docker-compose.prod.yml

x-logging: &default-logging
  driver: json-file
  options:
    max-size: "10m"
    max-file: "5"

services:
  redis:
    logging: *default-logging
    image: redis:7-alpine
    restart: unless-stopped
    expose:
      - "6379"
    environment:
      REDIS_PASSWORD: ${REDIS_PASSWORD:?REDIS_PASSWORD must be set}
    volumes:
      - redis-data:/data
    command: ["redis-server", "--appendonly", "yes", "--requirepass", "${REDIS_PASSWORD:?REDIS_PASSWORD must be set}"]
    healthcheck:
      test: ["CMD-SHELL", "redis-cli -a \"$${REDIS_PASSWORD}\" ping"]
      interval: 5s
      timeout: 3s
      retries: 5

  cycles-server:
    logging: *default-logging
    image: ghcr.io/runcycles/cycles-server:0.1.25.56
    restart: unless-stopped
    ports:
      - "7878:7878"
    environment:
      REDIS_HOST: redis
      REDIS_PORT: 6379
      REDIS_PASSWORD: ${REDIS_PASSWORD:?REDIS_PASSWORD must be set}
      # ADMIN_API_KEY is REQUIRED for the admin-on-behalf-of dual-auth
      # paths (listReservations / getReservation / releaseReservation).
      # Fails fast if unset rather than defaulting to a well-known key.
      ADMIN_API_KEY: ${ADMIN_API_KEY:?ADMIN_API_KEY must be set}
      JAVA_OPTS: "-XX:MaxRAMPercentage=75 -XX:+UseG1GC -XX:+UseStringDeduplication"
      LOGGING_STRUCTURED_FORMAT_CONSOLE: ecs
      CYCLES_METRICS_TENANT_TAG_ENABLED: "false"
      # Explicit opt-in prevents this file from becoming an unsafe default if
      # the topology is later scaled to multiple, mixed-version writers.
      RESERVATION_CREATED_AT_INDEX_ENABLED: ${RESERVATION_CREATED_AT_INDEX_ENABLED:-false}
      SPRINGDOC_API_DOCS_ENABLED: "false"
      SPRINGDOC_SWAGGER_UI_ENABLED: "false"
      WEBHOOK_SECRET_ENCRYPTION_KEY: ${WEBHOOK_SECRET_ENCRYPTION_KEY:-}
    healthcheck:
      test: ["CMD", "wget", "--spider", "-q", "http://127.0.0.1:7878/actuator/health/readiness"]
      interval: 10s
      timeout: 5s
      retries: 3
      start_period: 30s
    depends_on:
      redis:
        condition: service_healthy

volumes:
  redis-data: