docker-compose.yml

# ─────────────────────────────────────────────────────────────────────────────
# DEVELOPMENT COMPOSE — DO NOT USE IN PRODUCTION
#
# This file is for local development. It bind-mounts your source code,
# runs Next.js and FastAPI in --reload / dev mode, exposes Postgres on
# the host port, and uses a hardcoded weak database password.
#
# For production self-hosting, use docker-compose.prod.yml + .env. See
# docs/SELF_HOSTING.md for the deployment guide.
# ─────────────────────────────────────────────────────────────────────────────

version: '3.8'

services:
  # PostgreSQL Database
  db:
    image: postgres:15-alpine
    container_name: mcpshield-db
    restart: unless-stopped
    environment:
      POSTGRES_USER: mcpshield
      POSTGRES_PASSWORD: mcpshield_secret
      POSTGRES_DB: mcpshield
    volumes:
      - postgres_data:/var/lib/postgresql/data
    ports:
      - "5432:5432"
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U mcpshield -d mcpshield"]
      interval: 10s
      timeout: 5s
      retries: 5
    networks:
      - mcpshield-network

  # FastAPI Backend
  backend:
    build:
      context: ./backend
      dockerfile: Dockerfile
    container_name: mcpshield-backend
    restart: unless-stopped
    environment:
      DATABASE_URL: postgresql://mcpshield:mcpshield_secret@db:5432/mcpshield
      JWT_SECRET: ${JWT_SECRET:?JWT_SECRET environment variable is required}
      API_URL: http://localhost:8000
      ALLOWED_ORIGINS: http://localhost:3000,http://127.0.0.1:3000
    ports:
      - "8000:8000"
    depends_on:
      db:
        condition: service_healthy
    volumes:
      - ./backend:/app
    command: uvicorn app.main:app --host 0.0.0.0 --port 8000 --reload
    networks:
      - mcpshield-network

  # Next.js Frontend
  frontend:
    build:
      context: ./frontend
      dockerfile: Dockerfile
    container_name: mcpshield-frontend
    restart: unless-stopped
    environment:
      NEXT_PUBLIC_API_URL: http://localhost:8000
      NEXT_PUBLIC_APP_URL: http://localhost:3000
    ports:
      - "3000:3000"
    depends_on:
      - backend
    volumes:
      - ./frontend:/app
      - /app/node_modules
      - /app/.next
    command: npm run dev
    networks:
      - mcpshield-network

volumes:
  postgres_data:
    driver: local

networks:
  mcpshield-network:
    driver: bridge