docker-compose.local.yml

# ─────────────────────────────────────────────────────────────────────────────
# AI Organization — Local / Self-Hosted Stack
# ─────────────────────────────────────────────────────────────────────────────
#
# Quick start:
#   1. cp .env.local.example .env.local
#   2. Fill in your API keys in .env.local
#   3. docker-compose -f go-backend/deploy/docker-compose.local.yml --env-file .env.local up --build
#   4. Open http://localhost:3000 — no login, straight to dashboard
#
# Differences from docker-compose.yml (SaaS):
#   - AUTH_DISABLED=true  → no Google OAuth, no JWT key files needed
#   - No JWT key volume mounts
#   - Dashboard service included (runs Next.js locally)
#   - All agents pre-started (CEO, CTO, Engineer, QA, DevOps, Finance)
#   - Migration runner included — auto-applies DB schema on start

version: '3.8'

services:

  # ── Database Auto-Migration ──────────────────────────────────────────────────
  # Runs all SQL migrations in order before any other service starts.
  migrate:
    image: migrate/migrate:v4.17.0
    volumes:
      - ./go-backend/migrations:/migrations
    command: [ "-path", "/migrations", "-database", "postgres://aiorg:${POSTGRES_PASSWORD:-secret}@postgres:5432/aiorg?sslmode=disable", "up" ]
    depends_on:
      postgres:
        condition: service_healthy
    networks:
      - aiorg-local
    restart: on-failure

  # ── Go Gateway ───────────────────────────────────────────────────────────────
  gateway:
    build:
      context: ./go-backend
      dockerfile: deploy/dockerfiles/Dockerfile.gateway
    ports:
      - "8080:8080"
    environment:
      - AUTH_DISABLED=true
      - LOCAL_USER_EMAIL=${LOCAL_USER_EMAIL:-local@localhost}
      - AI_ORG_ENV=local
      - AI_ORG_SERVER__PORT=8080
      - AI_ORG_POSTGRES__DSN=postgres://aiorg:${POSTGRES_PASSWORD:-secret}@postgres:5432/aiorg?sslmode=disable
      - AI_ORG_REDIS__ADDR=redis:6379
      - AI_ORG_KAFKA__BROKERS=kafka:29092
      - AI_ORG_ORCHESTRATOR_TARGET=orchestrator:9090
      - KEY_ENCRYPTION_KEY=${KEY_ENCRYPTION_KEY}
      - OPENAI_API_KEY=${OPENAI_API_KEY:-}
      - ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY:-}
      - GOOGLE_API_KEY=${GOOGLE_API_KEY:-}
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
      kafka:
        condition: service_healthy
      migrate:
        condition: service_completed_successfully
    networks:
      - aiorg-local
    restart: unless-stopped

  # ── Orchestrator ─────────────────────────────────────────────────────────────
  orchestrator:
    build:
      context: ./go-backend
      dockerfile: deploy/dockerfiles/Dockerfile.orchestrator
    ports:
      - "9090:9090"
    environment:
      - AI_ORG_ENV=local
      - AI_ORG_SERVER__GRPC_PORT=9090
      - AI_ORG_POSTGRES__DSN=postgres://aiorg:${POSTGRES_PASSWORD:-secret}@postgres:5432/aiorg?sslmode=disable
      - AI_ORG_REDIS__ADDR=redis:6379
      - AI_ORG_KAFKA__BROKERS=kafka:29092
      - KEY_ENCRYPTION_KEY=${KEY_ENCRYPTION_KEY}
      - OPENAI_API_KEY=${OPENAI_API_KEY:-}
      - ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY:-}
      - GOOGLE_API_KEY=${GOOGLE_API_KEY:-}
    depends_on:
      postgres:
        condition: service_healthy
      kafka:
        condition: service_healthy
      migrate:
        condition: service_completed_successfully
    networks:
      - aiorg-local
    restart: unless-stopped

  # ── WebSocket Hub ─────────────────────────────────────────────────────────────
  ws-hub:
    build:
      context: ./go-backend
      dockerfile: deploy/dockerfiles/Dockerfile.ws-hub
    ports:
      - "8081:8081"
    environment:
      - AI_ORG_ENV=local
      - AI_ORG_SERVER__PORT=8081
      - AI_ORG_REDIS__ADDR=redis:6379
      - AI_ORG_KAFKA__BROKERS=kafka:29092
    depends_on:
      kafka:
        condition: service_healthy
      redis:
        condition: service_healthy
    networks:
      - aiorg-local
    restart: unless-stopped

  # ── Next.js Dashboard ────────────────────────────────────────────────────────
  dashboard:
    build:
      context: ./dashboard
      dockerfile: Dockerfile
    ports:
      - "3000:3000"
    environment:
      - NEXT_PUBLIC_API_URL=http://localhost:8080
      - NEXT_PUBLIC_WS_URL=ws://localhost:8081
      - NEXT_PUBLIC_AUTH_DISABLED=true
      - NEXTAUTH_SECRET=local-secret-not-used-in-local-mode
      - NEXTAUTH_URL=http://localhost:3000
    depends_on:
      - gateway
    networks:
      - aiorg-local
    restart: unless-stopped

