docker-compose.yml

version: '3.8'
services:
  bilara-backend:
    depends_on:
      nginx:
        condition: service_healthy
      elasticsearch:
        condition: service_healthy
      worker_pr:
        condition: service_started
      worker_commit:
        condition: service_started
      worker_sync:
        condition: service_started
      db:
        condition: service_healthy
      redis:
        condition: service_started
    build:
      context: ./backend
      dockerfile: backend.dockerfile
    container_name: bilara-backend
    volumes:
      - ./backend:/app
      - certs:/app/certs
    env_file:
      - .env
    restart: always

  setup:
    image: docker.elastic.co/elasticsearch/elasticsearch:${STACK_VERSION}
    container_name: elasticsearch_setup
    volumes:
      - certs:/usr/share/elasticsearch/config/certs
      - ./scripts/elasticsearch_setup.sh:/scripts/elasticsearch_setup.sh
    user: "0"
    entrypoint: ["/bin/bash", "/scripts/elasticsearch_setup.sh"]
    healthcheck:
      test: [ "CMD-SHELL", "[ -f config/certs/elasticsearch/elasticsearch.crt ]" ]
      interval: 1s
      timeout: 5s
      retries: 120
    env_file:
      - .env

  elasticsearch:
    depends_on:
      setup:
        condition: service_healthy
    image: docker.elastic.co/elasticsearch/elasticsearch:${STACK_VERSION}
    container_name: elasticsearch
    volumes:
      - certs:/usr/share/elasticsearch/config/certs
      - elasticsearch_data:/usr/share/elasticsearch/data
    ports:
      - ${ES_REQUESTS_PORT}:${ES_REQUESTS_PORT}
    environment:
      - discovery.type=single-node
      - ES_JAVA_OPTS=-Xms1g -Xmx1g
      - node.name=elasticsearch
      - cluster.name=${CLUSTER_NAME}
      - ELASTIC_PASSWORD=${ELASTIC_PASSWORD}
      - xpack.security.enabled=true
      - xpack.security.http.ssl.enabled=true
      - xpack.security.http.ssl.key=certs/elasticsearch/elasticsearch.key
      - xpack.security.http.ssl.certificate=certs/elasticsearch/elasticsearch.crt
      - xpack.security.http.ssl.certificate_authorities=certs/ca/ca.crt
      - xpack.security.transport.ssl.enabled=true
      - xpack.security.transport.ssl.key=certs/elasticsearch/elasticsearch.key
      - xpack.security.transport.ssl.certificate=certs/elasticsearch/elasticsearch.crt
      - xpack.security.transport.ssl.certificate_authorities=certs/ca/ca.crt
      - xpack.security.transport.ssl.verification_mode=certificate
      - xpack.license.self_generated.type=${LICENSE}
    healthcheck:
      test:
        [
          "CMD-SHELL",
          "curl -s --cacert config/certs/ca/ca.crt https://localhost:${ES_REQUESTS_PORT} | grep -q 'missing authentication credentials'",
        ]
      interval: 10s
      timeout: 10s
      retries: 10
    env_file:
      - .env
    restart: always

  kibana:
    depends_on:
      elasticsearch:
        condition: service_healthy
    image: docker.elastic.co/kibana/kibana:${STACK_VERSION}
    container_name: kibana
    ports:
      - ${KIBANA_PORT}:${KIBANA_PORT}
    volumes:
      - certs:/usr/share/kibana/config/certs
      - kibana_data:/usr/share/kibana/data
    environment:
      - SERVERNAME=kibana
      - ELASTICSEARCH_HOSTS=${ES_URL}:${ES_REQUESTS_PORT}
      - ELASTICSEARCH_USERNAME=kibana_system
      - ELASTICSEARCH_PASSWORD=${KIBANA_PASSWORD}
      - ELASTICSEARCH_SSL_CERTIFICATEAUTHORITIES=config/certs/ca/ca.crt
    healthcheck:
      test:
        [
          "CMD-SHELL",
          "curl -s -I http://localhost:${KIBANA_PORT} | grep -q 'HTTP/1.1 302 Found'",
        ]
      interval: 10s
      timeout: 10s
      retries: 120
    env_file:
      - .env

  db:
    image: bitnami/postgresql:15.3.0
    volumes:
      - postgres_data:/var/lib/postgresql/data/
    ports:
      - ${POSTGRESQL_PORT}:${POSTGRESQL_PORT}
    restart: always
    environment:
      - POSTGRESQL_DATABASE
      - POSTGRESQL_USERNAME
      - POSTGRESQL_PASSWORD
      - POSTGRESQL_POSTGRES_PASSWORD
    healthcheck:
      test: [ "CMD-SHELL", "pg_isready -d ${POSTGRESQL_DATABASE} -U ${POSTGRESQL_USERNAME} | grep -q 'accepting connections'"]
      interval: 10s
      timeout: 5s
      retries: 5


  redis:
    image: "bitnami/redis:7.0.12"
    container_name: redis
    environment:
        - REDIS_PASSWORD=${REDIS_PASSWORD}
    ports:
        - ${REDIS_PORT}:${REDIS_PORT}
    restart: always

  worker_pr:
    depends_on:
      redis:
        condition: service_started
      elasticsearch:
        condition: service_healthy
    build:
      context: ./backend
      dockerfile: backend.dockerfile
    container_name: worker_pr
    volumes:
      - ./backend:/app
    command: "celery -A app.celery:celery_app worker -Q pr_queue -c 1 --loglevel=info"
    env_file:
        - .env
    restart: always

  worker_commit:
    depends_on:
      redis:
        condition: service_started
      elasticsearch:
        condition: service_healthy
    build:
      context: ./backend
      dockerfile: backend.dockerfile
    container_name: worker_commit
    volumes:
      - ./backend:/app
    command: "celery -A app.celery:celery_app worker -Q commit_queue -c 1 --loglevel=info"
    env_file:
        - .env
    restart: always

  worker_sync:
    depends_on:
      redis:
        condition: service_started
      elasticsearch:
        condition: service_healthy
    build:
      context: ./backend
      dockerfile: backend.dockerfile
    container_name: worker_sync
    volumes:
      - ./backend:/app
    command: "celery -A app.celery:celery_app worker -Q sync_queue -c 1 --loglevel=info"
    env_file:
      - .env
    restart: always


  nginx:
    image: bitnami/nginx
    container_name: nginx
    volumes:
      - ./bilara_server_block.conf:/opt/bitnami/nginx/conf/server_blocks/bilara_server_block.conf:ro
      - ./logs/nginx/:/var/logs/nginx
      - ./frontend:/var/www/html
      - certs:/certs
      - ./scripts/generate_nginx_certs.sh:/scripts/generate_nginx_certs.sh
    ports:
      - 9080:80
      - ${DOCKER_BACKEND_PORT}:443
    entrypoint: ["/bin/bash", "/scripts/generate_nginx_certs.sh"]
    healthcheck:
      test: ["CMD-SHELL", "test -f /certs/key.pem && test -f /certs/cert.pem"]
      interval: 1s
      timeout: 5s
      retries: 60
    restart: unless-stopped

volumes:
  certs:
    driver: local
  elasticsearch_data:
    driver: local
  kibana_data:
    driver: local
  postgres_data:
    driver: local