docker-compose.yml

services:
  mongodb:
    image: mongo:latest
    container_name: aitoearn-mongodb
    restart: unless-stopped
    entrypoint: ["bash", "-c", "openssl rand -base64 756 > /data/mongodb-keyfile && chmod 400 /data/mongodb-keyfile && chown mongodb:mongodb /data/mongodb-keyfile && exec docker-entrypoint.sh mongod --replSet rs0 --keyFile /data/mongodb-keyfile"]
    environment:
      MONGO_INITDB_ROOT_USERNAME: admin
      MONGO_INITDB_ROOT_PASSWORD: password
    ports:
      - "27017:27017"
    volumes:
      - mongodb-data:/data/db
      - mongodb-config:/data/configdb
    networks:
      - aitoearn-network
    healthcheck:
      test: mongosh --quiet --eval "try { rs.status().ok } catch(e) { 0 }"
      interval: 10s
      timeout: 5s
      retries: 10
      start_period: 40s

  mongodb-rs-init:
    image: mongo:latest
    container_name: aitoearn-mongodb-rs-init
    depends_on:
      mongodb:
        condition: service_started
    entrypoint: ["/bin/sh", "-c", "sleep 5 && mongosh mongodb://admin:password@mongodb:27017/?authSource=admin --eval \"try { rs.initiate({_id:'rs0', members:[{_id:0, host:'mongodb:27017'}]}) } catch(e) { if (e.codeName!=='AlreadyInitialized') throw e }\""]
    restart: "no"
    networks:
      - aitoearn-network

  redis:
    image: redis:latest
    container_name: aitoearn-redis
    restart: unless-stopped
    command: redis-server --requirepass password
    ports:
      - "6379:6379"
    volumes:
      - redis-data:/data
    networks:
      - aitoearn-network
    healthcheck:
      test: ["CMD", "redis-cli", "--raw", "incr", "ping"]
      interval: 10s
      timeout: 3s
      retries: 5
      start_period: 30s

  rustfs:
    image: rustfs/rustfs:latest
    container_name: aitoearn-rustfs
    hostname: rustfs.local
    restart: unless-stopped
    environment:
      RUSTFS_ACCESS_KEY: rustfsadmin
      RUSTFS_SECRET_KEY: rustfsadmin
    ports:
      - "9001:9001"
    volumes:
      - rustfs-data:/data
    networks:
      aitoearn-network:
        aliases:
          - rustfs.local
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:9000/health"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 30s

  aitoearn-init:
    image: node:lts-alpine
    container_name: aitoearn-init
    depends_on:
      mongodb:
        condition: service_healthy
    volumes:
      - ./scripts/init.mjs:/app/init.mjs:ro
      - ./scripts/init-package.json:/app/package.json:ro
      - init-data:/data/init
    working_dir: /app
    environment:
      MONGO_URI: mongodb://admin:password@mongodb:27017
      JWT_SECRET: change-this-jwt-secret
      DB_NAME: aitoearn
      AUTO_LOGIN_TOKEN_PATH: /data/init/token.txt
    entrypoint: /bin/sh -c "npm install --omit=dev 2>/dev/null && node init.mjs"
    networks:
      - aitoearn-network

  rustfs-init:
    image: minio/mc:latest
    container_name: aitoearn-rustfs-init
    depends_on:
      rustfs:
        condition: service_healthy
    networks:
      - aitoearn-network
    entrypoint: >
      /bin/sh -c "
      mc alias set rustfs http://rustfs.local:9000 rustfsadmin rustfsadmin;
      mc mb rustfs/aitoearn --ignore-existing;
      mc anonymous set download rustfs/aitoearn;
      exit 0;
      "

  aitoearn-ai:
    image: aitoearn/aitoearn-ai:latest
    pull_policy: always
    container_name: aitoearn-ai
    restart: unless-stopped
    depends_on:
      mongodb:
        condition: service_healthy
      redis:
        condition: service_healthy
    volumes:
      - ./project/aitoearn-backend/apps/aitoearn-ai/config/config.js:/app/config.js:ro
    networks:
      - aitoearn-network
    environment:
      NODE_ENV: production
      APP_ENV: production
      APP_NAME: aitoearn-ai

      MONGODB_HOST: mongodb
      MONGODB_PORT: 27017
      MONGODB_USERNAME: admin
      MONGODB_PASSWORD: password

      REDIS_HOST: redis
      REDIS_PORT: 6379
      REDIS_PASSWORD: password

      JWT_SECRET: change-this-jwt-secret
      INTERNAL_TOKEN: change-this-secret-token

      SERVER_URL: http://aitoearn-server:3002

      ASSETS_CONFIG: '{"provider":"s3","region":"us-east-1","bucketName":"aitoearn","endpoint":"http://rustfs.local:9000","publicEndpoint":"http://127.0.0.1:9000","cdnEndpoint":"http://127.0.0.1:8080/oss","accessKeyId":"rustfsadmin","secretAccessKey":"rustfsadmin","forcePathStyle":true}'

      # AI Services
      OPENAI_API_KEY: sk-placeholder
      OPENAI_BASE_URL: https://api.openai.com/v1
      ANTHROPIC_API_KEY: sk-placeholder
      ANTHROPIC_BASE_URL: https://api.anthropic.com
      VOLCENGINE_API_KEY: ""
      VOLCENGINE_ACCESS_KEY_ID: ""
      VOLCENGINE_SECRET_ACCESS_KEY: ""
      VOLCENGINE_VOD_SPACE_NAME: ""
      GROK_API_KEY: ""
      GEMINI_API_KEY: ""
      GEMINI_BASE_URL: ""
      GEMINI_KEY_PAIRS: '[]'
      GEMINI_LOCATION: us-central1
    healthcheck:
      test: ["CMD", "node", "-e", "require('http').get('http://localhost:3010/health', (r) => { process.exit(r.statusCode === 200 ? 0 : 1) })"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 60s

  aitoearn-server:
    image: aitoearn/aitoearn-server:latest
    pull_policy: always
    container_name: aitoearn-server
    restart: unless-stopped
    depends_on:
      mongodb:
        condition: service_healthy
      redis:
        condition: service_healthy
      aitoearn-ai:
        condition: service_healthy
    volumes:
      - ./project/aitoearn-backend/apps/aitoearn-server/config/config.js:/app/config.js:ro
    networks:
      - aitoearn-network
    environment:
      NODE_ENV: production
      APP_ENV: production
      APP_NAME: aitoearn-server
      APP_DOMAIN: localhost

      MONGODB_HOST: mongodb
      MONGODB_PORT: 27017
      MONGODB_USERNAME: admin
      MONGODB_PASSWORD: password

      REDIS_HOST: redis
      REDIS_PORT: 6379
      REDIS_PASSWORD: password

      AI_URL: http://aitoearn-ai:3010

      JWT_SECRET: change-this-jwt-secret
      INTERNAL_TOKEN: change-this-secret-token

      ASSETS_CONFIG: '{"provider":"s3","region":"us-east-1","bucketName":"aitoearn","endpoint":"http://rustfs.local:9000","publicEndpoint":"http://127.0.0.1:9000","cdnEndpoint":"http://127.0.0.1:8080/oss","accessKeyId":"rustfsadmin","secretAccessKey":"rustfsadmin","forcePathStyle":true}'

      MAIL_USER: ""
      MAIL_PASS: ""

      # Third-party OAuth
      BILIBILI_CLIENT_ID: ""
      BILIBILI_CLIENT_SECRET: ""
      GOOGLE_CLIENT_ID: ""
      GOOGLE_CLIENT_SECRET: ""
      KWAI_CLIENT_ID: ""
      KWAI_CLIENT_SECRET: ""
      PINTEREST_CLIENT_ID: ""
      PINTEREST_CLIENT_SECRET: ""
      TIKTOK_CLIENT_ID: ""
      TIKTOK_CLIENT_SECRET: ""
      TWITTER_CLIENT_ID: ""
      TWITTER_CLIENT_SECRET: ""
      FACEBOOK_CLIENT_ID: ""
      FACEBOOK_CLIENT_SECRET: ""
      FACEBOOK_CONFIG_ID: ""
      THREADS_CLIENT_ID: ""
      THREADS_CLIENT_SECRET: ""
      INSTAGRAM_CLIENT_ID: ""
      INSTAGRAM_CLIENT_SECRET: ""
      LINKEDIN_CLIENT_ID: ""
      LINKEDIN_CLIENT_SECRET: ""
      YOUTUBE_CLIENT_ID: ""
      YOUTUBE_CLIENT_SECRET: ""
      WXPLAT_APP_ID: ""
      WXPLAT_APP_SECRET: ""
      WXPLAT_ENCODING_AES_KEY: ""
      DOYIN_CLIENT_ID: ""
      DOYIN_CLIENT_SECRET: ""

      # Aliyun SMS
      ALI_SMS_ACCESS_KEY_ID: ""
      ALI_SMS_ACCESS_KEY_SECRET: ""
      ALI_SMS_SIGN_NAME: ""
      ALI_SMS_TEMPLATE_CODE: ""

      # Relay (optional)
      RELAY_SERVER_URL: https://aitoearn.ai/api
      RELAY_API_KEY: ""
      RELAY_CALLBACK_URL: http://127.0.0.1:8080/api/plat/relay-callback
    healthcheck:
      test: ["CMD", "node", "-e", "require('http').get('http://localhost:3002/health', (r) => { process.exit(r.statusCode === 200 ? 0 : 1) })"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 60s

  aitoearn-web:
    image: aitoearn/aitoearn-web:latest
    pull_policy: always
    container_name: aitoearn-web
    restart: unless-stopped
    depends_on:
      aitoearn-server:
        condition: service_healthy
    volumes:
      - init-data:/data/init:ro
    networks:
      - aitoearn-network
    command: ["/bin/sh", "-c", "AUTO_LOGIN_TOKEN=$$(cat /data/init/token.txt 2>/dev/null || echo '') exec node server.js"]
    environment:
      NODE_ENV: production
      NEXT_TELEMETRY_DISABLED: 1

  nginx:
    image: nginx:alpine
    container_name: aitoearn-nginx
    restart: unless-stopped
    depends_on:
      aitoearn-web:
        condition: service_started
      aitoearn-server:
        condition: service_healthy
      aitoearn-ai:
        condition: service_healthy
    ports:
      - "8080:80"
      - "9000:9000"
    volumes:
      - ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro
    networks:
      - aitoearn-network
    healthcheck:
      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://127.0.0.1/_nhealth"]
      interval: 10s
      timeout: 5s
      retries: 3
      start_period: 10s

networks:
  aitoearn-network:
    driver: bridge
    name: aitoearn-network

volumes:
  mongodb-data:
    driver: local
  mongodb-config:
    driver: local
  redis-data:
    driver: local
  rustfs-data:
    driver: local
  init-data:
    driver: local