfile: Dockerfile.family
    profiles:
      - subgraphs
    ports:
      - '4002:4002'
    networks:
      - primary

  hobbies:
    container_name: hobbies
    environment:
      OTEL_AUTH_TOKEN: ${OTEL_AUTH_TOKEN}
      OTEL_HTTP_ENDPOINT: ${OTEL_HTTP_ENDPOINT:-otelcollector:4318}
    build:
      context: ./demo
      dockerfile: Dockerfile.hobbies
    profiles:
      - subgraphs
    ports:
      - '4003:4003'
    networks:
      - primary

  products:
    environment:
      OTEL_AUTH_TOKEN: ${OTEL_AUTH_TOKEN}
      OTEL_HTTP_ENDPOINT: ${OTEL_HTTP_ENDPOINT:-otelcollector:4318}
    container_name: products
    build:
      context: ./demo
      dockerfile: Dockerfile.products
    profiles:
      - subgraphs
    ports:
      - '4004:4004'
    networks:
      - primary

  # Infrastructure services

  clickhouse:
    image: clickhouse/clickhouse-server:${DC_CLICKHOUSE_VERSION:-23}
    environment:
      CLICKHOUSE_DB: ${CLICKHOUSE_DATABASE:-cosmo}
      CLICKHOUSE_USER: ${CLICKHOUSE_USER:-default}
      CLICKHOUSE_PASSWORD: ${CLICKHOUSE_PASSWORD:-changeme}
      CLICKHOUSE_DEFAULT_ACCESS_MANAGEMENT: ${CLICKHOUSE_DEFAULT_ACCESS_MANAGEMENT:-1}
    ports:
      - "8123:8123"
      - "9000:9000"
      - "9440:9440"
    profiles:
      - default
    networks:
      - primary
    volumes:
      - clickhouse:/var/lib/clickhouse
      - ./docker/clickhouse/init-db.sh:/docker-entrypoint-initdb.d/init-db.sh

  postgres:
    image: postgres:${DC_POSTGRESQL_VERSION:-15.3}
    environment:
      POSTGRES_USER: ${POSTGRES_USER:-postgres}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-changeme}
      POSTGRES_DB: ${POSTGRES_DB:-controlplane}
      PGDATA: /data/postgres
    volumes:
      - ./docker/postgres/init.sql:/docker-entrypoint-initdb.d/init.sql
      - postgres:/data/postgres
    ports:
      - "5432:5432"
    profiles:
      - default
    restart: unless-stopped
    networks:
      - primary

  keycloak:
    image: ghcr.io/wundergraph/cosmo/keycloak:${DC_KEYCLOAK_VERSION:-latest}
    platform: linux/amd64
    environment:
      KEYCLOAK_ADMIN: ${KEYCLOAK_ADMIN:-admin}
      KEYCLOAK_ADMIN_PASSWORD: ${KEYCLOAK_ADMIN_PASSWORD:-changeme}
      KC_DB: postgres
      KC_DB_URL_HOST: postgres
      KC_DB_URL_DATABASE: ${POSTGRES_DB:-keycloak}
      KC_DB_PASSWORD: ${POSTGRES_PASSWORD:-changeme}
      KC_DB_USERNAME: ${POSTGRES_USER:-postgres}
      KC_DB_SCHEMA: public
    command:
      - "start-dev"
      - "--import-realm"
    ports:
      - "8080:8080"
    volumes:
      - ./docker/keycloak/realm.json:/opt/keycloak/data/import/realm.json:ro
    restart: unless-stopped
    networks:
      - primary
    profiles:
      - default
    depends_on:
      - postgres

  prometheus:
    image: prom/prometheus:v2.46.0
    command:
      - --web.enable-remote-write-receiver
      - --enable-feature=native-histograms
      - --config.file=/etc/prometheus/prometheus.yml
      - --web.config.file=/etc/prometheus/web.yml
    volumes:
      - prometheus:/prometheus
      - ./docker/prometheus/prometheus.yml:/etc/prometheus/prometheus.yml
      - ./docker/prometheus/web.yml:/etc/prometheus/web.yml
    networks:
      - primary
    profiles:
      - default
    ports:
      - "9090:9090"

  # Cosmo Platform

  otelcollector:
    # On the public repo
    image: ghcr.io/wundergraph/cosmo/otelcollector:${DC_OTELCOLLECTOR_VERSION:-latest}
    platform: linux/amd64
    environment:
      CLICKHOUSE_ENDPOINT: "clickhouse://${CLICKHOUSE_USER:-default}:${CLICKHOUSE_PASSWORD:-changeme}@clickhouse:9000/${CLICKHOUSE_DATABASE:-cosmo}?dial_timeout=15s&compress=lz4"
      OTEL_INGEST_JWT_SECRET: ${OTEL_INGEST_JWT_SECRET:-fkczyomvdprgvtmvkuhvprxuggkbgwld}
      PROMETHEUS_REMOTE_ENDPOINT: "http://prometheus:9090/api/v1/write"
      PROMETHEUS_USERNAME: ${PROMETHEUS_USERNAME:-admin}
      PROMETHEUS_PASSWORD: ${PROMETHEUS_PASSWORD:-test}
    ports:
      - '4318:4318'
    restart: unless-stopped
    profiles:
      - default
    depends_on:
      - clickhouse
    networks:
      - primary

  controlplane:
    image: ghcr.io/wundergraph/cosmo/controlplane:${DC_CONTROLPLANE_VERSION:-latest}
    platform: linux/amd64
    environment:
      DB_URL: "postgresql://postgres:changeme@postgres:5432/controlplane"
      PORT: 3001
      HOST: "0.0.0.0"
      ALLOWED_ORIGINS: "http://localhost:3000"
      LOG_LEVEL: "info"
      DEBUG_SQL: "true"
      CLICKHOUSE_DSN: "http://default:changeme@clickhouse:8123?database=cosmo"
      AUTH_REDIRECT_URI: "http://localhost:3001/v1/auth/callback"
      WEB_BASE_URL: "http://localhost:3000"
      AUTH_JWT_SECRET: "fkczyomvdprgvtmvkuhvprxuggkbgwld"
      KC_CLIENT_ID: "studio"
      KC_REALM: "cosmo"
      KC_ADMIN_USER: ${KEYCLOAK_ADMIN:-admin}
      KC_ADMIN_PASSWORD: ${KEYCLOAK_ADMIN_PASSWORD:-changeme}
      KC_API_URL: "http://keycloak:8080"
      KC_FRONTEND_URL: "http://localhost:8080"
      PROMETHEUS_API_URL: "http://admin:test@prometheus:9090/api/v1"
    ports:
      - '3001:3001'
    restart: on-failure
    networks:
      - primary
    profiles:
      - default
    depends_on:
      - postgres
      - clickhouse

  router:
    image: ghcr.io/wundergraph/cosmo/router:${DC_ROUTER_VERSION:-latest}
    platform: linux/amd64
    environment:
      LOG_LEVEL: info
      FEDERATED_GRAPH_NAME: production
      CORS_ALLOW_CREDENTIALS: true
      LISTEN_ADDR: "0.0.0.0:3002"
      CONTROLPLANE_URL: http://controlplane:3001
      TELEMETRY_ENDPOINT: http://otelcollector:4318
      GRAPH_API_TOKEN: ${ROUTER_TOKEN}
    restart: on-failure
    networks:
      - primary
    profiles:
      - router
    ports:
      - '3002:3002'

  studio:
    image: ghcr.io/wundergraph/cosmo/studio:${DC_STUDIO_VERSION:-latest}
    platform: linux/amd64
    environment:
      NEXT_PUBLIC_COSMO_CP_URL: http://localhost:3001
      HOSTNAME: "0.0.0.0"
    profiles:
      - default
    ports:
      - '3000:3000'

  # Migrations & Seed

  seed:
    image: ghcr.io/wundergraph/cosmo/controlplane:${DC_CONTROLPLANE_VERSION:-latest}
    platform: linux/amd64
    command:
      - "/app/dist/bin/seed.js"
    environment:
      KC_REALM: "cosmo"
      KC_API_URL: "http://keycloak:8080"
      KC_ADMIN_USER: "admin"
      KC_ADMIN_PASSWORD: "changeme"
      KC_CLIENT_ID: "studio"
      API_KEY: cosmo_669b576aaadc10ee1ae81d9193425705
      DB_URL: "postgresql://postgres:changeme@postgres:5432/controlplane"
      USER_EMAIL: foo@wundergraph.com
      USER_PASSWORD: bar
      USER_FIRSTNAME: foo
      USER_LASTNAME: bar
      ORGANIZATION_NAME: wundergraph
      ORGANIZATION_SLUG: wundergraph
    restart: on-failure
    networks:
      - primary
    profiles:
      - default
    depends_on:
      - postgres
      - clickhouse
      - keycloak

  clickhouse-migration:
    image: ghcr.io/wundergraph/cosmo/controlplane:${DC_CONTROLPLANE_VERSION:-latest}
    platform: linux/amd64
    command: node dist/bin/ch-migrate.js
    depends_on:
      - clickhouse
    environment:
      - CLICKHOUSE_DSN=clickhouse://default:changeme@clickhouse:9000/cosmo
    networks:
      - primary
    profiles:
      - default
    restart: on-failure

  database-migration:
    image: ghcr.io/wundergraph/cosmo/controlplane:${DC_CONTROLPLANE_VERSION:-latest}
    platform: linux/amd64
    command: node dist/bin/db-migrate.js
    depends_on:
      - postgres
    environment:
      - DB_URL=postgresql://postgres:changeme@postgres:5432/controlplane
    networks:
      - primary
    profiles:
      - default
    restart: on-failure

# This network is shared between this file and docker-compose.yml to
# allow the demo subgraphs to communicate with the rest of the infra-networks:
networks:
  primary:
    driver: bridge
    name: primary

volumes:
  postgres:
  clickhouse:
  prometheus: