docker-compose.yml

services:
  # PostgreSQL - Single instance with multiple databases
  postgres:
    image: postgres:16-alpine
    container_name: erp-postgres
    ports:
      - "5432:5432"
    environment:
      POSTGRES_USER: ${POSTGRES_USER:-postgres}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
      POSTGRES_MULTIPLE_DATABASES: erp_users,erp_inventory,erp_sales,erp_financial,erp_dashboard,erp_orchestration
    volumes:
      - postgres-data:/var/lib/postgresql/data
      - ./infrastructure/docker/postgres-init.sh:/docker-entrypoint-initdb.d/init.sh:ro
    networks:
      - erp-network
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U postgres"]
      interval: 10s
      timeout: 5s
      retries: 5

  # Kafka with KRaft (no Zookeeper)
  kafka:
    image: confluentinc/cp-kafka:7.5.0
    container_name: erp-kafka
    ports:
      - "9092:9092"
      - "9093:9093"
    environment:
      KAFKA_NODE_ID: 1
      KAFKA_PROCESS_ROLES: broker,controller
      KAFKA_LISTENERS: PLAINTEXT://0.0.0.0:9092,CONTROLLER://0.0.0.0:9093,EXTERNAL://0.0.0.0:9094
      KAFKA_ADVERTISED_LISTENERS: PLAINTEXT://kafka:9092,EXTERNAL://localhost:9094
      KAFKA_LISTENER_SECURITY_PROTOCOL_MAP: PLAINTEXT:PLAINTEXT,CONTROLLER:PLAINTEXT,EXTERNAL:PLAINTEXT
      KAFKA_INTER_BROKER_LISTENER_NAME: PLAINTEXT
      KAFKA_CONTROLLER_LISTENER_NAMES: CONTROLLER
      KAFKA_CONTROLLER_QUORUM_VOTERS: 1@kafka:9093
      KAFKA_OFFSETS_TOPIC_REPLICATION_FACTOR: 1
      KAFKA_TRANSACTION_STATE_LOG_REPLICATION_FACTOR: 1
      KAFKA_TRANSACTION_STATE_LOG_MIN_ISR: 1
      KAFKA_LOG_DIRS: /var/lib/kafka/data
      CLUSTER_ID: MkU3OEVBNTcwNTJENDM2Qk
    volumes:
      - kafka-data:/var/lib/kafka/data
    networks:
      - erp-network

  # RabbitMQ - for saga commands (outbox, retry, dead-letter)
  rabbitmq:
    image: rabbitmq:3.13-management-alpine
    container_name: erp-rabbitmq
    ports:
      - "5672:5672"
      - "15672:15672"
    environment:
      RABBITMQ_DEFAULT_USER: ${RABBITMQ_USER:-guest}
      RABBITMQ_DEFAULT_PASS: ${RABBITMQ_PASSWORD:-guest}
    volumes:
      - rabbitmq-data:/var/lib/rabbitmq
    networks:
      - erp-network
    healthcheck:
      test: ["CMD", "rabbitmq-diagnostics", "-q", "ping"]
      interval: 10s
      timeout: 5s
      retries: 5

  # Kafka UI
  kafka-ui:
    image: provectuslabs/kafka-ui:latest
    container_name: erp-kafka-ui
    ports:
      - "9001:8080"
    environment:
      KAFKA_CLUSTERS_0_NAME: local
      KAFKA_CLUSTERS_0_BOOTSTRAPSERVERS: kafka:9092
    depends_on:
      - kafka
    networks:
      - erp-network

  # User Management Service
  user-management:
    build:
      context: ./services/user-management
      dockerfile: Dockerfile
    container_name: erp-user-management
    ports:
      - "5001:8080"
    environment:
      ASPNETCORE_ENVIRONMENT: Production
      PostgreSQL__ConnectionString: Host=postgres;Port=5432;Database=erp_users;Username=${POSTGRES_USER:-postgres};Password=${POSTGRES_PASSWORD}
      Kafka__BootstrapServers: kafka:9092
      Jwt__Secret: ${JWT_SECRET}
      Jwt__Issuer: ${JWT_ISSUER:-erp-system}
      Jwt__Audience: ${JWT_AUDIENCE:-erp-clients}
      Smtp__Host: ${SMTP_HOST}
      Smtp__Port: ${SMTP_PORT}
      Smtp__Username: ${SMTP_USERNAME}
      Smtp__Password: ${SMTP_PASSWORD}
      Smtp__FromEmail: ${SMTP_FROM_EMAIL}
    depends_on:
      postgres:
        condition: service_healthy
      kafka:
        condition: service_started
    networks:
      - erp-network

  # Inventory Service
  inventory:
    build:
      context: ./services/inventory
      dockerfile: Dockerfile
    container_name: erp-inventory
    ports:
      - "5002:8080"
    environment:
      ASPNETCORE_ENVIRONMENT: Production
      PostgreSQL__ConnectionString: Host=postgres;Port=5432;Database=erp_inventory;Username=${POSTGRES_USER:-postgres};Password=${POSTGRES_PASSWORD}
      RabbitMQ__Host: rabbitmq
      Kafka__BootstrapServers: kafka:9092
      Jwt__Secret: ${JWT_SECRET}
      Jwt__Issuer: ${JWT_ISSUER:-erp-system}
      Jwt__Audience: ${JWT_AUDIENCE:-erp-clients}
      Services__Financial: http://financial:8080
      Minio__Endpoint: minio:9000
      Minio__AccessKey: ${MINIO_ROOT_USER:-minioadmin}
      Minio__SecretKey: ${MINIO_ROOT_PASSWORD}
      Minio__UseSSL: "false"
      Minio__PublicEndpoint: ${MINIO_PUBLIC_ENDPOINT:-http://localhost:9002}
    depends_on:
      postgres:
        condition: service_healthy
      rabbitmq:
        condition: service_healthy
      kafka:
        condition: service_started
      financial:
        condition: service_started
      minio:
        condition: service_healthy
    networks:
      - erp-network

  # Sales Service
  sales:
    build:
      context: ./services/sales
      dockerfile: Dockerfile
    container_name: erp-sales
    ports:
      - "5003:8080"
    environment:
      ASPNETCORE_ENVIRONMENT: Production
      PostgreSQL__ConnectionString: Host=postgres;Port=5432;Database=erp_sales;Username=${POSTGRES_USER:-postgres};Password=${POSTGRES_PASSWORD}
      Kafka__BootstrapServers: kafka:9092
      Jwt__Secret: ${JWT_SECRET}
      Jwt__Issuer: ${JWT_ISSUER:-erp-system}
      Jwt__Audience: ${JWT_AUDIENCE:-erp-clients}
    depends_on:
      postgres:
        condition: service_healthy
      kafka:
        condition: service_started
    networks:
      - erp-network

  # Financial Service
  financial:
    build:
      context: ./services/financial
      dockerfile: Dockerfile
    container_name: erp-financial
    ports:
      - "5004:8080"
    environment:
      ASPNETCORE_ENVIRONMENT: Production
      PostgreSQL__ConnectionString: Host=postgres;Port=5432;Database=erp_financial;Username=${POSTGRES_USER:-postgres};Password=${POSTGRES_PASSWORD}
      RabbitMQ__Host: rabbitmq
      Kafka__BootstrapServers: kafka:9092
      Jwt__Secret: ${JWT_SECRET}
      Jwt__Issuer: ${JWT_ISSUER:-erp-system}
      Jwt__Audience: ${JWT_AUDIENCE:-erp-clients}
    depends_on:
      postgres:
        condition: service_healthy
      rabbitmq:
        condition: service_healthy
      kafka:
        condition: service_started
    networks:
      - erp-network

  # Dashboard Service
  dashboard:
    build:
      context: ./services/dashboard
      dockerfile: Dockerfile
    container_name: erp-dashboard
    ports:
      - "5005:8080"
    environment:
      ASPNETCORE_ENVIRONMENT: Production
      PostgreSQL__ConnectionString: Host=postgres;Port=5432;Database=erp_dashboard;Username=${POSTGRES_USER:-postgres};Password=${POSTGRES_PASSWORD}
      Kafka__BootstrapServers: kafka:9092
      Jwt__Secret: ${JWT_SECRET}
      Jwt__Issuer: ${JWT_ISSUER:-erp-system}
      Jwt__Audience: ${JWT_AUDIENCE:-erp-clients}
    depends_on:
      postgres:
        condition: service_healthy
      kafka:
        condition: service_started
    networks:
      - erp-network

  # Orchestration Service (saga coordination)
  orchestration:
    build:
      context: ./services/orchestration
      dockerfile: Dockerfile
    container_name: erp-orchestration
    ports:
      - "5010:8080"
    environment:
      ASPNETCORE_ENVIRONMENT: Production
      PostgreSQL__ConnectionString: Host=postgres;Port=5432;Database=erp_orchestration;Username=${POSTGRES_USER:-postgres};Password=${POSTGRES_PASSWORD}
      RabbitMQ__Host: rabbitmq
      Kafka__BootstrapServers: kafka:9092
      Jwt__Secret: ${JWT_SECRET}
      Jwt__Issuer: ${JWT_ISSUER:-erp-system}
      Jwt__Audience: ${JWT_AUDIENCE:-erp-clients}
    depends_on:
      postgres:
        condition: service_healthy
      rabbitmq:
        condition: service_healthy
      kafka:
        condition: service_started
    networks:
      - erp-network

  # API Gateway
  gateway:
    build:
      context: ./services/gateway
      dockerfile: Dockerfile
    container_name: erp-gateway
    ports:
      - "8080:8080"
    environment:
      ASPNETCORE_ENVIRONMENT: Production
      Jwt__Secret: ${JWT_SECRET}
      Jwt__Issuer: ${JWT_ISSUER:-erp-system}
      Jwt__Audience: ${JWT_AUDIENCE:-erp-clients}
      Services__UserManagement: http://user-management:8080
      Services__Inventory: http://inventory:8080
      Services__Sales: http://sales:8080
      Services__Financial: http://financial:8080
      Services__Dashboard: http://dashboard:8080
      Services__Orchestration: http://orchestration:8080
    depends_on:
      - user-management
      - inventory
      - sales
      - financial
      - dashboard
      - orchestration
    networks:
      - erp-network

  # Frontend
  frontend:
    build:
      context: ./frontend
      dockerfile: Dockerfile
      args:
        VITE_API_GATEWAY_URL: https://shopping-now.net
    container_name: erp-frontend
    ports:
      - "8081:80"
    depends_on:
      - gateway
    networks:
      - erp-network

  # Prometheus
  prometheus:
    image: prom/prometheus:v2.48.0
    container_name: erp-prometheus
    ports:
      - "9090:9090"
    volumes:
      - ./infrastructure/monitoring/prometheus/prometheus.yml:/etc/prometheus/prometheus.yml:ro
      - prometheus-data:/prometheus
    command:
      - '--config.file=/etc/prometheus/prometheus.yml'
      - '--storage.tsdb.path=/prometheus'
      - '--storage.tsdb.retention.time=7d'
    networks:
      - erp-network

  # Grafana
  grafana:
    image: grafana/grafana:10.2.0
    container_name: erp-grafana
    ports:
      - "3001:3000"
    environment:
      GF_SECURITY_ADMIN_PASSWORD: admin
      GF_USERS_ALLOW_SIGN_UP: "false"
    volumes:
      - ./infrastructure/monitoring/grafana/datasources.yml:/etc/grafana/provisioning/datasources/datasources.yml:ro
      - ./infrastructure/monitoring/grafana/dashboards.yml:/etc/grafana/provisioning/dashboards/dashboards.yml:ro
      - ./infrastructure/monitoring/grafana/dashboards:/var/lib/grafana/dashboards:ro
      - grafana-data:/var/lib/grafana
    depends_on:
      - prometheus
    networks:
      - erp-network

  # Loki
  loki:
    image: grafana/loki:2.9.0
    container_name: erp-loki
    ports:
      - "3100:3100"
    volumes:
      - ./infrastructure/logging/loki-config.yml:/etc/loki/config.yaml:ro
      - loki-data:/loki
    command: -config.file=/etc/loki/local-config.yaml
    networks:
      - erp-network

  # MinIO - S3-compatible object storage for product images and documents
  minio:
    image: minio/minio:latest
    container_name: erp-minio
    ports:
      - "9002:9000"
      - "9003:9001"
    environment:
      MINIO_ROOT_USER: ${MINIO_ROOT_USER:-minioadmin}
      MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD}
    volumes:
      - minio-data:/data
    command: server /data --console-address ":9001"
    networks:
      - erp-network
    healthcheck:
      test: ["CMD", "mc", "ready", "local"]
      interval: 15s
      timeout: 5s
      retries: 5

networks:
  erp-network:
    driver: bridge

volumes:
  postgres-data:
  kafka-data:
  rabbitmq-data:
  prometheus-data:
  grafana-data:
  loki-data:
  minio-data: