personal_memory/docker-compose.yml at main · Dzarlax-AI/personal_memory · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
services:
  memory-embeddings:
    image: ghcr.io/huggingface/text-embeddings-inference:cpu-latest
    container_name: memory-embeddings
    command: --model-id ${EMBED_MODEL:-intfloat/multilingual-e5-small} --revision main
    restart: always
    networks:
      - traefik
    deploy:
      resources:
        limits:
          memory: 2G

  memory-qdrant:
    image: qdrant/qdrant:latest
    container_name: memory-qdrant
    restart: always
    ports:
      - "127.0.0.1:6333:6333"  # localhost only — for debug via dashboard
    volumes:
      - qdrant_storage:/qdrant/storage:rw
      - qdrant_snapshots:/qdrant/snapshots:rw
    networks:
      - traefik

  memory-mcp:
    image: ghcr.io/dzarlax-ai/personal-memory:latest
    container_name: memory-mcp
    restart: always
    env_file: .env
    environment:
      - MCP_PORT=8000
      - QDRANT_URL=http://memory-qdrant:6333
      - EMBED_URL=http://memory-embeddings:80
      - ENABLE_TODOIST=${ENABLE_TODOIST:-false}
      - ENABLE_VIZ=${ENABLE_VIZ:-false}
    volumes:
      - qdrant_snapshots:/qdrant/snapshots:rw
    networks:
      - traefik
    labels:
      - "traefik.enable=true"
      # MCP endpoints — no Traefik auth, app checks X-API-Key
      - "traefik.http.routers.memory-mcp.entrypoints=https"
      - "traefik.http.routers.memory-mcp.rule=Host(`mcp.${MEMORY_DOMAIN}`) && (PathPrefix(`/memory`) || PathPrefix(`/todoist`) || Path(`/.well-known/oauth-protected-resource`) || Path(`/health`))"
      - "traefik.http.routers.memory-mcp.tls.certresolver=letsEncrypt"
      - "traefik.http.services.memory-mcp.loadbalancer.server.port=8000"
      # Viz dashboard — protected by Authentik ForwardAuth
      - "traefik.http.routers.memory-viz.entrypoints=https"
      - "traefik.http.routers.memory-viz.rule=Host(`mcp.${MEMORY_DOMAIN}`) && PathPrefix(`/viz`)"
      - "traefik.http.routers.memory-viz.tls.certresolver=letsEncrypt"
      - "traefik.http.routers.memory-viz.middlewares=authentik-auth"
      - "traefik.http.routers.memory-viz.service=memory-mcp"

volumes:
  qdrant_storage:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: /root/memory/qdrant_storage

  qdrant_snapshots:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: /root/memory/qdrant_snapshots

networks:
  traefik:
    external: true