moving

docker-compose.production.yml

@@ -0,0 +1,122 @@
+# Waggle Teams — Production Docker Compose
+#
+# Usage:
+#   docker compose -f docker-compose.production.yml up -d
+#
+# Required environment variables (create .env file or pass via -e):
+#   ANTHROPIC_API_KEY    — Your Anthropic API key
+#   CLERK_SECRET_KEY     — Clerk authentication secret (team mode)
+#   CLERK_PUBLISHABLE_KEY — Clerk publishable key
+#   CORS_ORIGIN          — Frontend origin(s), comma-separated, exact-match.
+#                          REQUIRED: the team server (index.ts) fails closed in
+#                          production if unset. e.g. https://app.example.com
+#   WAGGLE_LICENSE_KEY   — Waggle license key (optional for V1)
+#
+# Required production secrets:
+#   POSTGRES_PASSWORD    - Postgres password
+#   MINIO_ROOT_USER      - MinIO access key
+#   MINIO_ROOT_PASSWORD  - MinIO secret key
+#
+# Optional:
+#   OPENAI_API_KEY       — If using OpenAI models
+#   WAGGLE_MAX_USERS     — Max team members (default: unlimited)
+#
+# NOTE: Stripe billing runs in the SIDECAR server (render.yaml), not this team
+# server — its webhooks route is Clerk-only, so no STRIPE_* vars are needed here.
+
+services:
+  waggle:
+    build:
+      context: .
+      dockerfile: Dockerfile
+    image: waggle/server:latest
+    ports:
+      - '3333:3333'
+    environment:
+      - DATABASE_URL=postgres://waggle:${POSTGRES_PASSWORD:?set POSTGRES_PASSWORD}@postgres:5432/waggle
+      - REDIS_URL=redis://redis:6379
+      - ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY}
+      - OPENAI_API_KEY=${OPENAI_API_KEY:-}
+      - CLERK_SECRET_KEY=${CLERK_SECRET_KEY:-}
+      - CLERK_PUBLISHABLE_KEY=${CLERK_PUBLISHABLE_KEY:-}
+      - WAGGLE_LICENSE_KEY=${WAGGLE_LICENSE_KEY:-}
+      - WAGGLE_MAX_USERS=${WAGGLE_MAX_USERS:-0}
+      - WAGGLE_SKIP_LITELLM=1
+      # Container must accept traffic from outside the container; the sidecar
+      # now defaults to loopback (desktop-safe), so cloud/server deploys opt in.
+      - WAGGLE_HOST=0.0.0.0
+      - NODE_ENV=production
+      # Team server (packages/server/src/index.ts — this Dockerfile's entrypoint)
+      # fails closed if CORS_ORIGIN is unset under NODE_ENV=production (config.ts).
+      # Set it to your deployed frontend origin(s), comma-separated, exact-match.
+      - CORS_ORIGIN=${CORS_ORIGIN:?set CORS_ORIGIN to your frontend origin, e.g. https://app.example.com}
+      - MINIO_ENDPOINT=minio:9000
+      - MINIO_ACCESS_KEY=${MINIO_ROOT_USER:?set MINIO_ROOT_USER}
+      - MINIO_SECRET_KEY=${MINIO_ROOT_PASSWORD:?set MINIO_ROOT_PASSWORD}
+      - MINIO_BUCKET=waggle-files
+    volumes:
+      - waggle-data:/data
+    depends_on:
+      postgres:
+        condition: service_healthy
+      redis:
+        condition: service_healthy
+      minio:
+        condition: service_healthy
+    restart: unless-stopped
+    healthcheck:
+      test: ['CMD', 'wget', '-q', '--spider', 'http://localhost:3333/health']
+      interval: 30s
+      timeout: 5s
+      retries: 3
+      start_period: 15s
+
+  postgres:
+    image: postgres:16-alpine
+    environment:
+      POSTGRES_USER: waggle
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:?set POSTGRES_PASSWORD}
+      POSTGRES_DB: waggle
+    volumes:
+      - pgdata:/var/lib/postgresql/data
+    healthcheck:
+      test: ['CMD-SHELL', 'pg_isready -U waggle']
+      interval: 10s
+      timeout: 5s
+      retries: 5
+    restart: unless-stopped
+
+  redis:
+    image: redis:7-alpine
+    volumes:
+      - redisdata:/data
+    healthcheck:
+      test: ['CMD', 'redis-cli', 'ping']
+      interval: 10s
+      timeout: 5s
+      retries: 5
+    restart: unless-stopped
+
+  minio:
+    image: minio/minio:latest
+    command: server /data --console-address ":9001"
+    ports:
+      - '9000:9000'
+      - '9001:9001'
+    environment:
+      - MINIO_ROOT_USER=${MINIO_ROOT_USER:?set MINIO_ROOT_USER}
+      - MINIO_ROOT_PASSWORD=${MINIO_ROOT_PASSWORD:?set MINIO_ROOT_PASSWORD}
+    volumes:
+      - minio-data:/data
+    healthcheck:
+      test: ['CMD', 'curl', '-f', 'http://localhost:9000/minio/health/live']
+      interval: 10s
+      timeout: 5s
+      retries: 5
+    restart: unless-stopped
+
+volumes:
+  waggle-data:
+  pgdata:
+  redisdata:
+  minio-data: