docker-compose.yml

# VC Stack - Local Development Docker Compose
#
# IMPORTANT: Copy .env.example to .env and set secure credentials before use.
#
# Usage:
#   cp .env.example .env && vim .env    # Set DB_PASS, JWT_SECRET, etc.
#   docker compose up -d                # Start ALL services
#   docker compose down -v              # Stop and remove volumes

services:
  # ---- PostgreSQL ----
  postgres:
    image: postgres:15-alpine
    platform: linux/arm64
    container_name: vc-stack-postgres
    environment:
      POSTGRES_DB: ${DB_NAME:-vcstack}
      POSTGRES_USER: ${DB_USER:-vcstack}
      POSTGRES_PASSWORD: ${DB_PASS:-vcstack-dev-password}
      POSTGRES_INITDB_ARGS: "--encoding=UTF8 --locale=C"
    volumes:
      - postgres_data:/var/lib/postgresql
    healthcheck:
      test: [ "CMD-SHELL", "pg_isready -U vcstack -d vcstack" ]
      interval: 10s
      timeout: 5s
      retries: 5
    restart: unless-stopped
    networks:
      - vc-stack

  # ---- vc-management ----
  vc-management:
    build:
      context: .
      target: vc-management
      platforms:
        - linux/arm64
    platform: linux/arm64
    container_name: vc-stack-management
    depends_on:
      postgres:
        condition: service_healthy
    environment:
      DB_HOST: postgres
      DB_NAME: ${DB_NAME:-vcstack}
      DB_USER: ${DB_USER:-vcstack}
      DB_PASS: ${DB_PASS:-vcstack-dev-password}
      JWT_SECRET: ${JWT_SECRET:-dev-secret-do-not-use-in-production}
      VC_MANAGEMENT_PORT: "8080"
      ADMIN_DEFAULT_PASSWORD: ${ADMIN_DEFAULT_PASSWORD:-ChangeMe123!}
      LOGGING_LEVEL: ${LOGGING_LEVEL:-debug}
      LOGGING_FORMAT: ${LOGGING_FORMAT:-text}
      # SDN / OVN configuration
      OVN_NB_ADDRESS: "tcp:ovn-central:6641"
      VC_BRIDGE_MAPPINGS: "provider:br-provider,external:br-ex"
      # InfluxDB (metrics collector backend)
      INFLUXDB_URL: ${INFLUXDB_URL:-http://influxdb:8086}
      INFLUXDB_TOKEN: ${INFLUXDB_TOKEN:-vc-stack-monitoring-token-dev}
      INFLUXDB_ORG: ${INFLUXDB_ORG:-vc-stack}
      INFLUXDB_BUCKET: ${INFLUXDB_BUCKET:-monitoring}
    networks:
      - vc-stack
    volumes:
      - vcstack_images:/tmp/vcstack/images
    restart: unless-stopped

  # ---- Nginx reverse proxy ----
  nginx:
    image: nginx:1.27-alpine
    platform: linux/arm64
    container_name: vc-stack-nginx
    depends_on:
      - vc-management
    ports:
      - "80:80"
    volumes:
      - ./configs/nginx/vc-stack.conf:/etc/nginx/conf.d/default.conf:ro
    networks:
      - vc-stack
    restart: unless-stopped

  # ---- OVN Central (NB + SB databases) ----
  ovn-central:
    image: debian:bookworm-slim
    platform: linux/arm64
    container_name: vc-stack-ovn-central

    command: >
      bash -c "
        apt-get update -qq && apt-get install -y -qq ovn-central > /dev/null 2>&1 &&
        mkdir -p /var/run/ovn /var/lib/ovn /var/log/ovn &&
        /usr/share/ovn/scripts/ovn-ctl start_northd &&
        ovn-nbctl set-connection ptcp:6641:0.0.0.0 &&
        ovn-sbctl set-connection ptcp:6642:0.0.0.0 &&
        echo '[ovn-central] OVN NB/SB databases listening on tcp:6641/6642' &&
        tail -f /var/log/ovn/ovn-northd.log
      "
    healthcheck:
      test: [ "CMD-SHELL", "ovn-nbctl --timeout=3 show > /dev/null 2>&1 || exit 1" ]
      interval: 10s
      timeout: 5s
      start_period: 30s
      retries: 5
    networks:
      - vc-stack
    restart: unless-stopped

  # ---- vc-compute (auto-detects KVM or uses QEMU TCG) ----
  vc-compute:
    build:
      context: .
      target: vc-compute
      platforms:
        - linux/arm64
    platform: linux/arm64
    container_name: vc-stack-compute

    depends_on:
      postgres:
        condition: service_healthy
      ovn-central:
        condition: service_healthy
    environment:
      DB_HOST: postgres
      DB_NAME: ${DB_NAME:-vcstack}
      DB_USER: ${DB_USER:-vcstack}
      DB_PASS: ${DB_PASS:-vcstack-dev-password}
      VC_COMPUTE_PORT: "8081"
      NODE_NAME: dev-compute-1
      CONTROLLER_URL: http://vc-management:8080
      IMAGES_BACKEND: local
      IMAGES_LOCAL_PATH: /var/lib/vcstack/images
      VOLUMES_BACKEND: local
      VOLUMES_LOCAL_PATH: /var/lib/vcstack/volumes
      # OVN networking
      NETWORK_OVN_SB_ADDRESS: "tcp:ovn-central:6642"
      OVN_NB_ADDRESS: "tcp:ovn-central:6641"
      NETWORK_ENCAP_TYPE: geneve
      VC_BRIDGE_MAPPINGS: "provider:br-provider"
      LOGGING_LEVEL: debug
      LOGGING_FORMAT: text
      VC_METADATA_PORT: "8082"
    privileged: true
    volumes:
      - vcstack_images:/tmp/vcstack/images
      - vcstack_vm_config:/etc/vc-compute/vms
      - vcstack_vm_run:/var/run/vc-compute
      - vcstack_volumes:/var/lib/vcstack/volumes
    networks:
      - vc-stack
    restart: unless-stopped

  # ===========================================================================
  #  Monitoring Stack
  # ===========================================================================

  # ---- Prometheus ----
  prometheus:
    image: prom/prometheus:v2.53.0
    platform: linux/arm64
    container_name: vc-stack-prometheus

    depends_on:
      - vc-management
    ports:
      - "9091:9090"
    command:
      - '--config.file=/etc/prometheus/prometheus.yml'
      - '--storage.tsdb.path=/prometheus'
      - '--storage.tsdb.retention.time=15d'
      - '--web.console.libraries=/usr/share/prometheus/console_libraries'
      - '--web.console.templates=/usr/share/prometheus/consoles'
      - '--web.enable-lifecycle'
    volumes:
      - ./monitoring/prometheus/prometheus.yml:/etc/prometheus/prometheus.yml:ro
      - ./monitoring/prometheus/rules:/etc/prometheus/rules:ro
      - prometheus_data:/prometheus
    networks:
      - vc-stack
    restart: unless-stopped

  # ---- Grafana ----
  grafana:
    image: grafana/grafana:11.1.0
    platform: linux/arm64
    container_name: vc-stack-grafana

    depends_on:
      - prometheus
    ports:
      - "3001:3000"
    environment:
      GF_SECURITY_ADMIN_USER: ${GF_ADMIN_USER:-admin}
      GF_SECURITY_ADMIN_PASSWORD: ${GF_ADMIN_PASSWORD:?Set GF_ADMIN_PASSWORD in .env}
      GF_DASHBOARDS_DEFAULT_HOME_DASHBOARD_PATH: /var/lib/grafana/dashboards/cluster-overview.json
      GF_INSTALL_PLUGINS: ""
    volumes:
      - grafana_data:/var/lib/grafana
      - ./monitoring/grafana/provisioning:/etc/grafana/provisioning:ro
      - ./monitoring/grafana/dashboards:/var/lib/grafana/dashboards:ro
    networks:
      - vc-stack
    restart: unless-stopped

  # ---- InfluxDB (time-series metrics backend) ----
  influxdb:
    image: influxdb:2.7
    platform: linux/arm64
    container_name: vc-stack-influxdb

    ports:
      - "8086:8086"
    environment:
      DOCKER_INFLUXDB_INIT_MODE: setup
      DOCKER_INFLUXDB_INIT_USERNAME: ${INFLUXDB_ADMIN_USER:-admin}
      DOCKER_INFLUXDB_INIT_PASSWORD: ${INFLUXDB_ADMIN_PASSWORD:?Set INFLUXDB_ADMIN_PASSWORD in .env}
      DOCKER_INFLUXDB_INIT_ORG: ${INFLUXDB_ORG:-vc-stack}
      DOCKER_INFLUXDB_INIT_BUCKET: ${INFLUXDB_BUCKET:-monitoring}
      DOCKER_INFLUXDB_INIT_RETENTION: 30d
      DOCKER_INFLUXDB_INIT_ADMIN_TOKEN: ${INFLUXDB_TOKEN:-vc-stack-monitoring-token-dev}
    volumes:
      - influxdb_data:/var/lib/influxdb2
      - influxdb_config:/etc/influxdb2
    healthcheck:
      test: [ "CMD", "influx", "ping" ]
      interval: 10s
      timeout: 5s
      start_period: 15s
      retries: 5
    networks:
      - vc-stack
    restart: unless-stopped

  # ---- Alertmanager ----
  alertmanager:
    image: prom/alertmanager:v0.27.0
    platform: linux/arm64
    container_name: vc-stack-alertmanager

    ports:
      - "9093:9093"
    command:
      - '--config.file=/etc/alertmanager/alertmanager.yml'
      - '--storage.path=/alertmanager'
    volumes:
      - ./configs/alertmanager:/etc/alertmanager:ro
    networks:
      - vc-stack
    restart: unless-stopped

  # ---- PostgreSQL Exporter ----
  postgres-exporter:
    image: prometheuscommunity/postgres-exporter:v0.16.0
    platform: linux/arm64
    container_name: vc-stack-postgres-exporter

    depends_on:
      postgres:
        condition: service_healthy
    environment:
      DATA_SOURCE_NAME: "postgresql://${DB_USER:-vcstack}:${DB_PASS:-vcstack-dev-password}@postgres:5432/${DB_NAME:-vcstack}?sslmode=disable"
    ports:
      - "9187:9187"
    networks:
      - vc-stack
    restart: unless-stopped

  # ---- Node Exporter (host-level metrics) ----
  node-exporter:
    image: prom/node-exporter:v1.8.0
    platform: linux/arm64
    container_name: vc-stack-node-exporter

    ports:
      - "9100:9100"
    command:
      - '--path.rootfs=/host'
      - '--collector.filesystem.mount-points-exclude=^/(sys|proc|dev|host|etc)($$|/)'
    volumes:
      - /:/host:ro,rslave
    pid: host
    networks:
      - vc-stack
    restart: unless-stopped

volumes:
  postgres_data:
    driver: local
  vcstack_images:
    driver: local
  vcstack_vm_config:
    driver: local
  vcstack_vm_run:
    driver: local
  vcstack_volumes:
    driver: local
  prometheus_data:
    driver: local
  grafana_data:
    driver: local
  influxdb_data:
    driver: local
  influxdb_config:
    driver: local

networks:
  vc-stack:
    driver: bridge