docker-compose.yml

# Local development compose — for production use kryptodb-compose.yml
services:

  # ── Databases ──────────────────────────────────────────────────────────────
  neo4j:
    image: neo4j:5.21.2-community
    ports:
      - "7474:7474"   # Browser UI
      - "7687:7687"   # Bolt
    environment:
      - NEO4J_AUTH=${NEO4J_USER:-neo4j}/${NEO4J_PASSWORD:-password}
      - NEO4J_PLUGINS=["apoc"]
    volumes:
      - neo4j_data:/data

  redis:
    image: redis:7.4-alpine
    ports:
      - "6380:6379"
    volumes:
      - redis_data:/data

  # ── Backend daemon ─────────────────────────────────────────────────────────
  daemon:
    build:
      context: .
      dockerfile: Dockerfile
    command: ["web"]
    ports:
      - "8000:8000"
    environment:
      KRYPTODB_ENV: ${KRYPTODB_ENV:-development}
      NEO4J_URI: bolt://neo4j:7687
      NEO4J_USER: ${NEO4J_USER:-neo4j}
      NEO4J_PASSWORD: ${NEO4J_PASSWORD:-password}
      REDIS_URL: redis://redis:6379/0
      KRYPTODB_MASTER_KEY: ${KRYPTODB_MASTER_KEY}
      KRYPTODB_ADMIN_API_KEY: ${KRYPTODB_ADMIN_API_KEY}
      KRYPTODB_BOOTSTRAP_UNENCRYPTED: "true"
      KRYPTODB_SCOPE_KEYS_FILE: /run/secrets/kryptodb-scope-keys.json
      OLLAMA_BASE_URL: ${OLLAMA_BASE_URL:-http://host.docker.internal:11434}
      OPENAI_API_KEY: ${OPENAI_API_KEY:-}
      LLM_MODEL: ${LLM_MODEL:-llama3.2}
      KRYPTODB_CHECKPOINT_DB: /data/checkpointer.sqlite
      HOST: 0.0.0.0
      PORT: "8000"
    extra_hosts:
      - "host.docker.internal:host-gateway"
    volumes:
      - ./kryptodb:/app/kryptodb     # hot-reload source in dev
      - ./data:/app/data
      - ./kryptodb-scope-keys.json:/run/secrets/kryptodb-scope-keys.json
      - daemon_data:/data
    depends_on:
      - neo4j
      - redis

  # ── Next.js frontend ───────────────────────────────────────────────────────
  frontend:
    image: node:22-slim
    working_dir: /app
    command: sh -c "rm -f .next/dev/lock && npm install --silent && npm run dev"
    ports:
      - "3000:3000"
    environment:
      NEXT_PUBLIC_KRYPTODB_URL: ${NEXT_PUBLIC_KRYPTODB_URL:-http://localhost:8000}
      BACKEND_URL: http://daemon:8000
      NEXT_TELEMETRY_DISABLED: "1"
    volumes:
      - ./ui:/app                  # mount source for hot-reload
      - ui_node_modules:/app/node_modules
    depends_on:
      - daemon

volumes:
  neo4j_data:
  redis_data:
  ui_node_modules:
  daemon_data: