docker-compose.yml•5.92 kB
# Omise MCP Server Development Environment
version: '3.8'
services:
# ============================================================================
# Main Application
# ============================================================================
omise-mcp-server:
build:
context: .
dockerfile: Dockerfile
target: production
container_name: omise-mcp-server
restart: unless-stopped
ports:
- "3000:3000"
environment:
- NODE_ENV=production
- PORT=3000
- LOG_LEVEL=info
- LOG_FORMAT=json
- OMISE_PUBLIC_KEY=${OMISE_PUBLIC_KEY}
- OMISE_SECRET_KEY=${OMISE_SECRET_KEY}
- OMISE_ENVIRONMENT=${OMISE_ENVIRONMENT:-production}
- OMISE_API_VERSION=2017-11-02
- OMISE_BASE_URL=https://api.omise.co
- OMISE_TIMEOUT=30000
- OMISE_RETRY_ATTEMPTS=3
- OMISE_RETRY_DELAY=1000
- RATE_LIMIT_ENABLED=true
- RATE_LIMIT_MAX_REQUESTS=100
- RATE_LIMIT_WINDOW_MS=60000
volumes:
- ./logs:/app/logs
- ./config:/app/config:ro
networks:
- omise-network
depends_on:
- redis
- prometheus
healthcheck:
test: ["CMD", "curl", "-f", "http://localhost:3000/health"]
interval: 30s
timeout: 10s
retries: 3
start_period: 40s
security_opt:
- no-new-privileges:true
read_only: true
tmpfs:
- /tmp
- /var/tmp
# ============================================================================
# Redis Cache
# ============================================================================
redis:
image: redis:7-alpine
container_name: omise-redis
restart: unless-stopped
ports:
- "6379:6379"
command: redis-server --appendonly yes --requirepass ${REDIS_PASSWORD:-defaultpassword}
volumes:
- redis-data:/data
networks:
- omise-network
healthcheck:
test: ["CMD", "redis-cli", "ping"]
interval: 30s
timeout: 10s
retries: 3
security_opt:
- no-new-privileges:true
# ============================================================================
# Prometheus Monitoring
# ============================================================================
prometheus:
image: prom/prometheus:latest
container_name: omise-prometheus
restart: unless-stopped
ports:
- "9090:9090"
volumes:
- ./monitoring/prometheus.yml:/etc/prometheus/prometheus.yml:ro
- prometheus-data:/prometheus
command:
- '--config.file=/etc/prometheus/prometheus.yml'
- '--storage.tsdb.path=/prometheus'
- '--web.console.libraries=/etc/prometheus/console_libraries'
- '--web.console.templates=/etc/prometheus/consoles'
- '--storage.tsdb.retention.time=200h'
- '--web.enable-lifecycle'
networks:
- omise-network
healthcheck:
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:9090/-/healthy"]
interval: 30s
timeout: 10s
retries: 3
# ============================================================================
# Grafana Dashboard
# ============================================================================
grafana:
image: grafana/grafana:latest
container_name: omise-grafana
restart: unless-stopped
ports:
- "3001:3000"
environment:
- GF_SECURITY_ADMIN_PASSWORD=${GRAFANA_PASSWORD:-admin}
- GF_USERS_ALLOW_SIGN_UP=false
- GF_SECURITY_DISABLE_GRAVATAR=true
volumes:
- grafana-data:/var/lib/grafana
- ./monitoring/grafana/dashboards:/etc/grafana/provisioning/dashboards:ro
- ./monitoring/grafana/datasources:/etc/grafana/provisioning/datasources:ro
networks:
- omise-network
depends_on:
- prometheus
healthcheck:
test: ["CMD-SHELL", "curl -f http://localhost:3000/api/health || exit 1"]
interval: 30s
timeout: 10s
retries: 3
# ============================================================================
# Nginx Reverse Proxy
# ============================================================================
nginx:
image: nginx:alpine
container_name: omise-nginx
restart: unless-stopped
ports:
- "80:80"
- "443:443"
volumes:
- ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro
- ./nginx/ssl:/etc/nginx/ssl:ro
- ./logs/nginx:/var/log/nginx
networks:
- omise-network
depends_on:
- omise-mcp-server
healthcheck:
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost/health"]
interval: 30s
timeout: 10s
retries: 3
# ============================================================================
# Log Aggregation
# ============================================================================
loki:
image: grafana/loki:latest
container_name: omise-loki
restart: unless-stopped
ports:
- "3100:3100"
volumes:
- ./monitoring/loki-config.yml:/etc/loki/local-config.yaml:ro
- loki-data:/loki
command: -config.file=/etc/loki/local-config.yaml
networks:
- omise-network
healthcheck:
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:3100/ready"]
interval: 30s
timeout: 10s
retries: 3
# ============================================================================
# Networks
# ============================================================================
networks:
omise-network:
driver: bridge
ipam:
config:
- subnet: 172.20.0.0/16
# ============================================================================
# Volumes
# ============================================================================
volumes:
redis-data:
driver: local
prometheus-data:
driver: local
grafana-data:
driver: local
loki-data:
driver: local