services: backend: build: context: . dockerfile: backend/Dockerfile container_name: backend command: uvicorn media_library_viewer_api.main:app --host 0.0.0.0 --port 8000 --reload environment: AUTH_ENABLED: "false" OIDC_ISSUER_URL: ${OIDC_ISSUER_URL:-} OIDC_AUDIENCE: ${OIDC_AUDIENCE:-} OIDC_JWKS_URL: ${OIDC_JWKS_URL:-} LOG_LEVEL: ${LOG_LEVEL:-INFO} LOG_FORMAT: ${LOG_FORMAT:-text} PROMETHEUS_ENABLED: "true" SSH_KNOWN_HOSTS_PATH: /app/backend/.cache/known_hosts PROMETHEUS_FILE_SD_DIR: /app/backend/.cache/prometheus-file-sd ALERTMANAGER_URL: ${ALERTMANAGER_URL:-http://alertmanager:9093} ALERTMANAGER_WEBHOOK_URL: ${ALERTMANAGER_WEBHOOK_URL:-} MANAGE_ENCRYPTION_KEY: ${MANAGE_ENCRYPTION_KEY:?set MANAGE_ENCRYPTION_KEY in your .env} ports: - "8000:8000" volumes: - ./backend:/app/backend - ${BACKEND_CACHE_DIR:-./backend-cache}:/app/backend/.cache networks: - web - monitoring restart: unless-stopped frontend: build: context: . dockerfile: frontend/Dockerfile target: dev container_name: frontend environment: VITE_API_URL: "/api" VITE_OIDC_ENABLED: "false" VITE_DEV_API_PROXY_TARGET: "http://backend:8000" VITE_GRAFANA_URL: "http://localhost:3000" VITE_PROMETHEUS_URL: "http://localhost:9090" ports: - "5173:5173" volumes: - ./frontend:/app/frontend - frontend_node_modules:/app/frontend/node_modules depends_on: - backend restart: unless-stopped prometheus: image: prom/prometheus:v2.55.1 container_name: prometheus command: - "--config.file=/etc/prometheus/prometheus.yml" - "--storage.tsdb.path=/prometheus" - "--storage.tsdb.retention.time=30d" - "--web.console.libraries=/usr/share/prometheus/console_libraries" - "--web.console.templates=/usr/share/prometheus/consoles" - "--web.enable-lifecycle" volumes: - ./monitoring/prometheus/prometheus.yml:/etc/prometheus/prometheus.yml:ro - ./monitoring/prometheus/rules:/etc/prometheus/rules:ro - ${BACKEND_CACHE_DIR:-./backend-cache}/prometheus-file-sd:/etc/prometheus/file-sd:ro - prometheus_data:/prometheus ports: - "9090:9090" networks: - monitoring restart: unless-stopped healthcheck: test: ["CMD", "wget", "-qO-", "http://127.0.0.1:9090/-/healthy"] interval: 30s timeout: 5s retries: 3 start_period: 30s deploy: resources: limits: cpus: "1.00" memory: 1G reservations: cpus: "0.25" memory: 256M loki: image: grafana/loki:3.1.1 container_name: loki command: -config.file=/etc/loki/loki.yml volumes: - ./monitoring/loki/loki.yml:/etc/loki/loki.yml:ro - loki_data:/loki ports: - "3100:3100" networks: - monitoring restart: unless-stopped healthcheck: test: ["CMD", "wget", "-qO-", "http://127.0.0.1:3100/ready"] interval: 30s timeout: 5s retries: 3 start_period: 30s deploy: resources: limits: cpus: "1.00" memory: 1G reservations: cpus: "0.25" memory: 256M alloy: image: grafana/alloy:v1.5.0 container_name: alloy command: - run - /etc/alloy/config.alloy - --storage.path=/var/lib/alloy volumes: - ./monitoring/alloy/config.alloy:/etc/alloy/config.alloy:ro - /var/run/docker.sock:/var/run/docker.sock:ro - /var/lib/docker/containers:/var/lib/docker/containers:ro networks: - monitoring depends_on: loki: condition: service_healthy restart: unless-stopped user: root healthcheck: test: ["CMD", "wget", "-qO-", "http://127.0.0.1:12345/-/healthy"] interval: 30s timeout: 5s retries: 3 start_period: 30s deploy: resources: limits: cpus: "0.50" memory: 512M reservations: cpus: "0.10" memory: 128M grafana: image: grafana/grafana:11.3.1 container_name: grafana environment: GF_SECURITY_ADMIN_USER: ${GRAFANA_ADMIN_USER:-admin} GF_SECURITY_ADMIN_PASSWORD: ${GRAFANA_ADMIN_PASSWORD:-admin} GF_AUTH_GENERIC_OAUTH_CLIENT_ID: ${GF_AUTH_GENERIC_OAUTH_CLIENT_ID:-} GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET: ${GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET:-} GF_AUTH_GENERIC_OAUTH_AUTH_URL: ${GF_AUTH_GENERIC_OAUTH_AUTH_URL:-} GF_AUTH_GENERIC_OAUTH_TOKEN_URL: ${GF_AUTH_GENERIC_OAUTH_TOKEN_URL:-} GF_AUTH_GENERIC_OAUTH_API_URL: ${GF_AUTH_GENERIC_OAUTH_API_URL:-} LOG_LEVEL: ${LOG_LEVEL:-INFO} volumes: - ./monitoring/grafana/grafana.ini:/etc/grafana/grafana.ini:ro - ./monitoring/grafana/provisioning:/etc/grafana/provisioning:ro - grafana_data:/var/lib/grafana ports: - "3000:3000" networks: - monitoring depends_on: prometheus: condition: service_healthy loki: condition: service_healthy restart: unless-stopped healthcheck: test: ["CMD", "wget", "-qO-", "http://127.0.0.1:3000/api/health"] interval: 30s timeout: 5s retries: 3 start_period: 30s deploy: resources: limits: cpus: "1.00" memory: 512M reservations: cpus: "0.25" memory: 128M alertmanager: image: prom/alertmanager:v0.27.0 container_name: alertmanager command: - "--config.file=/etc/alertmanager/alertmanager.yml" - "--storage.path=/alertmanager" environment: SMTP_HOST: ${SMTP_HOST:-smtp.example.com} SMTP_PORT: ${SMTP_PORT:-587} SMTP_USERNAME: ${SMTP_USERNAME:-} SMTP_PASSWORD: ${SMTP_PASSWORD:-} SMTP_FROM_ADDRESS: ${SMTP_FROM_ADDRESS:-no-reply@example.com} ALERT_EMAIL_TO: ${ALERT_EMAIL_TO:-admin@example.com} volumes: - ./monitoring/alertmanager/alertmanager.yml:/etc/alertmanager/alertmanager.yml:ro - alertmanager_data:/alertmanager ports: - "9093:9093" networks: - monitoring restart: unless-stopped healthcheck: test: ["CMD", "wget", "-qO-", "http://127.0.0.1:9093/-/healthy"] interval: 30s timeout: 5s retries: 3 start_period: 30s deploy: resources: limits: cpus: "0.50" memory: 256M reservations: cpus: "0.10" memory: 64M node-exporter: image: prom/node-exporter:v1.8.2 container_name: node-exporter command: - "--path.rootfs=/host" volumes: - /:/host:ro,rslave networks: - monitoring restart: unless-stopped healthcheck: test: ["CMD", "wget", "-qO-", "http://127.0.0.1:9100/"] interval: 30s timeout: 5s retries: 3 start_period: 10s deploy: resources: limits: cpus: "0.25" memory: 128M reservations: cpus: "0.05" memory: 32M networks: monitoring: volumes: frontend_node_modules: prometheus_data: loki_data: grafana_data: alertmanager_data: