docker-compose.yml

# StackRivet local development stack.
# Brings up MySQL, PostgreSQL, MinIO (S3-compatible), and optional Redis on default ports.
# Tested with Docker Compose v2.

services:
  mysql:
    image: mysql:8.4
    container_name: stackrivet-mysql
    restart: unless-stopped
    environment:
      MYSQL_ROOT_PASSWORD: stackrivet
      MYSQL_DATABASE: stackrivet
      MYSQL_USER: stackrivet
      MYSQL_PASSWORD: stackrivet
      LANG: C.UTF-8
    command:
      - --character-set-server=utf8mb4
      - --collation-server=utf8mb4_0900_ai_ci
      - --default-time-zone=+00:00
      - --max-connections=512
    ports:
      - "3306:3306"
    volumes:
      - mysql-data:/var/lib/mysql
    healthcheck:
      test: ["CMD", "mysqladmin", "ping", "-h", "127.0.0.1", "-uroot", "-pstackrivet"]
      interval: 10s
      timeout: 5s
      retries: 12

  postgres:
    image: postgres:18.4-alpine
    container_name: stackrivet-postgres
    restart: unless-stopped
    environment:
      POSTGRES_DB: stackrivet
      POSTGRES_USER: stackrivet
      POSTGRES_PASSWORD: stackrivet
      TZ: UTC
    ports:
      - "5432:5432"
    volumes:
      # postgres:18+ stores data in a major-version subdir; the mount must be the
      # parent (/var/lib/postgresql), NOT /…/data, or the image refuses to start.
      - postgres-data:/var/lib/postgresql
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U stackrivet -d stackrivet"]
      interval: 10s
      timeout: 5s
      retries: 12

  minio:
    image: minio/minio:RELEASE.2025-09-07T16-13-09Z
    container_name: stackrivet-minio
    restart: unless-stopped
    environment:
      MINIO_ROOT_USER: stackrivet
      MINIO_ROOT_PASSWORD: stackrivet
    command: server /data --console-address ":9001"
    ports:
      - "9000:9000"  # S3 API
      - "9001:9001"  # Web console
    volumes:
      - minio-data:/data
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:9000/minio/health/live"]
      interval: 10s
      timeout: 5s
      retries: 12

  # One-shot init: creates the buckets the app (default `stackrivet`) and the
  # asset IT (`stackrivet-assets`) expect, then exits. Idempotent — safe to re-run.
  # Buckets stay PRIVATE (no anonymous policy) so signed-URL access control holds.
  createbuckets:
    image: minio/mc:RELEASE.2025-08-13T08-35-41Z
    container_name: stackrivet-createbuckets
    depends_on:
      - minio
    restart: "no"
    entrypoint: >
      /bin/sh -c "
      until mc alias set local http://minio:9000 stackrivet stackrivet 2>/dev/null; do
        echo 'waiting for minio...'; sleep 2;
      done;
      mc mb --ignore-existing local/stackrivet &&
      mc mb --ignore-existing local/stackrivet-assets &&
      echo 'StackRivet buckets ready: stackrivet, stackrivet-assets'
      "

  # Redis backs JWT revocation and the actuator health check, so the default
  # profile expects it. The JVM still boots without Redis, but /actuator/health
  # reports DOWN and token revocation/logout fail until Redis is reachable.
  redis:
    image: redis:8.8-alpine
    container_name: stackrivet-redis
    restart: unless-stopped
    command: ["redis-server", "--appendonly", "yes"]
    ports:
      - "6379:6379"
    volumes:
      - redis-data:/data
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 3s
      retries: 12

volumes:
  mysql-data:
  postgres-data:
  minio-data:
  redis-data: