docker-compose.yml

version: '3.8'

services:
  # PostgreSQL for Keycloak
  postgres:
    image: postgres:15
    environment:
      POSTGRES_DB: keycloak
      POSTGRES_USER: keycloak
      POSTGRES_PASSWORD: password
    ports:
      - "5432:5432"
    volumes:
      - postgres_data:/var/lib/postgresql/data
    networks:
      - financial-ledger-network

  # PostgreSQL for Transaction Service
  transaction-db:
    image: postgres:15
    environment:
      POSTGRES_DB: transaction_service
      POSTGRES_USER: transaction_user
      POSTGRES_PASSWORD: transaction_password
    ports:
      - "5433:5432"
    volumes:
      - transaction_data:/var/lib/postgresql/data
    networks:
      - financial-ledger-network

  # PostgreSQL for Compliance Orchestrator
  compliance-db:
    image: postgres:15
    environment:
      POSTGRES_DB: compliance_service
      POSTGRES_USER: compliance_user
      POSTGRES_PASSWORD: compliance_password
    ports:
      - "5434:5432"
    volumes:
      - compliance_data:/var/lib/postgresql/data
    networks:
      - financial-ledger-network

  # PostgreSQL for Ledger Service
  ledger-db:
    image: postgres:15
    environment:
      POSTGRES_DB: ledger_service
      POSTGRES_USER: ledger_user
      POSTGRES_PASSWORD: ledger_password
    ports:
      - "5435:5432"
    volumes:
      - ledger_data:/var/lib/postgresql/data
    networks:
      - financial-ledger-network

  # Zookeeper for Kafka (must start first)
  zookeeper:
    image: confluentinc/cp-zookeeper:7.4.0
    container_name: zookeeper
    environment:
      ZOOKEEPER_CLIENT_PORT: 2181
      ZOOKEEPER_TICK_TIME: 2000
    ports:
      - "2181:2181"
    networks:
      - financial-ledger-network

  # Kafka (depends on Zookeeper)
  kafka:
    image: confluentinc/cp-kafka:7.4.0
    container_name: kafka
    depends_on:
      - zookeeper
    ports:
      - "9092:9092"
      - "9101:9101"
    environment:
      KAFKA_BROKER_ID: 1
      KAFKA_ZOOKEEPER_CONNECT: 'zookeeper:2181'
      KAFKA_LISTENER_SECURITY_PROTOCOL_MAP: PLAINTEXT:PLAINTEXT,PLAINTEXT_HOST:PLAINTEXT
      KAFKA_ADVERTISED_LISTENERS: PLAINTEXT://kafka:29092,PLAINTEXT_HOST://localhost:9092
      KAFKA_OFFSETS_TOPIC_REPLICATION_FACTOR: 1
      KAFKA_TRANSACTION_STATE_LOG_MIN_ISR: 1
      KAFKA_TRANSACTION_STATE_LOG_REPLICATION_FACTOR: 1
      KAFKA_GROUP_INITIAL_REBALANCE_DELAY_MS: 0
      KAFKA_JMX_PORT: 9101
      KAFKA_JMX_HOSTNAME: localhost
      KAFKA_AUTO_CREATE_TOPICS_ENABLE: 'true'
    networks:
      - financial-ledger-network

  # Consul for Service Discovery (start early)
  consul:
    image: hashicorp/consul:1.17
    container_name: consul
    ports:
      - "8500:8500"
      - "8600:8600/udp"
      - "8600:8600/tcp"
    environment:
      - CONSUL_BIND_INTERFACE=eth0
      - CONSUL_CLIENT_INTERFACE=eth0
    command: agent -server -bootstrap-expect=1 -ui -client=0.0.0.0
    networks:
      - financial-ledger-network

  # Vault for Secrets Management (start early)
  vault:
    image: hashicorp/vault:1.17
    container_name: vault
    ports:
      - "8200:8200"
    environment:
      - VAULT_DEV_ROOT_TOKEN_ID=dev-token-123
      - VAULT_DEV_LISTEN_ADDRESS=0.0.0.0:8200
      - VAULT_ADDR=http://0.0.0.0:8200
    cap_add:
      - IPC_LOCK
    command: server -dev
    networks:
      - financial-ledger-network

  # Keycloak (depends on postgres)
  keycloak:
    image: quay.io/keycloak/keycloak:23.0
    environment:
      KC_DB: postgres
      KC_DB_URL: jdbc:postgresql://postgres:5432/keycloak
      KC_DB_USERNAME: keycloak
      KC_DB_PASSWORD: password
      KEYCLOAK_ADMIN: admin
      KEYCLOAK_ADMIN_PASSWORD: admin
      KC_HOSTNAME_STRICT: false
      KC_HOSTNAME_STRICT_HTTPS: false
    ports:
      - "8080:8080"
    command: start-dev
    depends_on:
      - postgres
    networks:
      - financial-ledger-network

  # Axon Server (start after infrastructure)
  axon-server:
    image: axoniq/axonserver:latest
    hostname: axon-server
    container_name: axon-server
    ports:
      - "8024:8024"
      - "8124:8124"
    environment:
      - AXONIQ_AXONSERVER_DEVMODE_ENABLED=true
    volumes:
      - axon_data:/axonserver/data
      - axon_events:/axonserver/events
    networks:
      - financial-ledger-network

  # Config Server (start after infrastructure, before app services)
  config-server:
    build:
      context: ./config-server
      dockerfile: Dockerfile
    container_name: config-server
    ports:
      - "8888:8888"
    environment:
      - SPRING_PROFILES_ACTIVE=native
    depends_on:
      - consul
      - vault
    networks:
      - financial-ledger-network

  # Kafka UI (depends on kafka)
  kafka-ui:
    image: provectuslabs/kafka-ui:latest
    container_name: kafka-ui
    depends_on:
      - kafka
    ports:
      - "8083:8080"
    environment:
      KAFKA_CLUSTERS_0_NAME: local
      KAFKA_CLUSTERS_0_BOOTSTRAPSERVERS: kafka:29092
      KAFKA_CLUSTERS_0_ZOOKEEPER: zookeeper:2181
    networks:
      - financial-ledger-network

  # Application Services (start after config server and their databases)
  
  # Transaction Service
  transaction-service:
    build:
      context: ./transaction-service
      dockerfile: Dockerfile
    ports:
      - "8081:8081"
    depends_on:
      - config-server
      - transaction-db
      - kafka
      - axon-server
    restart: unless-stopped
    networks:
      - financial-ledger-network

  # Ledger Service
  ledger-service:
    build:
      context: ./ledger-service
      dockerfile: Dockerfile
    container_name: ledger-service
    ports:
      - "8085:8085"
    depends_on:
      - config-server
      - ledger-db
      - kafka
      - axon-server
    restart: unless-stopped
    networks:
      - financial-ledger-network

  # Compliance Orchestrator Service
  compliance-orchestrator:
    build:
      context: ./compliance-orchestrator
      dockerfile: Dockerfile
    container_name: compliance-orchestrator
    ports:
      - "8084:8084"
    depends_on:
      - config-server
      - compliance-db
      - kafka
    restart: unless-stopped
    networks:
      - financial-ledger-network

  # API Gateway (start last)
  api-gateway:
    build:
      context: ./api-gateway
      dockerfile: Dockerfile
    container_name: api-gateway
    ports:
      - "8082:8082"
    depends_on:
      - config-server
      - transaction-service
      - ledger-service
      - compliance-orchestrator
    restart: unless-stopped
    networks:
      - financial-ledger-network

volumes:
  postgres_data:
  transaction_data:
  compliance_data:
  ledger_data:
  axon_data:
  axon_events:

networks:
  financial-ledger-network:
    driver: bridge