R2D2-Holocron/docker-compose.yml

---
# Unified docker-compose for R2D2-Holocron.
#
# Profiles:
#   local  → full stack in containers (frontend served by Node from image)
#   dev    → backing services only; run frontend on host with `npm run start:dev`
#            (proxy is configured to forward to host.docker.internal)
#   demo   → adds test-publisher streaming synthetic MQTT assets
#
# Production deploys to Kubernetes (not this file). The env contract below
# (MQTT_TOPIC_PREFIX, MAPTILER_KEY, KEYCLOAK_*, etc.) is the same contract the
# K8s manifests will inject via ConfigMap/Secret. Keep it stable.
#
# Usage:
#   make up                                  # local + demo (default)
#   make up-dev                              # dev   + demo
#   docker compose --profile local up -d     # local only (no test publisher)
#   docker compose --profile dev   up -d     # dev only
#
# Endpoints (local profile):
#   - Proxy:     http://localhost:${PROXY_PORT:-7070}
#   - Health:    http://localhost:${PROXY_PORT:-7070}/health
#   - Keycloak:  http://localhost:${PROXY_PORT:-7070}/auth
#   - Frontend:  http://localhost:${FRONTEND_PORT:-3002}
#   - WebSocket: ws://localhost:${WS_PORT:-9002}
#   - MQTT:      tcp://localhost:${MQTT_PORT:-1885}

services:
  holocron-keycloak-postgresql:
    profiles: [local, dev]
    image: postgres:15-alpine
    container_name: holocron-keycloak-postgresql-local
    restart: unless-stopped
    volumes:
      - keycloak_postgres_data:/var/lib/postgresql/data
    environment:
      POSTGRES_DB: ${KEYCLOAK_DB_NAME:-keycloak_db}
      POSTGRES_USER: ${KEYCLOAK_DB_USER:-keycloakuser}
      POSTGRES_PASSWORD: ${KEYCLOAK_DB_PASSWORD:-keycloakuser}
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${KEYCLOAK_DB_USER:-keycloakuser} -d ${KEYCLOAK_DB_NAME:-keycloak_db}"]
      interval: 15s
      timeout: 15s
      retries: 5

  holocron-keycloak:
    profiles: [local, dev]
    build:
      context: ./holocron-keycloak
      dockerfile: Dockerfile.local.public
    image: holocron-keycloak:local
    container_name: holocron-keycloak-local
    restart: unless-stopped
    command:
      [
        "-Dkeycloak.migration.action=import",
        "-Dkeycloak.migration.provider=dir",
        "-Dkeycloak.migration.dir=/opt/keycloak/data/import",
        "-Dkeycloak.migration.strategy=IGNORE_EXISTING"
      ]
    environment:
      KC_DB_URL: jdbc:postgresql://holocron-keycloak-postgresql-local/${KEYCLOAK_DB_NAME:-keycloak_db}
      KC_DB_USERNAME: ${KEYCLOAK_DB_USER:-keycloakuser}
      KC_DB_PASSWORD: ${KEYCLOAK_DB_PASSWORD:-keycloakuser}
      KEYCLOAK_ADMIN: ${KEYCLOAK_ADMIN:-adminkeycloak}
      KEYCLOAK_ADMIN_PASSWORD: ${KEYCLOAK_ADMIN_PASSWORD:-adminkeycloak}
      KC_HTTP_PORT: 8090
    depends_on:
      holocron-keycloak-postgresql:
        condition: service_healthy

  holocron-proxy:
    profiles: [local]
    build:
      context: ./holocron-proxy
      dockerfile: Dockerfile.local.public
    image: holocron-proxy:local
    container_name: holocron-proxy-local
    restart: unless-stopped
    ports:
      - "${PROXY_PORT:-7070}:7070"
    depends_on:
      - holocron-keycloak

  holocron-proxy-dev:
    profiles: [dev]
    build:
      context: ./holocron-proxy
      dockerfile: Dockerfile.local.public
    image: holocron-proxy:local
    container_name: holocron-proxy-local
    restart: unless-stopped
    ports:
      - "${PROXY_PORT:-7070}:7070"
    volumes:
      - ./holocron-proxy/nginx/local-dev.conf:/etc/nginx/conf.d/default.conf
    extra_hosts:
      - "host.docker.internal:host-gateway"
    depends_on:
      - holocron-keycloak

  mosquitto:
    profiles: [local, dev]
    image: eclipse-mosquitto:2
    container_name: holocron-mosquitto-local
    restart: unless-stopped
    ports:
      - "${MQTT_PORT:-1885}:1883"
      - "${MQTT_WS_PORT:-9001}:9001"
    volumes:
      - ./mosquitto/config:/mosquitto/config
      - mosquitto_data:/mosquitto/data
      - mosquitto_log:/mosquitto/log

  holocron-frontend:
    profiles: [local]
    build:
      context: ./holocron-frontend
      dockerfile: Dockerfile.local
    image: holocron-frontend:local
    container_name: holocron-frontend-local
    restart: unless-stopped
    env_file:
      - .env
    ports:
      - "${FRONTEND_PORT:-3002}:3001"
      - "${WS_PORT:-9002}:9002"
    environment:
      - NODE_ENV=production
      - PORT=3001
      - WS_PORT=9002
      - MQTT_BROKER=mqtt://mosquitto:1883
      - MQTT_TOPIC_PREFIX=${MQTT_TOPIC_PREFIX:-r2d2/holocron}
      - MAPTILER_KEY=${MAPTILER_KEY:-}
    depends_on:
      - mosquitto

  # Synthetic asset publisher (UAVs, ships, helos, tanks moving across Europe).
  # Useful for both `local` and `dev` profiles when no real MQTT feed is wired up.
  test-publisher:
    profiles: [demo]
    image: node:20-alpine
    container_name: holocron-test-publisher-local
    working_dir: /app
    volumes:
      - ./holocron-cesium/test-publisher:/app
    command: sh -c "npm install && node publisher.js"
    environment:
      MQTT_BROKER: mqtt://mosquitto:1883
      MQTT_TOPIC_PREFIX: ${MQTT_TOPIC_PREFIX:-r2d2/holocron}
    depends_on:
      - mosquitto
    restart: unless-stopped

volumes:
  keycloak_postgres_data:
  mosquitto_data:
  mosquitto_log: