docker-compose.yml

services:
  # ============================================================
  # INFRASTRUCTURE
  # ============================================================
  postgres:
    image: postgres:16
    container_name: postgres
    environment:
      POSTGRES_DB: ecommerce
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
    ports:
      - "5432:5432"
    volumes:
      - postgres_data:/var/lib/postgresql/data
      - ./docker/postgres/init:/docker-entrypoint-initdb.d:ro
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U postgres -d ecommerce"]
      interval: 5s
      timeout: 5s
      retries: 20
    networks:
      - ecommerce-network

  redis:
    image: redis:7.4-alpine
    container_name: redis
    command: redis-server --requirepass "${REDIS_PASSWORD}" --appendonly yes
    ports:
      - "6379:6379"
    volumes:
      - redis_data:/data
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 5s
      timeout: 5s
      retries: 10
    networks:
      - ecommerce-network

  kafka:
    image: apache/kafka:3.9.0
    container_name: kafka
    ports:
      - "9092:9092"
    environment:
      KAFKA_NODE_ID: 1
      KAFKA_PROCESS_ROLES: broker,controller
      KAFKA_LISTENERS: PLAINTEXT://:9092,CONTROLLER://:9093
      KAFKA_ADVERTISED_LISTENERS: PLAINTEXT://kafka:9092
      KAFKA_LISTENER_SECURITY_PROTOCOL_MAP: PLAINTEXT:PLAINTEXT,CONTROLLER:PLAINTEXT
      KAFKA_CONTROLLER_LISTENER_NAMES: CONTROLLER
      KAFKA_CONTROLLER_QUORUM_VOTERS: 1@kafka:9093
      KAFKA_INTER_BROKER_LISTENER_NAME: PLAINTEXT
      KAFKA_OFFSETS_TOPIC_REPLICATION_FACTOR: 1
      KAFKA_TRANSACTION_STATE_LOG_MIN_ISR: 1
      KAFKA_TRANSACTION_STATE_LOG_REPLICATION_FACTOR: 1
      KAFKA_GROUP_INITIAL_REBALANCE_DELAY_MS: 0
    volumes:
      - kafka_data:/var/lib/kafka/data
    healthcheck:
      test: ["CMD-SHELL", "/opt/kafka/bin/kafka-topics.sh --bootstrap-server localhost:9092 --list >/dev/null 2>&1"]
      interval: 10s
      timeout: 10s
      retries: 20
    networks:
      - ecommerce-network

  elasticsearch:
    image: docker.elastic.co/elasticsearch/elasticsearch:8.15.0
    container_name: elasticsearch
    environment:
      - discovery.type=single-node
      - xpack.security.enabled=false
      - ES_JAVA_OPTS=-Xms512m -Xmx512m
    ports:
      - "9200:9200"
    volumes:
      - elasticsearch_data:/usr/share/elasticsearch/data
    healthcheck:
      test: ["CMD-SHELL", "curl -f http://localhost:9200/_cluster/health || exit 1"]
      interval: 15s
      timeout: 10s
      retries: 20
    networks:
      - ecommerce-network

  rustfs:
    image: rustfs/rustfs:latest
    container_name: rustfs
    environment:
      RUSTFS_VOLUMES: /data
      RUSTFS_ADDRESS: 0.0.0.0:9000
      RUSTFS_CONSOLE_ADDRESS: 0.0.0.0:9001
      RUSTFS_CONSOLE_ENABLE: "true"
      RUSTFS_ACCESS_KEY: ${STORAGE_ACCESS_KEY}
      RUSTFS_SECRET_KEY: ${STORAGE_SECRET_KEY}
    ports:
      - "9000:9000"
      - "9001:9001"
    volumes:
      - rustfs_data:/data
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:9000/health"]
      interval: 10s
      timeout: 5s
      retries: 10
    networks:
      - ecommerce-network

  keycloak:
    image: quay.io/keycloak/keycloak:26.0
    container_name: keycloak
    command: start-dev --http-port=8080 --import-realm
    environment:
      KEYCLOAK_ADMIN: ${KEYCLOAK_ADMIN}
      KEYCLOAK_ADMIN_PASSWORD: ${KEYCLOAK_ADMIN_PASSWORD}
      KC_DB: postgres
      KC_DB_URL_HOST: postgres
      KC_DB_URL_PORT: 5432
      KC_DB_URL_DATABASE: keycloak
      KC_DB_USERNAME: ${POSTGRES_USER}
      KC_DB_PASSWORD: ${POSTGRES_PASSWORD}
    volumes:
      - ./docker/keycloak/import:/opt/keycloak/data/import:ro
    ports:
      - "8080:8080"
    depends_on:
      postgres:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "bash", "-c", "echo > /dev/tcp/localhost/8080"]
      interval: 10s
      timeout: 5s
      retries: 30
      start_period: 90s
    networks:
      - ecommerce-network

  # ============================================================
  # BACKEND — Spring Boot Microservices
  # ============================================================
  apisix:
    image: apache/apisix:3.9.1-debian
    container_name: apisix
    ports:
      - "9080:9080"   # client-facing proxy
      - "9091:9091"   # prometheus metrics
    environment:
      KEYCLOAK_CLIENT_SECRET: ${KEYCLOAK_CLIENT_SECRET:-changeme-ecommerce-client-secret}
    volumes:
      - ./deploy/apisix/config.yaml:/usr/local/apisix/conf/config.yaml:ro
      - ./deploy/apisix/apisix.yaml:/usr/local/apisix/conf/apisix.yaml:ro
    depends_on:
      keycloak:
        condition: service_healthy
    networks:
      - ecommerce-network

  auth-service:
    image: ghcr.io/hoangtien2k3/auth-service:latest
    pull_policy: always
    container_name: auth-service
    ports:
      - "8088:8088"
    environment:
      JWT_ISSUER_URI: http://keycloak:8080/realms/ecommerce
      KEYCLOAK_SERVER_URL: http://keycloak:8080
      KEYCLOAK_PUBLIC_SERVER_URL: ${KEYCLOAK_PUBLIC_SERVER_URL:-http://localhost:8080}
      SSO_BACKEND_CALLBACK_URL: http://localhost:8088/api/v1/auth/callback
      SSO_DEFAULT_FRONTEND_REDIRECT: http://localhost:3000/auth/callback
      SSO_ALLOWED_REDIRECT_URIS: http://localhost:3000/auth/callback,http://localhost:3001/auth/callback
      SPRING_DATASOURCE_URL: jdbc:postgresql://postgres:5432/authservice
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
    depends_on:
      postgres:
        condition: service_healthy
      keycloak:
        condition: service_healthy
    networks:
      - ecommerce-network

  product-service:
    image: ghcr.io/hoangtien2k3/product-service:latest
    pull_policy: always
    container_name: product-service
    ports:
      - "8086:8086"
    environment:
      JWT_ISSUER_URI: http://keycloak:8080/realms/ecommerce
      SPRING_DATASOURCE_URL: jdbc:postgresql://postgres:5432/productservice
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
    depends_on:
      postgres:
        condition: service_healthy
    networks:
      - ecommerce-network

  order-service:
    image: ghcr.io/hoangtien2k3/order-service:latest
    pull_policy: always
    container_name: order-service
    ports:
      - "8084:8084"
    environment:
      JWT_ISSUER_URI: http://keycloak:8080/realms/ecommerce
      SPRING_DATASOURCE_URL: jdbc:postgresql://postgres:5432/orderservice
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
      KAFKA_SERVERS: kafka:9092
    depends_on:
      postgres:
        condition: service_healthy
      kafka:
        condition: service_healthy
    networks:
      - ecommerce-network

  payment-service:
    image: ghcr.io/hoangtien2k3/payment-service:latest
    pull_policy: always
    container_name: payment-service
    ports:
      - "8085:8085"
    environment:
      JWT_ISSUER_URI: http://keycloak:8080/realms/ecommerce
      SPRING_DATASOURCE_URL: jdbc:postgresql://postgres:5432/paymentservice
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
      KAFKA_SERVERS: kafka:9092
    depends_on:
      postgres:
        condition: service_healthy
      kafka:
        condition: service_healthy
    networks:
      - ecommerce-network

  shipping-service:
    image: ghcr.io/hoangtien2k3/shipping-service:latest
    pull_policy: always
    container_name: shipping-service
    ports:
      - "8087:8087"
    environment:
      JWT_ISSUER_URI: http://keycloak:8080/realms/ecommerce
      SPRING_DATASOURCE_URL: jdbc:postgresql://postgres:5432/shippingservice
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
    depends_on:
      postgres:
        condition: service_healthy
    networks:
      - ecommerce-network

  inventory-service:
    image: ghcr.io/hoangtien2k3/inventory-service:latest
    pull_policy: always
    container_name: inventory-service
    ports:
      - "8082:8082"
    environment:
      JWT_ISSUER_URI: http://keycloak:8080/realms/ecommerce
      SPRING_DATASOURCE_URL: jdbc:postgresql://postgres:5432/inventoryservice
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
    depends_on:
      postgres:
        condition: service_healthy
    networks:
      - ecommerce-network

  favourite-service:
    image: ghcr.io/hoangtien2k3/favourite-service:latest
    pull_policy: always
    container_name: favourite-service
    ports:
      - "8081:8081"
    environment:
      JWT_ISSUER_URI: http://keycloak:8080/realms/ecommerce
      SPRING_DATASOURCE_URL: jdbc:postgresql://postgres:5432/favouriteservice
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
    depends_on:
      postgres:
        condition: service_healthy
    networks:
      - ecommerce-network

  rating-service:
    image: ghcr.io/hoangtien2k3/rating-service:latest
    pull_policy: always
    container_name: rating-service
    ports:
      - "8089:8089"
    environment:
      JWT_ISSUER_URI: http://keycloak:8080/realms/ecommerce
      SPRING_DATASOURCE_URL: jdbc:postgresql://postgres:5432/ratingservice
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
    depends_on:
      postgres:
        condition: service_healthy
    networks:
      - ecommerce-network

  media-service:
    image: ghcr.io/hoangtien2k3/media-service:latest
    pull_policy: always
    container_name: media-service
    ports:
      - "8083:8083"
    environment:
      JWT_ISSUER_URI: http://keycloak:8080/realms/ecommerce
      SPRING_DATASOURCE_URL: jdbc:postgresql://postgres:5432/mediaservice
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
      STORAGE_ENDPOINT: http://rustfs:9000
      STORAGE_ACCESS_KEY: ${STORAGE_ACCESS_KEY}
      STORAGE_SECRET_KEY: ${STORAGE_SECRET_KEY}
      STORAGE_BUCKET: ${STORAGE_BUCKET}
    depends_on:
      postgres:
        condition: service_healthy
      rustfs:
        condition: service_healthy
    networks:
      - ecommerce-network

  tax-service:
    image: ghcr.io/hoangtien2k3/tax-service:latest
    pull_policy: always
    container_name: tax-service
    ports:
      - "8091:8091"
    environment:
      JWT_ISSUER_URI: http://keycloak:8080/realms/ecommerce
      SPRING_DATASOURCE_URL: jdbc:postgresql://postgres:5432/taxservice
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
    depends_on:
      postgres:
        condition: service_healthy
    networks:
      - ecommerce-network

  promotion-service:
    image: ghcr.io/hoangtien2k3/promotion-service:latest
    pull_policy: always
    container_name: promotion-service
    ports:
      - "8093:8093"
    environment:
      JWT_ISSUER_URI: http://keycloak:8080/realms/ecommerce
      SPRING_DATASOURCE_URL: jdbc:postgresql://postgres:5432/promotionservice
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
    depends_on:
      postgres:
        condition: service_healthy
    networks:
      - ecommerce-network

  search-service:
    image: ghcr.io/hoangtien2k3/search-service:latest
    pull_policy: always
    container_name: search-service
    ports:
      - "8094:8094"
    environment:
      JWT_ISSUER_URI: http://keycloak:8080/realms/ecommerce
      ELASTICSEARCH_URL: http://elasticsearch:9200
      ELASTICSEARCH_USERNAME: ""
      ELASTICSEARCH_PASSWORD: ""
      KAFKA_SERVERS: kafka:9092
    depends_on:
      elasticsearch:
        condition: service_healthy
      kafka:
        condition: service_healthy
    networks:
      - ecommerce-network

  notification-service:
    image: ghcr.io/hoangtien2k3/notification-service:latest
    pull_policy: always
    container_name: notification-service
    ports:
      - "8090:8090"
    environment:
      JWT_ISSUER_URI: http://keycloak:8080/realms/ecommerce
      POSTGRES_HOST: postgres
      POSTGRES_PORT: 5432
      POSTGRES_DB: ecommerce
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
      KAFKA_SERVERS: kafka:9092
      MAIL_USERNAME: ${MAIL_USERNAME}
      MAIL_PASSWORD: ${MAIL_PASSWORD}
    depends_on:
      postgres:
        condition: service_healthy
      kafka:
        condition: service_healthy
    networks:
      - ecommerce-network

  # ============================================================
  # FRONTEND — Next.js
  # ============================================================
  frontend:
    image: ghcr.io/hoangtien2k3/frontend:latest
    pull_policy: always
    container_name: frontend
    ports:
      - "3000:3000"
    environment:
      NODE_ENV: production
      NEXT_PUBLIC_API_URL: http://localhost:9080
    depends_on:
      apisix:
        condition: service_started
    networks:
      - ecommerce-network

networks:
  ecommerce-network:
    driver: bridge
volumes:
  postgres_data:
  redis_data:
  kafka_data:
  elasticsearch_data:
  rustfs_data: