docker-compose.cloud.yml

# ── Cloud / VPS Docker Compose ────────────────────────────────────────────────
# Für: Hetzner, DigitalOcean, AWS EC2, Azure VM, Google Cloud VM
#
# Unterschiede zu docker-compose.qnap.yml:
#   - Mehr RAM (Bot: 2GB, Forex: 1GB)
#   - PostgreSQL statt SQLite (wenn DB_BACKEND=postgres gesetzt)
#   - Traefik als Reverse Proxy mit HTTPS
#   - Kein QNAP-spezifischer Docker-Pfad
#
# Start:
#   bash deploy-vps.sh user@your-server.com
#
# Oder manuell:
#   docker compose -f docker-compose.cloud.yml up -d
#
# Voraussetzungen:
#   - Docker + Docker Compose auf dem Server
#   - .env + forex_bot/.env mit Credentials
#   - DOMAIN=yourdomain.com in .env setzen (für HTTPS via Traefik)
#   - ACME_EMAIL=your@email.com in .env setzen (Let's Encrypt)

version: "3.9"

networks:
  trading_net:
    driver: bridge

volumes:
  postgres_data:
  data_store:
  logs:
  forex_logs:
  reports:

services:

  # ── Crypto Bot ───────────────────────────────────────────────────────────────
  trading-bot:
    image: trading-bot:latest
    container_name: crypto-bot
    restart: unless-stopped
    env_file: .env
    environment:
      - FEATURE_LSTM=${FEATURE_LSTM:-true}    # GPU vorhanden → LSTM möglich
      - AUTO_TRAIN=false
      - DB_BACKEND=${DB_BACKEND:-sqlite}
    volumes:
      - data_store:/app/data_store
      - logs:/app/logs
      - reports:/app/reports
      - ./crypto_bot/ai:/app/crypto_bot/ai
    networks:
      - trading_net
    mem_limit: 2g
    cpus: "2.0"
    logging:
      driver: json-file
      options:
        max-size: "20m"
        max-file: "5"
    healthcheck:
      test: ["CMD", "python", "-c", "import os,time; f='logs/bot.log'; assert os.path.exists(f) and (time.time()-os.path.getmtime(f))<4200"]
      interval: 5m
      timeout: 10s
      retries: 3
      start_period: 2m

  # ── Crypto Dashboard API ──────────────────────────────────────────────────────
  trading-dashboard:
    image: trading-bot:latest
    container_name: trading-dashboard
    restart: unless-stopped
    env_file: .env
    command: python -m uvicorn crypto_bot.dashboard.api:app --host 0.0.0.0 --port 8000
    volumes:
      - data_store:/app/data_store
      - logs:/app/logs
      - ./crypto_bot/ai:/app/crypto_bot/ai
    networks:
      - trading_net
    mem_limit: 512m
    cpus: "1.0"
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.api.rule=Host(`${DOMAIN:-localhost}`) && PathPrefix(`/api`)"
      - "traefik.http.routers.api.tls.certresolver=letsencrypt"
      - "traefik.http.services.api.loadbalancer.server.port=8000"
    healthcheck:
      test: ["CMD", "curl", "-sf", "http://localhost:8000/health"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 15s

  # ── Forex Bot ─────────────────────────────────────────────────────────────────
  forex-bot:
    image: trading-bot:latest
    container_name: forex-bot
    restart: unless-stopped
    env_file: forex_bot/.env
    command: python -m forex_bot.bot
    volumes:
      - ./forex_bot:/app/forex_bot
      - forex_logs:/app/forex_bot/logs
    networks:
      - trading_net
    mem_limit: 1g
    cpus: "1.5"
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.forex.rule=Host(`${DOMAIN:-localhost}`) && PathPrefix(`/forex`)"
      - "traefik.http.routers.forex.tls.certresolver=letsencrypt"
      - "traefik.http.services.forex.loadbalancer.server.port=8001"
    healthcheck:
      test: ["CMD", "curl", "-sf", "http://localhost:8001/health"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 30s

  # ── Streamlit Dashboard ───────────────────────────────────────────────────────
  trading-streamlit:
    image: trading-streamlit:latest
    container_name: trading-streamlit
    restart: unless-stopped
    environment:
      - DASHBOARD_API_URL=http://trading-dashboard:8000
      - FOREX_API_URL=http://forex-bot:8001
    networks:
      - trading_net
    mem_limit: 1g
    cpus: "1.5"
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.dashboard.rule=Host(`${DOMAIN:-localhost}`)"
      - "traefik.http.routers.dashboard.tls.certresolver=letsencrypt"
      - "traefik.http.services.dashboard.loadbalancer.server.port=8501"
    healthcheck:
      test: ["CMD", "curl", "-sf", "http://localhost:8501/_stcore/health"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 20s

  # ── Traefik Reverse Proxy (HTTPS) ─────────────────────────────────────────────
  traefik:
    image: traefik:v3.0
    container_name: traefik
    restart: unless-stopped
    command:
      - "--providers.docker=true"
      - "--providers.docker.exposedbydefault=false"
      - "--entrypoints.web.address=:80"
      - "--entrypoints.websecure.address=:443"
      - "--entrypoints.web.http.redirections.entrypoint.to=websecure"
      - "--certificatesresolvers.letsencrypt.acme.httpchallenge=true"
      - "--certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=web"
      - "--certificatesresolvers.letsencrypt.acme.email=${ACME_EMAIL:-admin@example.com}"
      - "--certificatesresolvers.letsencrypt.acme.storage=/letsencrypt/acme.json"
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ./data/letsencrypt:/letsencrypt
    networks:
      - trading_net

  # ── PostgreSQL (optional, wenn DB_BACKEND=postgres) ───────────────────────────
  postgres:
    image: postgres:16-alpine
    container_name: trading-postgres
    restart: unless-stopped
    profiles: ["postgres"]  # nur aktiv wenn: docker compose --profile postgres up
    environment:
      POSTGRES_DB:       trading_bot
      POSTGRES_USER:     ${POSTGRES_USER:-trading}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-changeme}
    volumes:
      - postgres_data:/var/lib/postgresql/data
    networks:
      - trading_net
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-trading}"]
      interval: 30s
      timeout: 5s
      retries: 5