docker-compose.yml

# Trimmed dev stack: keythread + Jaeger only. No Backstage, no ngrok, no
# full Grafana/Prometheus stack — this is for exercising the correlation
# path locally and viewing traces, not reproducing idp-observ's full demo.
services:
  keythread:
    build: .
    container_name: keythread
    ports:
      - "8000:8000"
    environment:
      - LOG_LEVEL=INFO
      - OTEL_SERVICE_NAME=keythread
      - OTEL_EXPORTER_OTLP_ENDPOINT=http://jaeger:4317
      - TRACE_ID_HMAC_SECRET=${TRACE_ID_HMAC_SECRET:?set TRACE_ID_HMAC_SECRET in your .env}
      - GITLAB_WEBHOOK_SECRET=${GITLAB_WEBHOOK_SECRET:?set GITLAB_WEBHOOK_SECRET in your .env}
      - JIRA_WEBHOOK_SECRET=${JIRA_WEBHOOK_SECRET:?set JIRA_WEBHOOK_SECRET in your .env}
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8000/health/live"]
      interval: 30s
      timeout: 10s
      retries: 3
    depends_on:
      - jaeger
    networks:
      - keythread

  jaeger:
    image: jaegertracing/all-in-one:1.57
    container_name: jaeger
    ports:
      - "16686:16686" # Jaeger UI
      - "4317:4317" # OTLP gRPC
    environment:
      - COLLECTOR_OTLP_ENABLED=true
    networks:
      - keythread

networks:
  keythread:
    driver: bridge