docker-compose.yml

services:
  # PostgreSQL - Main database for Profile and Consent services
  postgresql:
    image: postgres:15-alpine
    container_name: pcm-postgresql
    environment:
      POSTGRES_USER: pcm
      POSTGRES_PASSWORD: pcm_dev_password
      POSTGRES_DB: pcm
    ports:
      - "8843:5432"
    volumes:
      - postgresql_data:/var/lib/postgresql/data
      - ./docker/init-databases.sql:/docker-entrypoint-initdb.d/init-databases.sql
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U pcm"]
      interval: 10s
      timeout: 5s
      retries: 5
    networks:
      - pcm-network

  # Redis - Caching layer
  redis:
    image: redis:7-alpine
    container_name: pcm-redis
    ports:
      - "6779:6379"
    command: redis-server --appendonly yes
    volumes:
      - redis_data:/data
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 5s
      retries: 5
    networks:
      - pcm-network

  # Zookeeper - Required for Kafka
  zookeeper:
    image: confluentinc/cp-zookeeper:7.5.3
    container_name: pcm-zookeeper
    environment:
      ZOOKEEPER_CLIENT_PORT: 2181
      ZOOKEEPER_TICK_TIME: 2000
    ports:
      - "2181:2181"
    volumes:
      - zookeeper_data:/var/lib/zookeeper/data
      - zookeeper_logs:/var/lib/zookeeper/log
    networks:
      - pcm-network

  # Kafka - Event streaming platform
  kafka:
    image: confluentinc/cp-kafka:7.5.3
    container_name: pcm-kafka
    depends_on:
      - zookeeper
    ports:
      - "9092:9092"
      - "9093:9093"
    environment:
      KAFKA_BROKER_ID: 1
      KAFKA_ZOOKEEPER_CONNECT: zookeeper:2181
      KAFKA_ADVERTISED_LISTENERS: PLAINTEXT://kafka:29092,PLAINTEXT_HOST://localhost:9092
      KAFKA_LISTENER_SECURITY_PROTOCOL_MAP: PLAINTEXT:PLAINTEXT,PLAINTEXT_HOST:PLAINTEXT
      KAFKA_INTER_BROKER_LISTENER_NAME: PLAINTEXT
      KAFKA_OFFSETS_TOPIC_REPLICATION_FACTOR: 1
      KAFKA_TRANSACTION_STATE_LOG_MIN_ISR: 1
      KAFKA_TRANSACTION_STATE_LOG_REPLICATION_FACTOR: 1
      KAFKA_AUTO_CREATE_TOPICS_ENABLE: "true"
    volumes:
      - kafka_data:/var/lib/kafka/data
    healthcheck:
      test: ["CMD", "kafka-broker-api-versions", "--bootstrap-server", "localhost:9092"]
      interval: 10s
      timeout: 10s
      retries: 5
    networks:
      - pcm-network

  # Schema Registry - Avro schema management
  schema-registry:
    image: confluentinc/cp-schema-registry:7.5.3
    container_name: pcm-schema-registry
    depends_on:
      - kafka
    ports:
      - "8081:8081"
    environment:
      SCHEMA_REGISTRY_HOST_NAME: schema-registry
      SCHEMA_REGISTRY_KAFKASTORE_BOOTSTRAP_SERVERS: kafka:29092
      SCHEMA_REGISTRY_LISTENERS: http://0.0.0.0:8081
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8081/"]
      interval: 10s
      timeout: 5s
      retries: 5
    networks:
      - pcm-network

  # Elasticsearch - Search and analytics engine for Segment Service
  elasticsearch:
    image: docker.elastic.co/elasticsearch/elasticsearch:8.11.3
    container_name: pcm-elasticsearch
    environment:
      - discovery.type=single-node
      - "ES_JAVA_OPTS=-Xms512m -Xmx512m"
      - xpack.security.enabled=false
      - xpack.security.enrollment.enabled=false
    ports:
      - "9200:9200"
      - "9300:9300"
    volumes:
      - elasticsearch_data:/usr/share/elasticsearch/data
    healthcheck:
      test: ["CMD-SHELL", "curl -f http://localhost:9200/_cluster/health || exit 1"]
      interval: 30s
      timeout: 10s
      retries: 5
    networks:
      - pcm-network

  # Kibana - Visualization for Elasticsearch
  kibana:
    image: docker.elastic.co/kibana/kibana:8.11.3
    container_name: pcm-kibana
    ports:
      - "5601:5601"
    environment:
      - ELASTICSEARCH_HOSTS=http://elasticsearch:9200
    depends_on:
      - elasticsearch
    networks:
      - pcm-network

  # Logstash - Log aggregation and processing
  logstash:
    image: docker.elastic.co/logstash/logstash:8.11.3
    container_name: pcm-logstash
    ports:
      - "5044:5044"
      - "9600:9600"
    volumes:
      - ./docker/logstash.conf:/usr/share/logstash/pipeline/logstash.conf:ro
    environment:
      - "LS_JAVA_OPTS=-Xmx256m -Xms256m"
      - ENVIRONMENT=development
    depends_on:
      - elasticsearch
    healthcheck:
      test: ["CMD-SHELL", "curl -f http://localhost:9600/_node/stats || exit 1"]
      interval: 30s
      timeout: 10s
      retries: 5
    networks:
      - pcm-network

  # HashiCorp Vault - Secrets management and PII encryption
  vault:
    image: hashicorp/vault:1.15
    container_name: pcm-vault
    ports:
      - "8200:8200"
    environment:
      VAULT_DEV_ROOT_TOKEN_ID: pcm-dev-root-token
      VAULT_DEV_LISTEN_ADDRESS: 0.0.0.0:8200
      VAULT_ADDR: http://0.0.0.0:8200
    cap_add:
      - IPC_LOCK
    volumes:
      - vault_data:/vault/data
      - vault_logs:/vault/logs
    command: server -dev -dev-root-token-id="pcm-dev-root-token" -dev-listen-address="0.0.0.0:8200"
    healthcheck:
      test: ["CMD", "vault", "status"]
      interval: 10s
      timeout: 5s
      retries: 5
    networks:
      - pcm-network

  # Kafka UI - Web interface for Kafka management
  kafka-ui:
    image: provectuslabs/kafka-ui:latest
    container_name: pcm-kafka-ui
    depends_on:
      - kafka
      - schema-registry
    ports:
      - "8095:8080"
    environment:
      KAFKA_CLUSTERS_0_NAME: pcm-local
      KAFKA_CLUSTERS_0_BOOTSTRAPSERVERS: kafka:29092
      KAFKA_CLUSTERS_0_SCHEMAREGISTRY: http://schema-registry:8081
    networks:
      - pcm-network

  # pgAdmin - PostgreSQL management interface
  pgadmin:
    image: dpage/pgadmin4:latest
    container_name: pcm-pgadmin
    environment:
      PGADMIN_DEFAULT_EMAIL: admin@pcm.dev
      PGADMIN_DEFAULT_PASSWORD: admin
      PGADMIN_CONFIG_SERVER_MODE: 'False'
    ports:
      - "5050:80"
    volumes:
      - pgadmin_data:/var/lib/pgadmin
    networks:
      - pcm-network

  # Prometheus - Metrics collection
  prometheus:
    image: prom/prometheus:latest
    container_name: pcm-prometheus
    ports:
      - "9090:9090"
    volumes:
      - ./docker/prometheus.yml:/etc/prometheus/prometheus.yml
      - prometheus_data:/prometheus
    command:
      - '--config.file=/etc/prometheus/prometheus.yml'
      - '--storage.tsdb.path=/prometheus'
    networks:
      - pcm-network

  # Grafana - Metrics visualization
  grafana:
    image: grafana/grafana:latest
    container_name: pcm-grafana
    ports:
      - "3000:3000"
    environment:
      GF_SECURITY_ADMIN_USER: admin
      GF_SECURITY_ADMIN_PASSWORD: admin
      GF_INSTALL_PLUGINS: grafana-piechart-panel
    volumes:
      - grafana_data:/var/lib/grafana
      - ./docker/grafana/dashboards:/etc/grafana/provisioning/dashboards
      - ./docker/grafana/datasources:/etc/grafana/provisioning/datasources
    depends_on:
      - prometheus
    networks:
      - pcm-network

  # Jaeger - Distributed tracing
  jaeger:
    image: jaegertracing/all-in-one:latest
    container_name: pcm-jaeger
    ports:
      - "16686:16686" # UI
      - "4317:4317"  # OTLP gRPC (internal collector)
      - "4318:4318"  # OTLP HTTP (internal collector)
      - "9411:9411"  # Zipkin (legacy)
    networks:
      - pcm-network

  # OpenTelemetry Collector
  otel-collector:
    image: otel/opentelemetry-collector-contrib:latest
    container_name: pcm-otel-collector
    command: ["--config=/etc/otel-collector-config.yaml"]
    volumes:
      - ./docker/otel-collector-config.yaml:/etc/otel-collector-config.yaml
    ports:
      - "4317:4317" # OTLP gRPC
      - "4318:4318" # OTLP HTTP
      - "8888:8888" # Metrics
    depends_on:
      - jaeger
      - prometheus
    networks:
      - pcm-network

  # Keycloak - Identity and Access Management
  keycloak:
    image: quay.io/keycloak/keycloak:23.0.1
    container_name: pcm-keycloak
    command: start-dev --import-realm
    environment:
      KC_HOSTNAME: localhost
      KC_HOSTNAME_PORT: 8090
      KC_HOSTNAME_STRICT: "false"
      KC_HTTP_PORT: 8080
      KC_HTTP_RELATIVE_PATH: /auth
      KEYCLOAK_ADMIN: admin
      KEYCLOAK_ADMIN_PASSWORD: admin
    ports:
      - "8090:8080"
    volumes:
      - ./docker/keycloak/pcm-realm.json:/opt/keycloak/data/import/pcm-realm.json
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8080/auth/health/live"]
      interval: 10s
      timeout: 5s
      retries: 5
    networks:
      - pcm-network

  # RabbitMQ - Alternative messaging broker for portability verification
  rabbitmq:
    image: rabbitmq:3-management-alpine
    container_name: pcm-rabbitmq
    ports:
      - "5672:5672"   # AMQP
      - "15672:15672" # Management UI
    environment:
      RABBITMQ_DEFAULT_USER: guest
      RABBITMQ_DEFAULT_PASS: guest
    healthcheck:
      test: ["CMD", "rabbitmq-diagnostics", "check_running"]
      interval: 10s
      timeout: 5s
      retries: 5
    networks:
      - pcm-network

volumes:
  postgresql_data:
  redis_data:
  zookeeper_data:
  zookeeper_logs:
  kafka_data:
  elasticsearch_data:
  vault_data:
  vault_logs:
  pgadmin_data:
  prometheus_data:
  grafana_data:

networks:
  pcm-network:
    driver: bridge