Initial commit: Open sourcing all of the Maple Open Technologies code.

cloud/maplefile-backend/docker-compose.yml

@@ -0,0 +1,212 @@
+# Docker Compose for MapleFile Backend - Production
+version: '3.8'
+
+services:
+  # MapleFile Backend Application
+  backend:
+    build:
+      context: .
+      dockerfile: Dockerfile
+    container_name: maplefile-backend
+    restart: unless-stopped
+    ports:
+      - "${SERVER_PORT:-8000}:8000"
+    environment:
+      # Application
+      - APP_ENVIRONMENT=${APP_ENVIRONMENT:-production}
+      - APP_VERSION=${APP_VERSION:-0.1.0}
+      - APP_DATA_DIRECTORY=/app/data
+
+      # Server
+      - SERVER_HOST=0.0.0.0
+      - SERVER_PORT=8000
+      - SERVER_READ_TIMEOUT=${SERVER_READ_TIMEOUT:-30s}
+      - SERVER_WRITE_TIMEOUT=${SERVER_WRITE_TIMEOUT:-30s}
+      - SERVER_IDLE_TIMEOUT=${SERVER_IDLE_TIMEOUT:-60s}
+      - SERVER_SHUTDOWN_TIMEOUT=${SERVER_SHUTDOWN_TIMEOUT:-10s}
+
+      # Database (Cassandra)
+      - DATABASE_HOSTS=cassandra:9042
+      - DATABASE_KEYSPACE=${DATABASE_KEYSPACE:-maplefile}
+      - DATABASE_CONSISTENCY=${DATABASE_CONSISTENCY:-QUORUM}
+      - DATABASE_USERNAME=${DATABASE_USERNAME:-}
+      - DATABASE_PASSWORD=${DATABASE_PASSWORD:-}
+      - DATABASE_MIGRATIONS_PATH=./migrations
+
+      # Cache (Redis)
+      - CACHE_HOST=redis
+      - CACHE_PORT=6379
+      - CACHE_PASSWORD=${CACHE_PASSWORD:-}
+      - CACHE_DB=${CACHE_DB:-0}
+
+      # S3 Storage
+      - S3_ENDPOINT=${S3_ENDPOINT:-http://minio:9000}
+      - S3_ACCESS_KEY=${S3_ACCESS_KEY:-minioadmin}
+      - S3_SECRET_KEY=${S3_SECRET_KEY:-minioadmin}
+      - S3_BUCKET=${S3_BUCKET:-maplefile}
+      - S3_REGION=${S3_REGION:-us-east-1}
+      - S3_USE_SSL=${S3_USE_SSL:-false}
+
+      # JWT
+      - JWT_SECRET=${JWT_SECRET:-change-me-in-production}
+      - JWT_ACCESS_TOKEN_DURATION=${JWT_ACCESS_TOKEN_DURATION:-15m}
+      - JWT_REFRESH_TOKEN_DURATION=${JWT_REFRESH_TOKEN_DURATION:-168h}
+      - JWT_SESSION_DURATION=${JWT_SESSION_DURATION:-24h}
+
+      # Email (Mailgun)
+      - MAILGUN_API_KEY=${MAILGUN_API_KEY}
+      - MAILGUN_DOMAIN=${MAILGUN_DOMAIN}
+      - MAILGUN_API_BASE=${MAILGUN_API_BASE:-https://api.mailgun.net/v3}
+      - MAILGUN_FROM_EMAIL=${MAILGUN_FROM_EMAIL:-noreply@maplefile.app}
+      - MAILGUN_FROM_NAME=${MAILGUN_FROM_NAME:-MapleFile}
+      - MAILGUN_FRONTEND_URL=${MAILGUN_FRONTEND_URL}
+
+      # Invite Email Configuration
+      - MAPLEFILE_INVITE_MAX_EMAILS_PER_DAY=${MAPLEFILE_INVITE_MAX_EMAILS_PER_DAY:-3}
+
+      # Login Rate Limiting (production defaults - more restrictive)
+      - LOGIN_RATE_LIMIT_MAX_ATTEMPTS_PER_IP=${LOGIN_RATE_LIMIT_MAX_ATTEMPTS_PER_IP:-50}
+      - LOGIN_RATE_LIMIT_IP_WINDOW=${LOGIN_RATE_LIMIT_IP_WINDOW:-15m}
+      - LOGIN_RATE_LIMIT_MAX_FAILED_PER_ACCOUNT=${LOGIN_RATE_LIMIT_MAX_FAILED_PER_ACCOUNT:-10}
+      - LOGIN_RATE_LIMIT_LOCKOUT_DURATION=${LOGIN_RATE_LIMIT_LOCKOUT_DURATION:-30m}
+
+      # Logging
+      - LOG_LEVEL=${LOG_LEVEL:-info}
+      - LOG_FORMAT=${LOG_FORMAT:-json}
+
+      # Leader Election
+      - LEADER_ELECTION_ENABLED=${LEADER_ELECTION_ENABLED:-true}
+      - LEADER_ELECTION_LOCK_TTL=${LEADER_ELECTION_LOCK_TTL:-10s}
+      - LEADER_ELECTION_HEARTBEAT_INTERVAL=${LEADER_ELECTION_HEARTBEAT_INTERVAL:-3s}
+      - LEADER_ELECTION_RETRY_INTERVAL=${LEADER_ELECTION_RETRY_INTERVAL:-2s}
+    volumes:
+      - backend_data:/app/data
+    depends_on:
+      cassandra:
+        condition: service_healthy
+      redis:
+        condition: service_healthy
+      minio:
+        condition: service_healthy
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:8000/health"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 40s
+    networks:
+      - maplefile-net
+    logging:
+      driver: "json-file"
+      options:
+        max-size: "10m"
+        max-file: "3"
+
+  # Cassandra Database
+  cassandra:
+    image: cassandra:4.1
+    container_name: maplefile-cassandra
+    restart: unless-stopped
+    environment:
+      - CASSANDRA_CLUSTER_NAME=maplefile-cluster
+      - CASSANDRA_DC=${CASSANDRA_DC:-datacenter1}
+      - CASSANDRA_RACK=${CASSANDRA_RACK:-rack1}
+      - CASSANDRA_ENDPOINT_SNITCH=GossipingPropertyFileSnitch
+      - MAX_HEAP_SIZE=${CASSANDRA_MAX_HEAP_SIZE:-2G}
+      - HEAP_NEWSIZE=${CASSANDRA_HEAP_NEWSIZE:-512M}
+    volumes:
+      - cassandra_data:/var/lib/cassandra
+    healthcheck:
+      test: ["CMD-SHELL", "cqlsh -e 'describe cluster' || exit 1"]
+      interval: 30s
+      timeout: 10s
+      retries: 10
+      start_period: 90s
+    networks:
+      - maplefile-net
+    logging:
+      driver: "json-file"
+      options:
+        max-size: "10m"
+        max-file: "3"
+
+  # Redis Cache
+  redis:
+    image: redis:7-alpine
+    container_name: maplefile-redis
+    restart: unless-stopped
+    command: >
+      redis-server
+      --appendonly yes
+      --maxmemory ${REDIS_MAX_MEMORY:-512mb}
+      --maxmemory-policy allkeys-lru
+      --requirepass ${CACHE_PASSWORD:-}
+    volumes:
+      - redis_data:/data
+    healthcheck:
+      test: ["CMD", "redis-cli", "ping"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+    networks:
+      - maplefile-net
+    logging:
+      driver: "json-file"
+      options:
+        max-size: "10m"
+        max-file: "3"
+
+  # MinIO S3-compatible storage
+  minio:
+    image: minio/minio:latest
+    container_name: maplefile-minio
+    restart: unless-stopped
+    environment:
+      - MINIO_ROOT_USER=${S3_ACCESS_KEY:-minioadmin}
+      - MINIO_ROOT_PASSWORD=${S3_SECRET_KEY:-minioadmin}
+    volumes:
+      - minio_data:/data
+    command: server /data --console-address ":9001"
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:9000/minio/health/live"]
+      interval: 15s
+      timeout: 10s
+      retries: 5
+      start_period: 20s
+    networks:
+      - maplefile-net
+    logging:
+      driver: "json-file"
+      options:
+        max-size: "10m"
+        max-file: "3"
+
+  # MinIO Initialization
+  minio-init:
+    image: minio/mc:latest
+    container_name: maplefile-minio-init
+    depends_on:
+      minio:
+        condition: service_healthy
+    entrypoint: >
+      /bin/sh -c "
+      mc alias set myminio http://minio:9000 ${S3_ACCESS_KEY:-minioadmin} ${S3_SECRET_KEY:-minioadmin};
+      mc mb myminio/${S3_BUCKET:-maplefile} --ignore-existing;
+      echo 'MinIO initialization complete';
+      "
+    networks:
+      - maplefile-net
+
+volumes:
+  backend_data:
+    driver: local
+  cassandra_data:
+    driver: local
+  redis_data:
+    driver: local
+  minio_data:
+    driver: local
+
+networks:
+  maplefile-net:
+    driver: bridge