  # ── Python AI Agents (all roles) ─────────────────────────────────────────────
  agent-ceo:
    build:
      context: .
      dockerfile: Dockerfile.agent
      args:
        AGENT_ROLE: CEO
    environment:
      - AGENT_ROLE=CEO
      - OPENAI_API_KEY=${OPENAI_API_KEY:-}
      - ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY:-}
      - GOOGLE_API_KEY=${GOOGLE_API_KEY:-}
      - KAFKA_BOOTSTRAP_SERVERS=kafka:29092
    depends_on:
      kafka:
        condition: service_healthy
    networks:
      - aiorg-local
    restart: unless-stopped

  agent-cto:
    build:
      context: .
      dockerfile: Dockerfile.agent
      args:
        AGENT_ROLE: CTO
    environment:
      - AGENT_ROLE=CTO
      - OPENAI_API_KEY=${OPENAI_API_KEY:-}
      - ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY:-}
      - GOOGLE_API_KEY=${GOOGLE_API_KEY:-}
      - KAFKA_BOOTSTRAP_SERVERS=kafka:29092
    depends_on:
      kafka:
        condition: service_healthy
    networks:
      - aiorg-local
    restart: unless-stopped

  agent-engineer-backend:
    build:
      context: .
      dockerfile: Dockerfile.agent
      args:
        AGENT_ROLE: Engineer_Backend
    environment:
      - AGENT_ROLE=Engineer_Backend
      - OPENAI_API_KEY=${OPENAI_API_KEY:-}
      - ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY:-}
      - GOOGLE_API_KEY=${GOOGLE_API_KEY:-}
      - KAFKA_BOOTSTRAP_SERVERS=kafka:29092
    depends_on:
      kafka:
        condition: service_healthy
    networks:
      - aiorg-local
    restart: unless-stopped

  agent-engineer-frontend:
    build:
      context: .
      dockerfile: Dockerfile.agent
      args:
        AGENT_ROLE: Engineer_Frontend
    environment:
      - AGENT_ROLE=Engineer_Frontend
      - OPENAI_API_KEY=${OPENAI_API_KEY:-}
      - ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY:-}
      - GOOGLE_API_KEY=${GOOGLE_API_KEY:-}
      - KAFKA_BOOTSTRAP_SERVERS=kafka:29092
    depends_on:
      kafka:
        condition: service_healthy
    networks:
      - aiorg-local
    restart: unless-stopped

  agent-qa:
    build:
      context: .
      dockerfile: Dockerfile.agent
      args:
        AGENT_ROLE: QA
    environment:
      - AGENT_ROLE=QA
      - OPENAI_API_KEY=${OPENAI_API_KEY:-}
      - ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY:-}
      - GOOGLE_API_KEY=${GOOGLE_API_KEY:-}
      - KAFKA_BOOTSTRAP_SERVERS=kafka:29092
    depends_on:
      kafka:
        condition: service_healthy
    networks:
      - aiorg-local
    restart: unless-stopped

  agent-devops:
    build:
      context: .
      dockerfile: Dockerfile.agent
      args:
        AGENT_ROLE: DevOps
    environment:
      - AGENT_ROLE=DevOps
      - OPENAI_API_KEY=${OPENAI_API_KEY:-}
      - ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY:-}
      - GOOGLE_API_KEY=${GOOGLE_API_KEY:-}
      - KAFKA_BOOTSTRAP_SERVERS=kafka:29092
    depends_on:
      kafka:
        condition: service_healthy
    networks:
      - aiorg-local
    restart: unless-stopped

  agent-finance:
    build:
      context: .
      dockerfile: Dockerfile.agent
      args:
        AGENT_ROLE: Finance
    environment:
      - AGENT_ROLE=Finance
      - OPENAI_API_KEY=${OPENAI_API_KEY:-}
      - ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY:-}
      - GOOGLE_API_KEY=${GOOGLE_API_KEY:-}
      - KAFKA_BOOTSTRAP_SERVERS=kafka:29092
    depends_on:
      kafka:
        condition: service_healthy
    networks:
      - aiorg-local
    restart: unless-stopped

  # ── Infrastructure ────────────────────────────────────────────────────────────
  postgres:
    image: postgres:15-alpine
    environment:
      - POSTGRES_USER=aiorg
      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD:-secret}
      - POSTGRES_DB=aiorg
    ports:
      - "5432:5432"
    healthcheck:
      test: [ "CMD-SHELL", "pg_isready -U aiorg" ]
      interval: 5s
      timeout: 5s
      retries: 5
    networks:
      - aiorg-local
    volumes:
      - local_pgdata:/var/lib/postgresql/data

  redis:
    image: redis:7-alpine
    ports:
      - "6379:6379"
    healthcheck:
      test: [ "CMD", "redis-cli", "ping" ]
      interval: 5s
      timeout: 5s
      retries: 5
    networks:
      - aiorg-local
    volumes:
      - local_redisdata:/data

  zookeeper:
    image: confluentinc/cp-zookeeper:7.4.0
    environment:
      ZOOKEEPER_CLIENT_PORT: 2181
      ZOOKEEPER_TICK_TIME: 2000
    networks:
      - aiorg-local

  kafka:
    image: confluentinc/cp-kafka:7.4.0
    depends_on:
      - zookeeper
    ports:
      - "9092:9092"
    environment:
      KAFKA_BROKER_ID: 1
      KAFKA_ZOOKEEPER_CONNECT: zookeeper:2181
      KAFKA_ADVERTISED_LISTENERS: PLAINTEXT://kafka:29092,PLAINTEXT_HOST://localhost:9092
      KAFKA_LISTENER_SECURITY_PROTOCOL_MAP: PLAINTEXT:PLAINTEXT,PLAINTEXT_HOST:PLAINTEXT
      KAFKA_INTER_BROKER_LISTENER_NAME: PLAINTEXT
      KAFKA_OFFSETS_TOPIC_REPLICATION_FACTOR: 1
      KAFKA_AUTO_CREATE_TOPICS_ENABLE: "true"
    healthcheck:
      test: [ "CMD", "nc", "-z", "localhost", "9092" ]
      interval: 10s
      timeout: 5s
      retries: 5
    networks:
      - aiorg-local

networks:
  aiorg-local:


volumes:
  local_pgdata:
  local_redisdata: