docker-compose.yml

services:
  postgres:
    image: postgres:16-alpine
    environment:
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
      POSTGRES_DB: ${POSTGRES_DB}
    ports:
      - "5432:5432"
    volumes:
      - pgdata:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER}"]
      interval: 5s
      timeout: 5s
      retries: 10

  redis:
    image: redis:7-alpine
    ports:
      - "6379:6379"
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 5s
      timeout: 3s
      retries: 10

  minio:
    image: minio/minio:latest
    command: server /data --console-address ":9001"
    environment:
      MINIO_ROOT_USER: ${MINIO_ROOT_USER}
      MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD}
    ports:
      - "9000:9000"
      - "9001:9001"
    volumes:
      - miniodata:/data
    healthcheck:
      test: ["CMD", "mc", "ready", "local"]
      interval: 5s
      timeout: 5s
      retries: 10

  # One-shot: create the clips bucket
  minio-setup:
    image: minio/mc:latest
    depends_on:
      minio:
        condition: service_started
    entrypoint: >
      /bin/sh -c "
      until (mc alias set local http://minio:9000 ${MINIO_ROOT_USER} ${MINIO_ROOT_PASSWORD}) do echo 'waiting for minio'; sleep 2; done;
      mc mb --ignore-existing local/${S3_BUCKET};
      mc anonymous set download local/${S3_BUCKET};
      echo 'bucket ready';
      "

  backend:
    build: ./backend
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
      minio:
        condition: service_started
    environment:
      ASPNETCORE_URLS: http://+:8080
      ASPNETCORE_ENVIRONMENT: ${ASPNETCORE_ENVIRONMENT}
      ConnectionStrings__Postgres: Host=postgres;Port=5432;Database=${POSTGRES_DB};Username=${POSTGRES_USER};Password=${POSTGRES_PASSWORD}
      Redis__Connection: ${REDIS_CONNECTION}
      S3__Endpoint: ${S3_ENDPOINT}
      S3__PublicEndpoint: ${S3_PUBLIC_ENDPOINT}
      S3__Bucket: ${S3_BUCKET}
      S3__AccessKey: ${S3_ACCESS_KEY}
      S3__SecretKey: ${S3_SECRET_KEY}
      S3__Region: ${S3_REGION}
      Jwt__SigningKey: ${JWT_SIGNING_KEY}
      Jwt__Issuer: ${JWT_ISSUER}
      Jwt__Audience: ${JWT_AUDIENCE}
      Seed__AdminEmail: ${SEED_ADMIN_EMAIL}
      Seed__AdminPassword: ${SEED_ADMIN_PASSWORD}
      Seed__ConnectorBootstrapKey: ${CONNECTOR_BOOTSTRAP_KEY}
      CloudAi__ServiceKey: ${CLOUD_AI_SERVICE_KEY:-${CONNECTOR_BOOTSTRAP_KEY}}
      Pilot__AlertVisibilityMode: ${ALERT_VISIBILITY_MODE}
      ConnectorInstaller__Version: ${CONNECTOR_INSTALLER_VERSION:-1.1.18}
      ConnectorInstaller__Path: /app/connector-dist
      Smtp__Enabled: ${SMTP_ENABLE:-false}
      Smtp__Host: ${SMTP_HOST:-smtp.gmail.com}
      Smtp__Port: ${SMTP_PORT:-587}
      Smtp__User: ${SMTP_USER:-}
      Smtp__Password: ${SMTP_PASSWORD:-}
      Smtp__From: ${SMTP_FROM:-}
      Smtp__DashboardBaseUrl: ${DASHBOARD_BASE_URL:-http://localhost:4200}
      EnableSwagger: ${ENABLE_SWAGGER:-true}
      # CORS: allow both local dev and the Dockerized dashboard
      CORS_ORIGINS: ${CORS_ORIGINS:-http://localhost:4200,http://localhost:80}
    ports:
      - "8081:8080"
    volumes:
      # Serve the exact artifact created by connector/installer/build.ps1.
      # Keeping this mapped to connector/dist prevents dashboard downloads from
      # serving a stale or missing EXE after a connector rebuild.
      - ./connector/dist:/app/connector-dist:ro

  cloud-ai:
    build: ./cloud-ai
    depends_on:
      redis:
        condition: service_healthy
      minio:
        condition: service_started
      backend:
        condition: service_started
    environment:
      REDIS_CONNECTION: ${REDIS_CONNECTION}
      S3_ENDPOINT: ${S3_ENDPOINT}
      S3_BUCKET: ${S3_BUCKET}
      S3_ACCESS_KEY: ${S3_ACCESS_KEY}
      S3_SECRET_KEY: ${S3_SECRET_KEY}
      S3_REGION: ${S3_REGION}
      CLOUD_AI_BACKEND_URL: ${CLOUD_AI_BACKEND_URL}
      CLOUD_AI_MODEL_BACKEND: ${CLOUD_AI_MODEL_BACKEND}
      CLOUD_AI_MODEL: ${CLOUD_AI_MODEL}
      CLOUD_AI_DEVICE: ${CLOUD_AI_DEVICE}
      CLOUD_AI_YOLOE_PROMPTS: ${CLOUD_AI_YOLOE_PROMPTS}
      CLOUD_AI_SERVICE_KEY: ${CLOUD_AI_SERVICE_KEY:-${CONNECTOR_BOOTSTRAP_KEY}}
      CLOUD_AI_CPU_THREADS: ${CLOUD_AI_CPU_THREADS:-2}
      CLOUD_AI_ENABLE_REID: ${CLOUD_AI_ENABLE_REID:-false}
      OMP_NUM_THREADS: ${CLOUD_AI_CPU_THREADS:-2}
      MKL_NUM_THREADS: ${CLOUD_AI_CPU_THREADS:-2}
      OPENBLAS_NUM_THREADS: ${CLOUD_AI_CPU_THREADS:-2}
    cpus: 2.0

  # Angular dashboard — served by nginx, proxies /api → backend
  dashboard:
    build: ./dashboard
    depends_on:
      - backend
    ports:
      - "4200:80"
    restart: unless-stopped

volumes:
  pgdata:
  miniodata: