docker-compose.yaml

services:
  api:
    build:
      context: services/api
      dockerfile: Dockerfile
    ports:
      - "8080:8000"
    environment:
      - GITHUB_APP_ID=${GITHUB_APP_ID}
      - GITHUB_APP_PRIVATE_KEY=${GITHUB_APP_PRIVATE_KEY}
      - GITHUB_WEBHOOK_SECRET=${GITHUB_WEBHOOK_SECRET}
      - REDIS_HOST=redis
    networks:
    - github-app-network

  # docker compose -f docker-compose.yaml up -d --build worker-1
  worker-blackduck:
    build:
      context: services/workers/blackduck
      dockerfile: Dockerfile
    container_name: worker-1
    restart: always
    ports:
      - "8090:8000"
    environment:
      - PYTHONUNBUFFERED=1
      - STREAM_NAME=worker-blackduck
      - REDIS_HOST=redis
      - APP_NAME=blackduck-worker
      - TEST_MODE=true  # Use public repos for testing
      - DEBUG_OUTPUT=true  # Print PR comments to terminal
    networks:
    - github-app-network

  # docker compose -f docker-compose.yaml up -d --build worker-kics
  worker-kics:
    build:
      context: services/workers/kicks
      dockerfile: Dockerfile
    container_name: worker-kics
    restart: always
    ports:
      - "8091:8000"
    environment:
      - PYTHONUNBUFFERED=1
      - STREAM_NAME=worker-kics
      - REDIS_HOST=redis
      - APP_NAME=kics-worker
      - TEST_MODE=true  # Use public repos for testing
      - DEBUG_OUTPUT=true  # Print PR comments to terminal
    networks:
    - github-app-network

  smee:
    image: "nodejs-smee:latest"
    container_name: smee
    environment:
      - SMEE_URL=${SMEE_URL}
      - SMEE_TARGET=${SMEE_TARGET}
      - WEBHOOK_PROXY_URL=${SMEE_URL}
    networks:
    - github-app-network

  # http://localhost:6379/
  redis:
    image: "redis:8"
    container_name: redis
    ports:
      - "6379:6379"
    restart: unless-stopped
    networks:
      - github-app-network
    # We’ve enabled persistence in Redis by using the append-only file (AOF) feature.
    command: redis-server --appendonly yes
    # volumes:
    #   - redis-data:/data

  # localhost:5540 for RedisInsight UI
  # docker compose up -d redis-insight --force-recreate
  redis-insight:
    image: redis/redisinsight:latest
    container_name: redis-insight
    restart: always
    ports:
      - "5540:5540"
    networks:
      - github-app-network
    environment:
      - REDISINSIGHT_HOST=0.0.0.0
      - RI_APP_EULA_ACCEPTED=true
      - RI_REDIS_HOST=redis
      - RI_REDIS_PORT=6379
      - RI_REDIS_ALIAS=local-redis

  # http://localhost:7474/
  neo4j:
    image: "neo4j:2025.11"
    container_name: neo4j
    restart: unless-stopped
    # The ports that will be accessible from outside the container - HTTP (7474) and Bolt (7687).
    ports:
      - "7474:7474"  # HTTP
      - "7687:7687"  # Bolt
    networks:
      - github-app-network
    volumes:
      - ./infra/neo4j:/opt/neo4j-custom:ro
    environment:
      # Authentication
      # - NEO4J_AUTH=neo4j/naglfar123
      # Memory Configuration
      - NEO4J_ACCEPT_LICENSE_AGREEMENT=yes
      - NEO4J_server_memory_pagecache_size=512M
      - NEO4J_server_memory_heap_initial__size=512M
      - NEO4J_server_memory_heap_max__size=1G
      # Database Configuration
      - NEO4J_db_tx__log_rotation_retention__policy=100M size
      # APOC Configuration (Advanced Procedures)
      - NEO4J_dbms_security_procedures_unrestricted=apoc.*
      - NEO4J_dbms_security_procedures_allowlist=apoc.*
      # Disable authentication for development purposes
      - NEO4J_dbms_security_auth__enabled=false

networks:
  github-app-network:
    driver: bridge