docker-compose.yaml

---
networks:
  infra:
    external: true
    name: infra
x-backup-common-env: &backup-common-env
  TZ: ${TZ}
  AWS_ENDPOINT: ${AWS_ENDPOINT}
  AWS_ENDPOINT_PROTO: ${AWS_ENDPOINT_PROTO}
  AWS_S3_BUCKET_NAME: ${AWS_S3_BUCKET_NAME}
  AWS_ACCESS_KEY_ID: ${AWS_ACCESS_KEY_ID}
  AWS_SECRET_ACCESS_KEY: ${AWS_SECRET_ACCESS_KEY}
  BACKUP_CRON_EXPRESSION: ${BACKUP_CRON_EXPRESSION}
  BACKUP_RETENTION_DAYS: ${BACKUP_RETENTION_DAYS}
services:
  dickobrazz-server:
    image: ghcr.io/mairwunnx-infra/dickobrazz-server:1.0.8
    container_name: dickobrazz-server
    cpus: '0.25'
    depends_on: [ dickobrazz-redis, dickobrazz-mongo ]
    environment:
      MONGO_URL: ${MONGO_URL}
      REDIS_URL: ${REDIS_URL}
      RANDOMORG_TOKEN: ${RANDOMORG_TOKEN}
      CROSS_SERVER_TOKEN: ${CROSS_SERVER_TOKEN}
      SESSION_SECRET: ${SESSION_SECRET}
      TELEGRAM_BOT_TOKEN: ${BOT_TG_TOKEN}
      TZ: ${TZ}
    healthcheck:
      interval: 30s
      retries: 3
      start_period: 20s
      test: ["CMD", "bun", "-e", "const r = await fetch('http://localhost:3030/health'); if (!r.ok) process.exit(1);"]
      timeout: 10s
    logging:
      driver: local
      options:
        max-file: '3'
        max-size: 10m
    mem_limit: 128m
    mem_reservation: 64m
    networks: [ infra ]
    expose: [ "3030" ]
    restart: unless-stopped
  dickobrazz-bot:
    image: ghcr.io/mairwunnx-infra/dickobrazz-bot:1.34.3-1
    container_name: dickobrazz-bot
    cpus: '0.15'
    depends_on: [ dickobrazz-server ]
    environment:
      CROSS_SERVER_TOKEN: ${CROSS_SERVER_TOKEN}
      BOT_TG_TOKEN: ${BOT_TG_TOKEN}
      TZ: ${TZ}
    healthcheck:
      interval: 30s
      retries: 3
      start_period: 40s
      test: ["CMD", "wget", "--quiet", "--tries=1", "--spider", "http://localhost:8080/health"]
      timeout: 10s
    logging:
      driver: local
      options:
        max-file: '3'
        max-size: 10m
    mem_limit: 64m
    mem_reservation: 32m
    networks: [ infra ]
    restart: unless-stopped
  dickobrazz-mongo:
    command:
      - "--wiredTigerCacheSizeGB"
      - "0.25"
      - "--wiredTigerCollectionBlockCompressor"
      - "zstd"
      - "--wiredTigerIndexPrefixCompression"
      - "true"
      - "--quiet"
    container_name: dickobrazz-mongo
    cpus: '0.5'
    environment:
      MONGO_INITDB_DATABASE: ${MONGO_INITDB_DATABASE}
      MONGO_INITDB_ROOT_PASSWORD: ${MONGO_INITDB_ROOT_PASSWORD}
      MONGO_INITDB_ROOT_USERNAME: ${MONGO_INITDB_ROOT_USERNAME}
      TZ: ${TZ}
    healthcheck:
      interval: 15s
      retries: 12
      start_period: 60s
      test: ["CMD-SHELL", "mongosh --eval 'db.runCommand(\"ping\")' --quiet | grep -q 1"]
      timeout: 5s
    image: mongo:8.2.2
    logging:
      driver: local
      options:
        max-file: '3'
        max-size: 10m
    mem_limit: 384m
    mem_reservation: 192m
    networks: [ infra ]
    expose: [ "27017" ]
    restart: unless-stopped
    volumes:
      - dickobrazz-mongo-data:/data/db
  dickobrazz-redis:
    command: >
      redis-server --port 6379
      --loglevel warning
      --save 20 1
      --requirepass ${REDIS_PASSWORD}
    container_name: dickobrazz-redis
    cpus: '0.5'
    environment:
      REDIS_PASSWORD: ${REDIS_PASSWORD}
      TZ: ${TZ}
    healthcheck:
      interval: 10s
      retries: 3
      start_period: 10s
      test: ["CMD", "sh", "-c", "redis-cli -a ${REDIS_PASSWORD} --no-auth-warning ping"]
      timeout: 5s
    image: redis:8.4-alpine
    logging:
      driver: local
      options:
        max-file: '3'
        max-size: 10m
    mem_limit: 256m
    mem_reservation: 128m
    networks: [ infra ]
    expose: [ "6379" ]
    restart: unless-stopped
    volumes:
      - dickobrazz-redis-data:/data
  dickobrazz-server-test:
    image: ghcr.io/mairwunnx-infra/dickobrazz-server-test:1.0.8
    container_name: dickobrazz-server-test
    cpus: '0.25'
    depends_on: [ dickobrazz-redis-test, dickobrazz-mongo-test ]
    environment:
      TEST_MONGO_URL: ${TEST_MONGO_URL}
      TEST_REDIS_URL: ${TEST_REDIS_URL}
      RANDOMORG_TOKEN: ${RANDOMORG_TOKEN}
      TEST_CROSS_SERVER_TOKEN: ${TEST_CROSS_SERVER_TOKEN}
      TEST_SESSION_SECRET: ${TEST_SESSION_SECRET}
      TELEGRAM_BOT_TOKEN: ${TEST_BOT_TG_TOKEN}
      TZ: ${TZ}
    healthcheck:
      interval: 30s
      retries: 3
      start_period: 20s
      test: ["CMD", "bun", "-e", "const r = await fetch('http://localhost:3030/health'); if (!r.ok) process.exit(1);"]
      timeout: 10s
    logging:
      driver: local
      options:
        max-file: '3'
        max-size: 10m
    mem_limit: 128m
    mem_reservation: 64m
    networks: [ infra ]
    expose: [ "3030" ]
    restart: unless-stopped
  dickobrazz-bot-test:
    image: ghcr.io/mairwunnx-infra/dickobrazz-bot-test:1.34.3-1
    container_name: dickobrazz-bot-test
    cpus: '0.15'
    depends_on: [ dickobrazz-server-test ]
    environment:
      TEST_CROSS_SERVER_TOKEN: ${TEST_CROSS_SERVER_TOKEN}
      TEST_BOT_TG_TOKEN: ${TEST_BOT_TG_TOKEN}
      TZ: ${TZ}
    healthcheck:
      interval: 30s
      retries: 3
      start_period: 40s
      test: ["CMD", "wget", "--quiet", "--tries=1", "--spider", "http://localhost:8080/health"]
      timeout: 10s
    logging:
      driver: local
      options:
        max-file: '3'
        max-size: 10m
    mem_limit: 64m
    mem_reservation: 32m
    networks: [ infra ]
    restart: unless-stopped
  dickobrazz-mongo-test:
    command:
      - "--wiredTigerCacheSizeGB"
      - "0.25"
      - "--wiredTigerCollectionBlockCompressor"
      - "zstd"
      - "--wiredTigerIndexPrefixCompression"
      - "true"
      - "--quiet"
    container_name: dickobrazz-mongo-test
    cpus: '0.5'
    environment:
      MONGO_INITDB_DATABASE: ${MONGO_INITDB_DATABASE}
      MONGO_INITDB_ROOT_PASSWORD: ${TEST_MONGO_INITDB_ROOT_PASSWORD}
      MONGO_INITDB_ROOT_USERNAME: ${TEST_MONGO_INITDB_ROOT_USERNAME}
      TZ: ${TZ}
    healthcheck:
      interval: 15s
      retries: 12
      start_period: 60s
      test: ["CMD-SHELL", "mongosh --eval 'db.runCommand(\"ping\")' --quiet | grep -q 1"]
      timeout: 5s
    image: mongo:8.2.2
    logging:
      driver: local
      options:
        max-file: '3'
        max-size: 10m
    mem_limit: 384m
    mem_reservation: 192m
    networks: [ infra ]
    expose: [ "27017" ]
    restart: unless-stopped
    volumes:
      - dickobrazz-mongo-test-data:/data/db
  dickobrazz-redis-test:
    command: >
      redis-server --port 6379
      --loglevel warning
      --save 20 1
      --requirepass ${TEST_REDIS_PASSWORD}
    container_name: dickobrazz-redis-test
    cpus: '0.5'
    environment:
      REDIS_PASSWORD: ${TEST_REDIS_PASSWORD}
      TZ: ${TZ}
    healthcheck:
      interval: 10s
      retries: 3
      start_period: 10s
      test: ["CMD", "sh", "-c", "redis-cli -a ${TEST_REDIS_PASSWORD} --no-auth-warning ping"]
      timeout: 5s
    image: redis:8.4-alpine
    logging:
      driver: local
      options:
        max-file: '3'
        max-size: 10m
    mem_limit: 256m
    mem_reservation: 128m
    networks: [ infra ]
    expose: [ "6379" ]
    restart: unless-stopped
    volumes:
      - dickobrazz-redis-test-data:/data
  dickobrazz-prometheus:
    command:
      - '--config.file=/etc/prometheus/prometheus.yml'
      - '--storage.tsdb.path=/prometheus'
      - '--web.console.libraries=/usr/share/prometheus/console_libraries'
      - '--web.console.templates=/usr/share/prometheus/consoles'
      - '--web.enable-lifecycle'
    image: ghcr.io/mairwunnx-infra/dickobrazz-prometheus:2.55.1-1
    container_name: dickobrazz-prometheus
    cpus: '0.2'
    depends_on:
      dickobrazz-bot:
        condition: service_healthy
      dickobrazz-server:
        condition: service_healthy
    environment:
      TZ: ${TZ}
    expose: [ "9090" ]
    healthcheck:
      interval: 10s
      retries: 6
      start_period: 10s
      test: ["CMD", "wget", "--quiet", "--tries=1", "--spider", "http://localhost:9090/-/ready"]
      timeout: 5s
    logging:
      driver: local
      options:
        max-file: '3'
        max-size: 10m
    mem_limit: 192m
    mem_reservation: 96m
    networks: [ infra ]
    restart: unless-stopped
    volumes:
      - dickobrazz-prometheus-data:/prometheus
  dickobrazz-grafana:
    image: ghcr.io/mairwunnx-infra/dickobrazz-grafana:11.5.0
    container_name: dickobrazz-grafana
    cpus: '0.2'
    depends_on:
      dickobrazz-prometheus:
        condition: service_healthy
    environment:
      TZ: ${TZ}
      GF_SECURITY_ADMIN_USER: ${GF_SECURITY_ADMIN_USER}
      GF_SECURITY_ADMIN_PASSWORD: ${GF_SECURITY_ADMIN_PASSWORD}
    expose: [ "3000" ]
    healthcheck:
      interval: 10s
      retries: 20
      start_period: 30s
      test: ["CMD", "wget", "--quiet", "--tries=1", "--spider", "http://localhost:3000/api/health"]
      timeout: 5s
    logging:
      driver: local
      options:
        max-file: '3'
        max-size: 10m
    mem_limit: 192m
    mem_reservation: 96m
    networks: [ infra ]
    restart: unless-stopped
    volumes:
      - dickobrazz-grafana-data:/var/lib/grafana
  backup-dickobrazz-mongo:
    image: offen/docker-volume-backup:v2
    container_name: backup-dickobrazz-mongo
    environment:
      <<: *backup-common-env
      AWS_S3_PATH: backups/${STACK_SLUG:-dickobrazz}/mongo
      BACKUP_FILENAME: mongo-%Y%m%dT%H%M%S.tar.gz
      BACKUP_PRUNING_PREFIX: mongo-
    volumes:
      - dickobrazz-mongo-data:/backup/dickobrazz/mongo:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro
    networks: [infra]
    restart: unless-stopped
  backup-dickobrazz-redis:
    image: offen/docker-volume-backup:v2
    container_name: backup-dickobrazz-redis
    environment:
      <<: *backup-common-env
      AWS_S3_PATH: backups/${STACK_SLUG:-dickobrazz}/redis
      BACKUP_FILENAME: redis-%Y%m%dT%H%M%S.tar.gz
      BACKUP_PRUNING_PREFIX: redis-
    volumes:
      - dickobrazz-redis-data:/backup/dickobrazz/redis:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro
    networks: [infra]
    restart: unless-stopped
  backup-dickobrazz-prometheus:
    image: offen/docker-volume-backup:v2
    container_name: backup-dickobrazz-prometheus
    environment:
      <<: *backup-common-env
      AWS_S3_PATH: backups/${STACK_SLUG:-dickobrazz}/prometheus
      BACKUP_FILENAME: prometheus-%Y%m%dT%H%M%S.tar.gz
      BACKUP_PRUNING_PREFIX: prometheus-
    volumes:
      - dickobrazz-prometheus-data:/backup/dickobrazz/prometheus:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro
    networks: [infra]
    restart: unless-stopped
volumes:
  dickobrazz-mongo-data:
    driver: local
  dickobrazz-redis-data:
    driver: local
  dickobrazz-mongo-test-data:
    driver: local
  dickobrazz-redis-test-data:
    driver: local
  dickobrazz-prometheus-data:
    driver: local
  dickobrazz-grafana-data:
    driver: local