docker-compose.prod.yml

# Production environment (full production deployment)
services:
  app:
    build:
      context: .
      dockerfile: Dockerfile
      target: production
      args:
        BUILD_TARGET: ssr
    restart: unless-stopped
    environment:
      - APP_ENV=production
      - APP_DEBUG=false
      - APP_URL=https://yourdomain.com
      - DB_CONNECTION=pgsql
      - DB_HOST=postgres
      - DB_PORT=5432
      - DB_DATABASE=baselaravel12react_prod
      - DB_USERNAME=laravel
      - DB_PASSWORD=${DB_PASSWORD}
      - REDIS_HOST=redis
      - REDIS_PASSWORD=${REDIS_PASSWORD}
      - REDIS_PORT=6379
      - CACHE_DRIVER=redis
      - SESSION_DRIVER=redis
      - QUEUE_CONNECTION=redis
      - LOG_CHANNEL=stack
      - LOG_STACK=single,slack,sentry
      - LOG_LEVEL=error
      - MAIL_MAILER=smtp
      - SESSION_SECURE_COOKIE=true
      - SANCTUM_STATEFUL_DOMAINS=yourdomain.com
      - SESSION_DOMAIN=.yourdomain.com
      - FILESYSTEM_DISK=minio
      - MINIO_ACCESS_KEY=${MINIO_ACCESS_KEY}
      - MINIO_SECRET_KEY=${MINIO_SECRET_KEY}
      - MINIO_DEFAULT_REGION=us-east-1
      - MINIO_BUCKET=laravel-prod
      - MINIO_ENDPOINT=http://minio:9000
      - MINIO_USE_PATH_STYLE_ENDPOINT=true
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
      minio:
        condition: service_healthy
    networks:
      - laravel
      - traefik
    volumes:
      - storage_data:/app/storage/app
      - logs_data:/app/storage/logs
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.app-prod.rule=Host(`yourdomain.com`)"
      - "traefik.http.routers.app-prod.tls=true"
      - "traefik.http.routers.app-prod.tls.certresolver=letsencrypt"
      - "traefik.http.services.app-prod.loadbalancer.server.port=80"
      - "traefik.http.middlewares.app-prod-compress.compress=true"
      - "traefik.http.middlewares.app-prod-ratelimit.ratelimit.burst=100"
      - "traefik.http.middlewares.app-prod-ratelimit.ratelimit.average=50"
      - "traefik.http.routers.app-prod.middlewares=app-prod-compress,app-prod-ratelimit"
    deploy:
      replicas: 3
      resources:
        limits:
          memory: 2G
          cpus: '1.0'
        reservations:
          memory: 1G
          cpus: '0.5'
      update_config:
        parallelism: 1
        delay: 10s
        failure_action: rollback
        order: start-first
      rollback_config:
        parallelism: 1
        delay: 10s
      restart_policy:
        condition: any
        delay: 5s
        max_attempts: 3

  postgres:
    image: postgres:16-alpine
    restart: unless-stopped
    environment:
      POSTGRES_DB: baselaravel12react_prod
      POSTGRES_USER: laravel
      POSTGRES_PASSWORD: ${DB_PASSWORD}
      POSTGRES_INITDB_ARGS: "--auth-host=scram-sha-256 --auth-local=scram-sha-256"
    volumes:
      - postgres_prod_data:/var/lib/postgresql/data
      - ./docker/postgres/prod-backup:/backup
      - ./docker/postgres/postgresql.conf:/etc/postgresql/postgresql.conf
    command: postgres -c config_file=/etc/postgresql/postgresql.conf
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U laravel"]
      interval: 30s
      timeout: 10s
      retries: 5
    networks:
      - laravel
    deploy:
      resources:
        limits:
          memory: 2G
          cpus: '1.0'
        reservations:
          memory: 1G
          cpus: '0.5'
    logging:
      driver: "json-file"
      options:
        max-size: "10m"
        max-file: "3"

  redis:
    image: redis:7-alpine
    restart: unless-stopped
    command: >
      redis-server 
      --requirepass ${REDIS_PASSWORD} 
      --appendonly yes 
      --maxmemory 512mb 
      --maxmemory-policy allkeys-lru
      --save 900 1
      --save 300 10
      --save 60 10000
    volumes:
      - redis_prod_data:/data
      - ./docker/redis/redis.conf:/usr/local/etc/redis/redis.conf
    healthcheck:
      test: ["CMD", "redis-cli", "-a", "${REDIS_PASSWORD}", "ping"]
      interval: 30s
      timeout: 10s
      retries: 5
    networks:
      - laravel
    deploy:
      resources:
        limits:
          memory: 512M
          cpus: '0.5'
        reservations:
          memory: 256M
          cpus: '0.25'
    logging:
      driver: "json-file"
      options:
        max-size: "5m"
        max-file: "3"

  ssr:
    build:
      context: .
      dockerfile: Dockerfile
      target: production
    restart: unless-stopped
    environment:
      - NODE_ENV=production
      - SSR_PORT=13714
    networks:
      - laravel
    command: node bootstrap/ssr/ssr.mjs
    deploy:
      replicas: 2
      resources:
        limits:
          memory: 512M
          cpus: '0.5'
        reservations:
          memory: 256M
          cpus: '0.25'
    logging:
      driver: "json-file"
      options:
        max-size: "5m"
        max-file: "3"

  worker:
    build:
      context: .
      dockerfile: Dockerfile
      target: production
    restart: unless-stopped
    environment:
      - APP_ENV=production
      - APP_DEBUG=false
      - DB_CONNECTION=pgsql
      - DB_HOST=postgres
      - DB_PORT=5432
      - DB_DATABASE=baselaravel12react_prod
      - DB_USERNAME=laravel
      - DB_PASSWORD=${DB_PASSWORD}
      - REDIS_HOST=redis
      - REDIS_PASSWORD=${REDIS_PASSWORD}
      - QUEUE_CONNECTION=redis
      - LOG_LEVEL=error
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
    networks:
      - laravel
    volumes:
      - storage_data:/app/storage/app
      - logs_data:/app/storage/logs
    command: php artisan queue:work --sleep=3 --tries=3 --max-time=3600 --memory=512
    deploy:
      replicas: 5
      resources:
        limits:
          memory: 1G
          cpus: '0.5'
        reservations:
          memory: 512M
          cpus: '0.25'
    logging:
      driver: "json-file"
      options:
        max-size: "10m"
        max-file: "3"

  scheduler:
    build:
      context: .
      dockerfile: Dockerfile
      target: production
    restart: unless-stopped
    environment:
      - APP_ENV=production
      - APP_DEBUG=false
      - DB_CONNECTION=pgsql
      - DB_HOST=postgres
      - DB_PORT=5432
      - DB_DATABASE=baselaravel12react_prod
      - DB_USERNAME=laravel
      - DB_PASSWORD=${DB_PASSWORD}
      - REDIS_HOST=redis
      - REDIS_PASSWORD=${REDIS_PASSWORD}
    depends_on:
      postgres:
        condition: service_healthy
    networks:
      - laravel
    volumes:
      - storage_data:/app/storage/app
      - logs_data:/app/storage/logs
    command: >
      sh -c "while true; do
        php artisan schedule:run --no-interaction
        sleep 60
      done"
    deploy:
      resources:
        limits:
          memory: 512M
          cpus: '0.25'
        reservations:
          memory: 256M
          cpus: '0.1'
    logging:
      driver: "json-file"
      options:
        max-size: "5m"
        max-file: "3"

  # Database backup service
  backup:
    image: postgres:16-alpine
    restart: "no"
    environment:
      PGPASSWORD: ${DB_PASSWORD}
    volumes:
      - ./docker/postgres/prod-backup:/backup
      - postgres_prod_data:/var/lib/postgresql/data:ro
    networks:
      - laravel
    profiles:
      - backup
    command: >
      sh -c "
        timestamp=$$(date +%Y%m%d_%H%M%S)
        pg_dump -h postgres -U laravel -d baselaravel12react_prod > /backup/prod_backup_$$timestamp.sql
        find /backup -name 'prod_backup_*.sql' -mtime +7 -delete
        echo 'Backup completed at $$timestamp'
      "

  # Log aggregator (optional)
  log-aggregator:
    image: fluent/fluent-bit:latest
    restart: unless-stopped
    volumes:
      - ./docker/fluent-bit/fluent-bit.conf:/fluent-bit/etc/fluent-bit.conf
      - logs_data:/var/log/app:ro
      - /var/lib/docker/containers:/var/lib/docker/containers:ro
    networks:
      - laravel
    profiles:
      - logging
    deploy:
      resources:
        limits:
          memory: 256M
          cpus: '0.25'
        reservations:
          memory: 128M
          cpus: '0.1'

  # Monitoring (optional)
  prometheus:
    image: prom/prometheus:latest
    restart: unless-stopped
    volumes:
      - ./docker/prometheus/prometheus.yml:/etc/prometheus/prometheus.yml
      - prometheus_data:/prometheus
    networks:
      - laravel
      - monitoring
    profiles:
      - monitoring
    deploy:
      resources:
        limits:
          memory: 512M
          cpus: '0.5'
        reservations:
          memory: 256M
          cpus: '0.25'

  minio:
    image: minio/minio:latest
    restart: unless-stopped
    environment:
      - MINIO_ROOT_USER=${MINIO_ACCESS_KEY}
      - MINIO_ROOT_PASSWORD=${MINIO_SECRET_KEY}
    volumes:
      - minio_prod_data:/data
    networks:
      - laravel
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.minio-prod.rule=Host(`minio.yourdomain.com`)"
      - "traefik.http.routers.minio-prod.tls=true"
      - "traefik.http.routers.minio-prod.tls.certresolver=letsencrypt"
      - "traefik.http.services.minio-prod.loadbalancer.server.port=9001"
    command: server /data --console-address ":9001"
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:9000/minio/health/live"]
      interval: 30s
      timeout: 20s
      retries: 3
    deploy:
      resources:
        limits:
          memory: 1G
          cpus: '0.5'
        reservations:
          memory: 512M
          cpus: '0.25'
    logging:
      driver: "json-file"
      options:
        max-size: "10m"
        max-file: "3"

volumes:
  postgres_prod_data:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: /var/lib/docker/volumes/postgres_prod_data
  redis_prod_data:
    driver: local
  storage_data:
    driver: local
  logs_data:
    driver: local
  prometheus_data:
    driver: local
  minio_prod_data:
    driver: local

networks:
  laravel:
    driver: overlay
    attachable: true
  traefik:
    external: true
  monitoring:
    external: true
    name: monitoring