docker-compose.yml

# ProxyND Production Docker Compose
version: '3.8'

services:
  # ProxyND Main Service
  proxynd:
    build:
      context: .
      dockerfile: Dockerfile
      args:
        - BUILD_DATE=${BUILD_DATE:-$(date -u +'%Y-%m-%dT%H:%M:%SZ')}
        - VCS_REF=${VCS_REF:-$(git rev-parse --short HEAD)}
        - VERSION=${VERSION:-latest}
    image: ${REGISTRY:-local}/proxynd:${TAG:-latest}
    container_name: ${COMPOSE_PROJECT_NAME:-proxynd}_app
    restart: unless-stopped
    ports:
      - "${HOST_PORT:-8080}:8080"
    volumes:
      - config_volume:/config:ro
      - storage_volume:/storage
      - logs_volume:/var/log/proxynd
      # 설정 파일 바인드 마운트 (개발용)
      - type: bind
        source: ${CONFIG_PATH:-./examples}
        target: /config
        read_only: true
        bind:
          create_host_path: true
    environment:
      - SERVER_PORT=8080
      - CONFIG_DIR=/config
      - STORAGE_DIR=/storage
      - LOG_LEVEL=${LOG_LEVEL:-info}
      - LOG_FORMAT=${LOG_FORMAT:-json}
      - GOMAXPROCS=${GOMAXPROCS:-0}
      - GOMEMLIMIT=${GOMEMLIMIT:-256MiB}
      # 프로덕션 설정
      - GIN_MODE=${GIN_MODE:-release}
      - ENABLE_METRICS=${ENABLE_METRICS:-true}
      - ENABLE_HEALTH_DASHBOARD=${ENABLE_HEALTH_DASHBOARD:-true}
    networks:
      - proxynd-network
    healthcheck:
      test: ["/app/healthcheck.sh"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 60s
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    cap_add:
      - CHOWN
      - DAC_OVERRIDE
      - SETUID
      - SETGID
    ulimits:
      memlock:
        soft: 268435456
        hard: 268435456
      nofile:
        soft: 65536
        hard: 65536
      nproc:
        soft: 4096
        hard: 4096
    deploy:
      resources:
        limits:
          cpus: '${CPU_LIMIT:-1.0}'
          memory: ${MEMORY_LIMIT:-512M}
        reservations:
          cpus: '${CPU_RESERVATION:-0.25}'
          memory: ${MEMORY_RESERVATION:-128M}
      restart_policy:
        condition: on-failure
        delay: 5s
        max_attempts: 3
        window: 120s
    depends_on:
      redis:
        condition: service_healthy
      prometheus:
        condition: service_started
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.proxynd.rule=Host(`${PROXYND_HOST:-localhost}`)"
      - "traefik.http.services.proxynd.loadbalancer.server.port=8080"
      - "com.proxynd.service=main"
      - "com.proxynd.version=${VERSION:-latest}"

  # Redis for caching and session management
  redis:
    image: redis:7.2-alpine
    container_name: ${COMPOSE_PROJECT_NAME:-proxynd}_redis
    restart: unless-stopped
    command: >
      redis-server
      --appendonly yes
      --appendfsync everysec
      --maxmemory ${REDIS_MAXMEMORY:-128mb}
      --maxmemory-policy allkeys-lru
      --tcp-keepalive 300
      --timeout 300
    volumes:
      - redis_data:/data
    networks:
      - proxynd-network
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 30s
      timeout: 3s
      retries: 3
    security_opt:
      - no-new-privileges:true
    deploy:
      resources:
        limits:
          cpus: '0.5'
          memory: 256M
        reservations:
          cpus: '0.1'
          memory: 64M
    labels:
      - "com.proxynd.service=redis"

  # Prometheus for metrics collection
  prometheus:
    image: prom/prometheus:v2.48.0
    container_name: ${COMPOSE_PROJECT_NAME:-proxynd}_prometheus
    restart: unless-stopped
    command:
      - '--config.file=/etc/prometheus/prometheus.yml'
      - '--storage.tsdb.path=/prometheus'
      - '--web.console.libraries=/etc/prometheus/console_libraries'
      - '--web.console.templates=/etc/prometheus/consoles'
      - '--storage.tsdb.retention.time=${PROMETHEUS_RETENTION:-7d}'
      - '--web.enable-lifecycle'
      - '--web.enable-admin-api'
    ports:
      - "${PROMETHEUS_PORT:-9090}:9090"
    volumes:
      - prometheus_data:/prometheus
      - ./deployments/monitoring/prometheus.yml:/etc/prometheus/prometheus.yml:ro
    networks:
      - proxynd-network
    depends_on:
      - proxynd
    labels:
      - "com.proxynd.service=monitoring"

  # Grafana for visualization
  grafana:
    image: grafana/grafana:10.2.0
    container_name: ${COMPOSE_PROJECT_NAME:-proxynd}_grafana
    restart: unless-stopped
    ports:
      - "${GRAFANA_PORT:-3000}:3000"
    volumes:
      - grafana_data:/var/lib/grafana
      - ./deployments/monitoring/grafana/dashboards:/etc/grafana/provisioning/dashboards:ro
      - ./deployments/monitoring/grafana/datasources:/etc/grafana/provisioning/datasources:ro
    environment:
      - GF_SECURITY_ADMIN_PASSWORD=${GRAFANA_PASSWORD:-admin123}
      - GF_INSTALL_PLUGINS=grafana-clock-panel,grafana-simple-json-datasource
      - GF_ANALYTICS_REPORTING_ENABLED=false
      - GF_ANALYTICS_CHECK_FOR_UPDATES=false
    networks:
      - proxynd-network
    depends_on:
      - prometheus
    labels:
      - "com.proxynd.service=monitoring"

  # Nginx for load balancing and SSL termination
  nginx:
    image: nginx:1.25-alpine
    container_name: ${COMPOSE_PROJECT_NAME:-proxynd}_nginx
    restart: unless-stopped
    ports:
      - "${NGINX_HTTP_PORT:-80}:80"
      - "${NGINX_HTTPS_PORT:-443}:443"
    volumes:
      - ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro
      - ./nginx/conf.d:/etc/nginx/conf.d:ro
      - nginx_logs:/var/log/nginx
      - ssl_certs:/etc/ssl/certs:ro
    networks:
      - proxynd-network
    depends_on:
      - proxynd
    labels:
      - "com.proxynd.service=proxy"

networks:
  proxynd-network:
    driver: bridge
    name: ${COMPOSE_PROJECT_NAME:-proxynd}_network
    ipam:
      config:
        - subnet: 172.20.0.0/16

volumes:
  config_volume:
    driver: local
    name: ${COMPOSE_PROJECT_NAME:-proxynd}_config
  storage_volume:
    driver: local
    name: ${COMPOSE_PROJECT_NAME:-proxynd}_storage
  logs_volume:
    driver: local
    name: ${COMPOSE_PROJECT_NAME:-proxynd}_logs
  redis_data:
    driver: local
    name: ${COMPOSE_PROJECT_NAME:-proxynd}_redis
  prometheus_data:
    driver: local
    name: ${COMPOSE_PROJECT_NAME:-proxynd}_prometheus
  grafana_data:
    driver: local
    name: ${COMPOSE_PROJECT_NAME:-proxynd}_grafana
  nginx_logs:
    driver: local
    name: ${COMPOSE_PROJECT_NAME:-proxynd}_nginx_logs
  ssl_certs:
    driver: local
    name: ${COMPOSE_PROJECT_NAME:-proxynd}_ssl_certs