docker-compose.yml

name: mosstar-dev-stack

services:
  traefik:
    image: traefik:v3.7.6
    command:
      - "--configFile=/etc/traefik/traefik.yml"
    restart: always
    ports:
      - "${HTTP_PORT}:80" # HTTP
      - "${POSTGRES_PORT}:5432" # Postgres
      - "${REDIS_PORT}:6379" # Redis
      - "${RABBITMQ_PORT}:5672" # RabbitMQ
      - "${MONGODB_PORT}:27017" # MongoDB
      - "${SMTP_PORT}:1025" # SMTP (Mailpit)
      - "${INFLUXDB_PORT}:8181" # InfluxDB3
      - "${SEQ_PORT}:5341" # Seq
    volumes:
      - ./volumes/traefik/traefik-config.yml:/etc/traefik/traefik.yml
      - /var/run/docker.sock:/var/run/docker.sock:ro
    environment:
      TZ: "Europe/Istanbul"
    labels:
      - traefik.enable=true
      - traefik.http.routers.traefik.rule=Host(`traefik.${LOCAL_TLD:-internal}`)
      - traefik.http.routers.traefik.service=api@internal

  portainer:
    image: portainer/portainer-ce:2.40.0
    command: -H unix:///var/run/docker.sock
    restart: always
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - portainer-data:/data
    labels:
      - traefik.enable=true
      - traefik.http.routers.portainer.rule=Host(`portainer.${LOCAL_TLD:-internal}`)
      - traefik.http.routers.portainer.entrypoints=http
      - traefik.http.services.portainer.loadbalancer.server.port=9000

  postgres:
    build:
      context: ./images/postgres
      dockerfile: Dockerfile
    restart: always
    volumes:
      - postgres-data:/var/lib/postgresql/data
    environment:
      POSTGRES_USER: ${DEFAULT_USERNAME}
      POSTGRES_PASSWORD: ${DEFAULT_PASSWORD}
    labels:
      - traefik.enable=true
      - traefik.tcp.routers.postgres.rule=HostSNI(`*`)
      - traefik.tcp.routers.postgres.entrypoints=postgres
      - traefik.tcp.services.postgres.loadbalancer.server.port=5432

  pgadmin:
    image: dpage/pgadmin4:9.14
    restart: always
    volumes:
      - pgadmin-data:/var/lib/pgadmin
      - ./volumes/pgadmin/servers.json:/pgadmin4/servers.json
    environment:
      PGADMIN_DEFAULT_EMAIL: ${DEFAULT_USER_EMAIL}
      PGADMIN_DEFAULT_PASSWORD: ${DEFAULT_PASSWORD}
    labels:
      - traefik.enable=true
      - traefik.http.routers.pgadmin.rule=Host(`pgadmin.${LOCAL_TLD:-internal}`)
      - traefik.http.routers.pgadmin.entrypoints=http
      - traefik.http.services.pgadmin.loadbalancer.server.port=80

  redis:
    image: redis:8.6-alpine
    restart: always
    volumes:
      - redis-data:/data
    labels:
      - traefik.enable=true
      - traefik.tcp.routers.redis.rule=HostSNI(`*`)
      - traefik.tcp.routers.redis.entrypoints=redis
      - traefik.tcp.services.redis.loadbalancer.server.port=6379

  geoserver:
    image: kartoza/geoserver:2.27.2
    restart: unless-stopped
    volumes:
      - geoserver-data:/opt/geoserver/data_dir
    environment:
      GEOSERVER_ADMIN_USER: ${DEFAULT_USERNAME}
      GEOSERVER_ADMIN_PASSWORD: ${DEFAULT_PASSWORD}
      ROOT_WEBAPP_REDIRECT: true
    labels:
      - traefik.enable=true
      - traefik.http.routers.geoserver.rule=Host(`geoserver.${LOCAL_TLD:-internal}`)
      - traefik.http.routers.geoserver.entrypoints=http
      - traefik.http.services.geoserver.loadbalancer.server.port=8080

  minio:
    image: minio/minio:RELEASE.2025-09-07T16-13-09Z
    command: server /data --console-address ":9001"
    restart: always
    volumes:
      - minio-data:/data
    environment:
      MINIO_ROOT_USER: ${DEFAULT_USERNAME}
      MINIO_ROOT_PASSWORD: ${DEFAULT_PASSWORD}
      MINIO_BROWSER_REDIRECT_URL: http://minio-console.${LOCAL_TLD:-internal}
    labels:
      - traefik.enable=true

      - traefik.http.routers.minio.rule=Host(`minio.${LOCAL_TLD:-internal}`)
      - traefik.http.routers.minio.entrypoints=http
      - traefik.http.routers.minio.service=minio
      - traefik.http.services.minio.loadbalancer.server.port=9000

      - traefik.http.routers.minio-console.rule=Host(`minio-console.${LOCAL_TLD:-internal}`)
      - traefik.http.routers.minio-console.entrypoints=http
      - traefik.http.routers.minio-console.service=minio-console
      - traefik.http.services.minio-console.loadbalancer.server.port=9001

  keycloak:
    image: quay.io/keycloak/keycloak:25.0.2
    command: "start-dev"
    restart: always
    depends_on:
      - postgres
    volumes:
      - keycloak-data:/opt/keycloak
      - ./volumes/keycloak/idm-theme/:/opt/keycloak/themes/idmapp/
      - ./volumes/keycloak/uab-theme/:/opt/keycloak/themes/uab/
    environment:
      # DB Configuration
      KC_DB: postgres
      KC_DB_URL: "jdbc:postgresql://postgres:5432/keycloak"
      KC_DB_USERNAME: keycloak
      KC_DB_PASSWORD: keycloak
      # Server Configuration
      KC_HOSTNAME: http://keycloak.${LOCAL_TLD:-internal}
      KEYCLOAK_ADMIN: ${DEFAULT_USERNAME}
      KEYCLOAK_ADMIN_PASSWORD: ${DEFAULT_PASSWORD}
    labels:
      - traefik.enable=true
      - traefik.http.routers.keycloak.rule=Host(`keycloak.${LOCAL_TLD:-internal}`)
      - traefik.http.routers.keycloak.entrypoints=http
      - traefik.http.services.keycloak.loadbalancer.server.port=8080

  elasticsearch:
    image: docker.elastic.co/elasticsearch/elasticsearch:${ELASTIC_VERSION}
    restart: unless-stopped
    volumes:
      - elasticsearch-data:/usr/share/elasticsearch/data
    environment:
      - discovery.type=single-node
      - xpack.security.enabled=true
      - xpack.security.audit.enabled=true
      - "ES_JAVA_OPTS=-Xms512m -Xmx512m"
      - ELASTIC_PASSWORD=${DEFAULT_PASSWORD}
    labels:
      - traefik.enable=true
      - traefik.http.routers.elasticsearch.rule=Host(`elasticsearch.${LOCAL_TLD:-internal}`)
      - traefik.http.routers.elasticsearch.entrypoints=http
      - traefik.http.services.elasticsearch.loadbalancer.server.port=9200

  kibana:
    image: docker.elastic.co/kibana/kibana:${ELASTIC_VERSION}
    restart: unless-stopped
    depends_on:
      - elasticsearch
    environment:
      ELASTICSEARCH_HOSTS: http://elasticsearch.${LOCAL_TLD:-internal}:9200
      ELASTICSEARCH_USERNAME: elastic
      ELASTICSEARCH_PASSWORD: ${DEFAULT_PASSWORD}
      SERVER_PUBLICBASEURL: http://kibana.${LOCAL_TLD:-internal}
    labels:
      - traefik.enable=true
      - traefik.http.routers.kibana.rule=Host(`kibana.${LOCAL_TLD:-internal}`)
      - traefik.http.routers.kibana.entrypoints=http
      - traefik.http.services.kibana.loadbalancer.server.port=5601

  apm-server:
    image: docker.elastic.co/apm/apm-server:${ELASTIC_VERSION}
    restart: unless-stopped
    depends_on:
      - elasticsearch
      - kibana
    command: >
      apm-server -e
        -E apm-server.rum.enabled=true
        -E setup.kibana.host=kibana:5601
        -E setup.template.settings.index.number_of_replicas=0
        -E output.elasticsearch.hosts=["elasticsearch:9200"]
        -E output.elasticsearch.username=elastic
        -E output.elasticsearch.password=$DEFAULT_PASSWORD
        -E apm-server.auth.secret_token=$ELASTIC_APM_SECRET_TOKEN
    labels:
      - traefik.enable=true
      - traefik.http.routers.apm-server.rule=Host(`apm.${LOCAL_TLD:-internal}`)
      - traefik.http.routers.apm-server.entrypoints=http
      - traefik.http.services.apm-server.loadbalancer.server.port=8200

  rabbitmq:
    image: rabbitmq:4.2.5-management-alpine
    restart: unless-stopped
    volumes:
      - rabbitmq-data:/var/lib/rabbitmq
    environment:
      RABBITMQ_DEFAULT_USER: ${DEFAULT_USERNAME}
      RABBITMQ_DEFAULT_PASS: ${DEFAULT_PASSWORD}
    labels:
      - traefik.enable=true

      - traefik.tcp.routers.rabbitmq.rule=HostSNI(`*`)
      - traefik.tcp.routers.rabbitmq.entrypoints=rabbitmq
      - traefik.tcp.routers.rabbitmq.service=rabbitmq
      - traefik.tcp.services.rabbitmq.loadbalancer.server.port=5672

      - traefik.http.routers.rabbitmq-console.rule=Host(`rabbitmq.${LOCAL_TLD:-internal}`)
      - traefik.http.routers.rabbitmq-console.entrypoints=http
      - traefik.http.routers.rabbitmq-console.service=rabbitmq-console
      - traefik.http.services.rabbitmq-console.loadbalancer.server.port=15672

  mongo:
    image: mongo:8.2.4
    restart: unless-stopped
    volumes:
      - mongo-data:/data/db
    environment:
      MONGO_INITDB_ROOT_USERNAME: ${DEFAULT_USERNAME}
      MONGO_INITDB_ROOT_PASSWORD: ${DEFAULT_PASSWORD}
    labels:
      - traefik.enable=true
      - traefik.tcp.routers.mongodb.rule=HostSNI(`*`)
      - traefik.tcp.routers.mongodb.entrypoints=mongodb
      - traefik.tcp.services.mongodb.loadbalancer.server.port=27017

  grafana:
    image: grafana/grafana:12.3.2
    restart: unless-stopped
    volumes:
      - grafana-data:/var/lib/grafana
    environment:
      GF_SECURITY_ADMIN_USER: ${DEFAULT_USERNAME}
      GF_SECURITY_ADMIN_PASSWORD: ${DEFAULT_PASSWORD}
    labels:
      - traefik.enable=true
      - traefik.http.routers.grafana.rule=Host(`grafana.${LOCAL_TLD:-internal}`)
      - traefik.http.routers.grafana.entrypoints=http
      - traefik.http.services.grafana.loadbalancer.server.port=3000

  n8n:
    image: docker.n8n.io/n8nio/n8n:1.105.4
    restart: unless-stopped
    volumes:
      - n8n-data:/home/node/.n8n
    environment:
      DB_TYPE: postgresdb
      DB_POSTGRESDB_DATABASE: n8n
      DB_POSTGRESDB_HOST: postgres
      DB_POSTGRESDB_PORT: 5432
      DB_POSTGRESDB_USER: n8n
      DB_POSTGRESDB_SCHEMA: public
      DB_POSTGRESDB_PASSWORD: n8n
      N8N_SECURE_COOKIE: false
      GENERIC_TIMEZONE: ${DEFAULT_TIMEZONE}
      TZ: ${DEFAULT_TIMEZONE}
    labels:
      - traefik.enable=true
      - traefik.http.routers.n8n.rule=Host(`n8n.${LOCAL_TLD:-internal}`)
      - traefik.http.routers.n8n.entrypoints=http
      - traefik.http.services.n8n.loadbalancer.server.port=5678

  mailpit:
    image: axllent/mailpit:v1.29.0
    restart: always
    volumes:
      - mailpit-data:/data
    environment:
      TZ: "Europe/Istanbul"
      MP_DATABASE: "/data/database.db"
      MP_SMTP_AUTH: "${DEFAULT_USERNAME}:${DEFAULT_PASSWORD}"
      MP_SMTP_AUTH_ALLOW_INSECURE: "true"
    labels:
      - traefik.enable=true

      - traefik.tcp.routers.mailpit-smtp.rule=HostSNI(`*`)
      - traefik.tcp.routers.mailpit-smtp.entrypoints=smtp
      - traefik.tcp.routers.mailpit-smtp.service=mailpit-smtp
      - traefik.tcp.services.mailpit-smtp.loadbalancer.server.port=1025

      - traefik.http.routers.mailpit-ui.rule=Host(`mailpit.${LOCAL_TLD:-internal}`)
      - traefik.http.routers.mailpit-ui.entrypoints=http
      - traefik.http.routers.mailpit-ui.service=mailpit-ui
      - traefik.http.services.mailpit-ui.loadbalancer.server.port=8025

  influxdb:
    image: influxdb:3.8.3-core
    command:
      - influxdb3
      - serve
      - --node-id=node0
      - --object-store=file
      - --admin-token-file=/etc/influxdb3/admin-token.json
      - --data-dir=/var/lib/influxdb3/data
      - --plugin-dir=/var/lib/influxdb3/plugins
    restart: always
    user: "root"
    volumes:
      - influxdb-data:/var/lib/influxdb3/data
      - influxdb-plugins:/var/lib/influxdb3/plugins
      - ./volumes/influxdb/admin-token.json:/etc/influxdb3/admin-token.json:ro
    labels:
      - traefik.enable=true
      - traefik.tcp.routers.influxdb.rule=HostSNI(`*`)
      - traefik.tcp.routers.influxdb.entrypoints=influxdb
      - traefik.tcp.services.influxdb.loadbalancer.server.port=8181

  influxdb-explorer:
    image: influxdata/influxdb3-ui:1.6.3
    command:
      - --mode=admin
    restart: unless-stopped
    depends_on:
      - influxdb
    volumes:
      - influxdb-explorer-data:/db
    labels:
      - traefik.enable=true
      - traefik.http.routers.influxdb-explorer-ui.rule=Host(`influxdb.${LOCAL_TLD:-internal}`)
      - traefik.http.routers.influxdb-explorer-ui.entrypoints=http
      - traefik.http.services.influxdb-explorer-ui.loadbalancer.server.port=80

  seq:
    image: datalust/seq:2025.2
    restart: unless-stopped
    volumes:
      - seq-data:/data
    environment:
      ACCEPT_EULA: "Y"
      SEQ_PASSWORD: ${DEFAULT_PASSWORD}
      SEQ_API_CANONICALURI: http://seq.${LOCAL_TLD:-internal}
    labels:
      - traefik.enable=true

      - traefik.http.routers.seq-ui.rule=Host(`seq.${LOCAL_TLD:-internal}`)
      - traefik.http.routers.seq-ui.entrypoints=http
      - traefik.http.routers.seq-ui.service=seq-ui
      - traefik.http.services.seq-ui.loadbalancer.server.port=80

      - traefik.tcp.routers.seq-api.rule=HostSNI(`*`)
      - traefik.tcp.routers.seq-api.entrypoints=seq
      - traefik.tcp.routers.seq-api.service=seq-api
      - traefik.tcp.services.seq-api.loadbalancer.server.port=5341

  prometheus:
    image: prom/prometheus:v3.3.1
    restart: unless-stopped
    command:
      - '--config.file=/etc/prometheus/prometheus.yml'
      - '--storage.tsdb.path=/prometheus'
      - '--web.enable-lifecycle'
    volumes:
      - prometheus-data:/prometheus
      - ./volumes/prometheus/prometheus.yml:/etc/prometheus/prometheus.yml:ro
    labels:
      - traefik.enable=true
      - traefik.http.routers.prometheus.rule=Host(`prometheus.${LOCAL_TLD:-internal}`)
      - traefik.http.routers.prometheus.entrypoints=http
      - traefik.http.services.prometheus.loadbalancer.server.port=9090

  metabase:
    image: metabase/metabase:v0.60.0.x
    restart: unless-stopped
    depends_on:
      - postgres
    volumes:
      - /dev/urandom:/dev/random:ro
    environment:
      MB_DB_TYPE: postgres
      MB_DB_HOST: postgres
      MB_DB_PORT: 5432
      MB_DB_DBNAME: metabase
      MB_DB_USER: metabase
      MB_DB_PASS: metabase
      JAVA_TIMEZONE: Europe/Istanbul
    labels:
      - traefik.enable=true
      - traefik.http.routers.metabase.rule=Host(`metabase.${LOCAL_TLD:-internal}`)
      - traefik.http.routers.metabase.entrypoints=http
      - traefik.http.services.metabase.loadbalancer.server.port=3000

volumes:
  portainer-data:
  postgres-data:
  pgadmin-data:
  redis-data:
  geoserver-data:
  minio-data:
  keycloak-data:
  elasticsearch-data:
  rabbitmq-data:
  mongo-data:
  grafana-data:
  n8n-data:
  mailpit-data:
  seq-data:
  influxdb-data:
  influxdb-plugins:
  influxdb-explorer-data:
  prometheus-data: