docker-compose.yaml

version: '3.8'

services:
  # PostgreSQL Database
  postgres:
    image: postgres:16-alpine
    container_name: tradetally-db
    environment:
      POSTGRES_USER: ${DB_USER:-trader}
      POSTGRES_PASSWORD: ${DB_PASSWORD:?DB_PASSWORD must be set}
      POSTGRES_DB: ${DB_NAME:-tradetally}
    volumes:
      - postgres_data:/var/lib/postgresql/data
    networks:
      - trader-network
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${DB_USER:-trader} -d ${DB_NAME:-tradetally}"]
      interval: 10s
      timeout: 5s
      retries: 5

  # Application (Frontend + Backend)
  # Build locally to ensure latest features including chart fixes
  app:
    image: potentialmidas/tradetally:latest
    container_name: tradetally-app
    depends_on:
      postgres:
        condition: service_healthy
    environment:
      # Backend environment variables
      NODE_ENV: ${NODE_ENV:-production}
      PORT: ${PORT:-3000}
      DB_HOST: postgres
      DB_PORT: 5432
      DB_USER: ${DB_USER:-trader}
      DB_PASSWORD: ${DB_PASSWORD:?DB_PASSWORD must be set}
      DB_NAME: ${DB_NAME:-tradetally}
      JWT_SECRET: ${JWT_SECRET:?JWT_SECRET must be set}
      JWT_EXPIRES_IN: ${JWT_EXPIRES_IN:-7d}
      # Email configuration (optional)
      EMAIL_HOST: ${EMAIL_HOST:-smtp.gmail.com}
      EMAIL_PORT: ${EMAIL_PORT:-587}
      EMAIL_USER: ${EMAIL_USER:-}
      EMAIL_PASS: ${EMAIL_PASS:-}
      EMAIL_FROM: ${EMAIL_FROM:-noreply@tradetally.io}
      # Frontend API URL
      VITE_API_URL: ${VITE_API_URL:-http://localhost/api}
      # Instance Configuration
      INSTANCE_NAME: ${INSTANCE_NAME:-TradeTally}
      INSTANCE_URL: ${INSTANCE_URL:-}
      # CORS Configuration for Mobile Apps
      FRONTEND_URL: ${FRONTEND_URL:-http://localhost:5173}
      CORS_ORIGINS: ${CORS_ORIGINS:-}
      # Mobile Support Configuration
      ACCESS_TOKEN_EXPIRE: ${ACCESS_TOKEN_EXPIRE:-15m}
      REFRESH_TOKEN_EXPIRE: ${REFRESH_TOKEN_EXPIRE:-30d}
      MAX_DEVICES_PER_USER: ${MAX_DEVICES_PER_USER:-10}
      ENABLE_DEVICE_TRACKING: ${ENABLE_DEVICE_TRACKING:-true}
      # Analytics Configuration (Optional - Plausible, Umami, etc.)
      VITE_ANALYTICS_DOMAIN: ${VITE_ANALYTICS_DOMAIN:-}
      VITE_ANALYTICS_SITE_ID: ${VITE_ANALYTICS_SITE_ID:-}
      # Registration Control
      REGISTRATION_MODE: ${REGISTRATION_MODE:-open}
      # API Documentation
      ENABLE_SWAGGER: ${ENABLE_SWAGGER:-true}
      # External API Keys
      FINNHUB_API_KEY: ${FINNHUB_API_KEY:-}
      # Finnhub rate limits (Free: 60/min, 1/sec | Basic: 150/min, 30/sec | Pro: 300/min, 60/sec)
      FINNHUB_RATE_LIMIT_PER_MINUTE: ${FINNHUB_RATE_LIMIT_PER_MINUTE:-60}
      FINNHUB_RATE_LIMIT_PER_SECOND: ${FINNHUB_RATE_LIMIT_PER_SECOND:-1}
      ALPHA_VANTAGE_API_KEY: ${ALPHA_VANTAGE_API_KEY:-}
      GEMINI_API_KEY: ${GEMINI_API_KEY:-}
      ENABLE_AI_CUSIP_RESOLUTION: ${ENABLE_AI_CUSIP_RESOLUTION:-false}
      # Schwab OAuth Configuration
      SCHWAB_CLIENT_ID: ${SCHWAB_CLIENT_ID:-}
      SCHWAB_CLIENT_SECRET: ${SCHWAB_CLIENT_SECRET:-}
      SCHWAB_REDIRECT_URI: ${SCHWAB_REDIRECT_URI:-}
      # Broker token encryption key (generate with: openssl rand -hex 32)
      BROKER_ENCRYPTION_KEY: ${BROKER_ENCRYPTION_KEY:-}
      # Database Configuration
      RUN_MIGRATIONS: ${RUN_MIGRATIONS:-true}
      # Feature Toggles - Background Services
      # Set to 'false' to disable and reduce resource usage
      ENABLE_PRICE_MONITORING: ${ENABLE_PRICE_MONITORING:-true}
      ENABLE_TRADE_ENRICHMENT: ${ENABLE_TRADE_ENRICHMENT:-true}
      ENABLE_JOB_RECOVERY: ${ENABLE_JOB_RECOVERY:-true}
      ENABLE_GAMIFICATION: ${ENABLE_GAMIFICATION:-true}
      ENABLE_TRIAL_EMAILS: ${ENABLE_TRIAL_EMAILS:-true}
      ENABLE_OPTIONS_SCHEDULER: ${ENABLE_OPTIONS_SCHEDULER:-true}
      ENABLE_BACKUP_SCHEDULER: ${ENABLE_BACKUP_SCHEDULER:-true}
      ENABLE_ENRICHMENT_CACHE_CLEANUP: ${ENABLE_ENRICHMENT_CACHE_CLEANUP:-true}
      FEATURES_BEHAVIORAL_ANALYTICS_ENABLED: ${FEATURES_BEHAVIORAL_ANALYTICS_ENABLED:-true}
      # Logging
      LOG_LEVEL: ${LOG_LEVEL:-INFO}
      # Timezone Configuration (affects admin metrics "today" calculations)
      TZ: ${TZ:-UTC}
      # Rate Limiting (set RATE_LIMIT_ENABLED=false to disable for self-hosted)
      RATE_LIMIT_ENABLED: ${RATE_LIMIT_ENABLED:-true}
      RATE_LIMIT_MAX: ${RATE_LIMIT_MAX:-1000}
      RATE_LIMIT_WINDOW_MS: ${RATE_LIMIT_WINDOW_MS:-900000}
    ports:
      - "8080:80"
    volumes:
      - ./backend/src/logs:/app/backend/src/logs
      - ./backend/src/data:/app/backend/src/data
      - ./backend/uploads:/app/backend/uploads
    networks:
      - trader-network
    restart: unless-stopped

networks:
  trader-network:
    driver: bridge

volumes:
  postgres_data:
    driver: local