docker-compose.infra.yml

services:
  db-backup:
    build:
      context: ./infra/backup
      dockerfile: Dockerfile
    container_name: roi_db_backup
    restart: unless-stopped
    environment:
      AWS_REGION: ${AWS_REGION}
      AWS_ACCESS_KEY_ID: ${AWS_ACCESS_KEY_ID}
      AWS_SECRET_ACCESS_KEY: ${AWS_SECRET_ACCESS_KEY}
      AWS_S3_BUCKET: ${AWS_S3_BUCKET}
      DB_HOST: ${DB_HOST}
      DB_USER: ${DB_USER}
      DB_PASSWORD: ${DB_PASSWORD}
      DB_NAME: ${DB_NAME}
    networks:
      - roi_network

  # Logging

  loki:
    image: grafana/loki:latest
    container_name: roi_loki
    ports:
      - "3100:3100"
    command: 
      - '-config.file=/etc/loki/local-config.yaml'
      - '-config.expand-env=true'
    volumes:
      - ./monitoring/loki-config.yml:/etc/loki/local-config.yaml
      - loki_data:/loki
    restart: unless-stopped
    networks:
      - roi_network

  promtail:
    image: grafana/promtail:latest
    container_name: roi_promtail
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - /var/lib/docker/containers:/var/lib/docker/containers:ro
      - ./monitoring/promtail-config.yml:/etc/promtail/config.yml
    command: -config.file=/etc/promtail/config.yml
    restart: unless-stopped
    networks:
      - roi_network

  # Metrics

  prometheus:
    image: prom/prometheus:v2.52.0
    container_name: roi_prometheus
    restart: unless-stopped
    ports:
      - "9090:9090"
    environment:
      - AWS_REGION=${AWS_REGION}
      - AWS_ACCESS_KEY_ID=${AWS_ACCESS_KEY_ID}
      - AWS_SECRET_ACCESS_KEY=${AWS_SECRET_ACCESS_KEY}
    volumes:
      - ./monitoring/prometheus.yml:/etc/prometheus/prometheus.yml:ro
      - ./monitoring/alert-rules.yml:/etc/prometheus/alert-rules.yml:ro
      - prometheus_data:/prometheus
    command:
      - '--config.file=/etc/prometheus/prometheus.yml'
      - '--storage.tsdb.path=/prometheus'
      - '--storage.tsdb.retention.time=30d'
      - '--web.enable-lifecycle'
    networks:
      - roi_network

  grafana:
    image: grafana/grafana:10.4.2
    container_name: roi_grafana
    restart: unless-stopped
    depends_on:
      - prometheus
      - loki
      - tempo
    environment:
      GF_SECURITY_ADMIN_USER: ${DASHBOARD_USER:-admin}
      GF_SECURITY_ADMIN_PASSWORD: ${DASHBOARD_PASS:-admin}
      GF_USERS_ALLOW_SIGN_UP: "false"
      GF_ANALYTICS_REPORTING_ENABLED: "false"
    ports:
      - "3001:3000"
    volumes:
      - grafana_data:/var/lib/grafana
      - ./monitoring/grafana/provisioning:/etc/grafana/provisioning:ro
      - ./monitoring/grafana/dashboards:/etc/grafana/dashboards:ro
    networks:
      - roi_network

  node-exporter:
    image: prom/node-exporter:v1.8.1
    container_name: roi_node_exporter
    restart: unless-stopped
    ports:
      - "9100:9100"
    pid: host
    volumes:
      - /proc:/host/proc:ro
      - /sys:/host/sys:ro
      - /:/rootfs:ro
    command:
      - '--path.procfs=/host/proc'
      - '--path.rootfs=/rootfs'
      - '--path.sysfs=/host/sys'
      - '--collector.filesystem.mount-points-exclude=^/(sys|proc|dev|host|etc)($$|/)'
    networks:
      - roi_network

  cadvisor:
    image: gcr.io/cadvisor/cadvisor:latest
    container_name: roi_infra_cadvisor
    restart: unless-stopped
    ports:
      - "8080:8080"
    volumes:
      - /:/rootfs:ro
      - /var/run:/var/run:ro
      - /sys:/sys:ro
      - /var/lib/docker/:/var/lib/docker:ro
      - /dev/disk/:/dev/disk:ro
    networks:
      - roi_network

  # Alerting

  alertmanager:
    image: prom/alertmanager:v0.27.0
    container_name: roi_alertmanager
    restart: unless-stopped
    volumes:
      - ./monitoring/alertmanager.yml:/etc/alertmanager/alertmanager.yml:ro
    ports:
      - "9093:9093"
    entrypoint:
      - /bin/sh
      - -c
      - |
        echo "$${SMTP_APP_PASSWORD}" > /etc/alertmanager/smtp_password
        exec /bin/alertmanager --config.file=/etc/alertmanager/alertmanager.yml --storage.path=/alertmanager
    environment:
      - SMTP_APP_PASSWORD=${SMTP_APP_PASSWORD}
    networks:
      - roi_network

  # Tracing

  tempo-init:
    image: alpine:3.20
    container_name: roi_tempo_init
    entrypoint: ["sh", "-c", "chown -R 10001:10001 /tmp/tempo"]
    volumes:
      - tempo_data:/tmp/tempo
    restart: "no"
    networks:
      - roi_network

  tempo:
    image: grafana/tempo:latest
    container_name: roi_tempo
    restart: unless-stopped
    depends_on:
      tempo-init:
        condition: service_completed_successfully
    command: [ "-config.file=/etc/tempo.yaml" ]
    volumes:
      - ./monitoring/tempo-config.yml:/etc/tempo.yaml:ro
      - tempo_data:/tmp/tempo
    ports:
      - "4317:4317"    # OTLP gRPC receiver
      - "4318:4318"    # OTLP HTTP receiver
      - "3200:3200"    # Tempo query API
    networks:
      - roi_network

  # Caching

  redis:
    image: redis:7-alpine
    container_name: roi_redis
    restart: unless-stopped
    command: redis-server --maxmemory 128mb --maxmemory-policy allkeys-lru --appendonly yes
    ports:
      - "6379:6379"
    volumes:
      - redis_data:/data
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 3s
      retries: 3
    networks:
      - roi_network

  health-check:
    build:
      context: ./monitoring/health-check
    container_name: roi_health_check
    restart: unless-stopped
    environment:
      - SMTP_PASS=${SMTP_APP_PASSWORD}
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
    networks:
      - roi_network

networks:
  roi_network:
    name: roi_global_network
    external: true

volumes:
  prometheus_data:
    name: roi_prometheus_data
  grafana_data:
    name: roi_grafana_data
  loki_data:
    name: roi_loki_data
  tempo_data:
    name: roi_tempo_data
  redis_data:
    name: roi_redis_data