docker-compose.yml

# Local development stack. Additive to the native workflow: nothing in here
# modifies committed .env files — container-only environment variables override
# them via Symfony's env precedence. Spec:
# docs/superpowers/specs/2026-07-22-local-docker-design.md

# Pin the project name so container/volume identity does not depend on the
# checkout location (a worktree directory would otherwise derive e.g. "docker").
name: simple-feed-reader

services:
  mysql:
    image: mysql:8.4
    environment:
      MYSQL_ROOT_PASSWORD: root
      MYSQL_DATABASE: feedreader
      MYSQL_USER: feedreader
      MYSQL_PASSWORD: feedreader
    volumes:
      - mysql-data:/var/lib/mysql
      - ./docker/mysql/init.sql:/docker-entrypoint-initdb.d/init.sql:ro
    ports:
      # Non-standard host port so a natively installed MySQL never collides.
      - "127.0.0.1:33306:3306"
    healthcheck:
      test: ["CMD-SHELL", "mysqladmin ping -h 127.0.0.1 -uroot -p\"$$MYSQL_ROOT_PASSWORD\" --silent"]
      interval: 5s
      timeout: 3s
      retries: 20

  php:
    build:
      # Repo-root context shared with the prod target (docker/php/Dockerfile
      # is multi-stage); the root .dockerignore keeps the context small.
      context: .
      dockerfile: docker/php/Dockerfile
      target: dev
    volumes:
      - ./backend:/app
      # Tests read through paths that escape the backend mount (#593, #1094, #2176); without these the
      # container run is spuriously red and aborts in-container Infection. Read-only, and a directory,
      # not the one file: a single-file bind mount goes stale when git replaces the file.
      - ./docs:/docs:ro
      - ./frontend/src/app/reader:/frontend/src/app/reader:ro
      - ./frontend/src/app/settings/feed-directory:/frontend/src/app/settings/feed-directory:ro
    environment:
      # The container's own kernel cache (compiled container + cache pools), so a
      # native run over the same bind mount never shares its rate limiters (#1173).
      APP_CACHE_DIR: /app/var/cache-docker
      # Real env vars beat .env/.env.test file values (Symfony precedence), so
      # committed files stay untouched and the native SQLite workflow is
      # unaffected. In the test env Doctrine's dbname_suffix appends '_test',
      # so this one URL also points phpunit at feedreader_test.
      DATABASE_URL: "mysql://feedreader:feedreader@mysql:3306/feedreader?serverVersion=8.4&charset=utf8mb4"
      MAILER_DSN: "dynamic://default"
      MAILER_FALLBACK_DSN: "smtp://mailpit:1025"
      MAILER_FORCE_FALLBACK: "${MAILER_FORCE_FALLBACK:-0}"
      MEILISEARCH_URL: "http://meilisearch:7700"
      MEILISEARCH_KEY: "dev-master-key-not-a-secret"
      GRAFANA_LOKI_PUSH_URL: "http://loki:3100/loki/api/v1/push"
      GRAFANA_URL: "http://localhost:3000"
    extra_hosts:
      # Makes host.docker.internal work on Docker Engine variants where it is
      # not built in; harmless on Docker Desktop.
      - "host.docker.internal:host-gateway"
    depends_on:
      mysql:
        condition: service_healthy

  # The #311 background worker. Dev target has no entrypoint, so the command
  # overrides the base image's php-fpm CMD cleanly; the bind mount shares
  # vendor/ and var/ with the php container, so `composer install` there
  # serves this one too. -vv surfaces each schedule firing in the logs.
  worker:
    build:
      context: .
      dockerfile: docker/php/Dockerfile
      target: dev
    #
    # WARNING: this container drives the recommendation sweep AND a five-minute
    # feed refresh sweep against your development database — see
    # docs/local-docker.md §"The worker touches your development data".
    # `docker compose stop worker` while you run the e2e suites by hand.
    #
    # --memory-limit matches the prod service: the same consumer, the same
    # long-lived process, and a leak must be caught on a developer machine
    # before it reaches a server.
    #
    # 128M was below what one recommendation wave legitimately needs. A wave
    # reads several answer streams at once and decodes each, and a run against
    # a local model exceeded it at 201 MB and restarted the consumer mid-wave,
    # throwing that wave's provider spend away (#437). The bounds that stop a
    # runaway now live where the runaway is — the request's own token ceiling
    # and the reader's answer cap — so this number no longer has to double as
    # one.
    command:
      - php
      - bin/console
      - messenger:consume
      - scheduler_worker
      - -vv
      - --time-limit=3600
      - --memory-limit=512M
    # `always`, not `unless-stopped`: the two behave identically for a crash or
    # a clean --time-limit exit, but they differ after someone stops the worker
    # by hand — as the warning above tells you to before an e2e run.
    # `unless-stopped` remembers that stop forever, so a worker stopped for one
    # e2e run stays dead across reboots and nothing ever says so. That is how
    # the sweep was silently down for a day. `always` brings it back with the
    # Docker daemon; only an explicit `docker compose start worker` is needed
    # within the same session.
    restart: always
    # The process being up is not the same as the sweep running: a wedged
    # consumer keeps the container "healthy" while doing nothing. The heartbeat
    # is the real signal, and the bound matches WorkerPresence::FRESH_SECONDS —
    # see docker/php/worker-healthcheck.php. Compose does not restart on
    # unhealthy, so this reports rather than repairs: `docker compose ps` names
    # the fault instead of leaving you to infer it from missing recommendations.
    healthcheck:
      test: ["CMD", "php", "/usr/local/bin/worker-healthcheck.php"]
      interval: 60s
      timeout: 15s
      retries: 2
      start_period: 60s
    volumes:
      - ./backend:/app
      - ./docker/php/worker-healthcheck.php:/usr/local/bin/worker-healthcheck.php:ro
    environment:
      APP_CACHE_DIR: /app/var/cache-docker
      DATABASE_URL: "mysql://feedreader:feedreader@mysql:3306/feedreader?serverVersion=8.4&charset=utf8mb4"
      MAILER_DSN: "dynamic://default"
      MAILER_FALLBACK_DSN: "smtp://mailpit:1025"
      MAILER_FORCE_FALLBACK: "${MAILER_FORCE_FALLBACK:-0}"
      MEILISEARCH_URL: "http://meilisearch:7700"
      MEILISEARCH_KEY: "dev-master-key-not-a-secret"
      GRAFANA_LOKI_PUSH_URL: "http://loki:3100/loki/api/v1/push"
      GRAFANA_URL: "http://localhost:3000"
    extra_hosts:
      - "host.docker.internal:host-gateway"
    depends_on:
      mysql:
        condition: service_healthy

  nginx:
    image: nginx:1.27-alpine
    volumes:
      - ./backend:/app:ro
      - ./docker/nginx/default.conf:/etc/nginx/conf.d/default.conf:ro
      - ./docker/nginx/gzip.conf:/etc/nginx/snippets/gzip.conf:ro
      - ./docker/certs:/etc/nginx/certs:ro
    ports:
      - "127.0.0.1:8080:80"
      - "127.0.0.1:8443:443"
    depends_on:
      - php

  mailpit:
    image: axllent/mailpit:latest
    ports:
      - "127.0.0.1:8025:8025"   # web inbox; SMTP (1025) stays internal to the compose network

  # The search engine, always on in dev so development runs against the same
  # path production does. No depends_on anywhere: the app answers searches from
  # the database whenever this container is absent or down, and an ordering
  # constraint would claim otherwise.
  meilisearch:
    image: getmeili/meilisearch:v1.13
    environment:
      MEILI_MASTER_KEY: "dev-master-key-not-a-secret"
      MEILI_ENV: "development"
    volumes:
      - meili-data:/meili_data
    ports:
      # Dashboard and API; internal traffic uses the compose network.
      - "127.0.0.1:7700:7700"

  # Log store, always on in dev (like meilisearch): the app pushes its JSON logs
  # here and Grafana reads them. No depends_on — the app fails open if Loki is
  # down (see LokiClient).
  loki:
    image: grafana/loki:3.4.2
    command: ["-config.file=/etc/loki/loki-config.yaml"]
    volumes:
      - ./docker/loki/loki-config.yaml:/etc/loki/loki-config.yaml:ro
      - loki-data:/loki
    ports:
      - "127.0.0.1:3100:3100"

  grafana:
    image: grafana/grafana:13.2.1
    environment:
      GF_SECURITY_ADMIN_PASSWORD: "admin"
      GF_AUTH_ANONYMOUS_ENABLED: "false"
      GF_USERS_ALLOW_SIGN_UP: "false"
    volumes:
      - ./docker/grafana/provisioning:/etc/grafana/provisioning:ro
      - ./docker/grafana/dashboards:/var/lib/grafana/dashboards:ro
      - grafana-data:/var/lib/grafana
    ports:
      - "127.0.0.1:3000:3000"
    depends_on:
      - loki

  # Default dev frontend: the Angular CLI dev server with live reload, proxying
  # /api and /state to nginx (frontend/proxy.conf.json), so the app is same-origin.
  # http://localhost is a secure context, so crypto.subtle (ALTCHA) works without TLS here.
  frontend:
    image: node:22-slim
    working_dir: /app
    # First run installs Linux deps into the named volume — the host's macOS
    # node_modules can't be reused (esbuild ships a platform-specific binary).
    # Subsequent ups find node_modules already there and boot straight into the
    # dev server. --poll makes file-watching work across the bind mount on macOS.
    # npm is pinned to 11 (node:22 ships 10.9.8) because the lockfile was authored
    # by npm 11; npm 10 mis-resolves a transitive dep (chokidar) and rejects it.
    command:
      - sh
      - -c
      - '[ -x node_modules/.bin/ng ] || { npm i -g npm@11 --silent && npm ci --no-audit --no-fund; }; exec node_modules/.bin/ng serve --host 0.0.0.0 --port 4200 --poll 2000 --allowed-hosts --proxy-config proxy.conf.json'
    volumes:
      - ./frontend:/app
      - frontend-node-modules:/app/node_modules
    ports:
      - "4200:4200"

volumes:
  mysql-data:
  frontend-node-modules:
  meili-data:
  loki-data:
  grafana-data: