miden-source-code-verification/docker-compose.yml at main · walnuthq/miden-source-code-verification · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
services:
  postgres:
    image: postgres:16-alpine
    ports:
      # Host port is overridable to avoid clashing with a local Postgres.
      - "${POSTGRES_PORT:-5433}:5432"
    volumes:
      - miden-source-code-verification-postgres:/var/lib/postgresql/data
    environment:
      - POSTGRES_USER=miden-source-code-verification
      - POSTGRES_PASSWORD=miden_source_code_verification_dev_password
      - POSTGRES_DB=miden-source-code-verification
    healthcheck:
      test:
        [
          "CMD-SHELL",
          "pg_isready -U miden-source-code-verification -d miden-source-code-verification",
        ]
      interval: 5s
      timeout: 5s
      retries: 5
  api-compile:
    build:
      # Build context is the monorepo root so pnpm can resolve the workspace.
      context: .
      dockerfile: apps/api-compile/Dockerfile
    # Self-contained dev config (no .env file needed). CARGO_TARGET_DIR /
    # MIDEN_CLIENT_CACHE_DIR must match the warm cache paths baked into the image.
    environment:
      - PORT=8080
      - ALLOWED_ORIGINS=*
      - CARGO_TARGET_DIR=/cache/target
      - MIDEN_CLIENT_CACHE_DIR=/cache
    image: miden-source-code-verification-api-compile
    container_name: miden-source-code-verification-api-compile
    ports:
      - "8080:8080"
    healthcheck:
      # Health check via Node's global fetch (no extra tooling required).
      test:
        [
          "CMD",
          "node",
          "-e",
          "fetch('http://localhost:8080/').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))",
        ]
      interval: 5s
      timeout: 3s
      retries: 30
      start_period: 10s
  api-registry-migrate:
    build:
      # Build context is the monorepo root so pnpm can resolve the workspace.
      context: .
      dockerfile: apps/api-registry/Dockerfile
      target: migrate
    environment:
      # In-network address of the compose postgres service.
      - DATABASE_URL=postgresql://miden-source-code-verification:miden_source_code_verification_dev_password@postgres:5432/miden-source-code-verification
    image: miden-source-code-verification-api-registry-migrate
    container_name: miden-source-code-verification-api-registry-migrate
    depends_on:
      postgres:
        condition: service_healthy
    restart: "no"
  api-registry:
    build:
      # Build context is the monorepo root so pnpm can resolve the workspace.
      context: .
      dockerfile: apps/api-registry/Dockerfile
    # Self-contained dev config (no .env file needed); uses in-network service addresses.
    environment:
      - PORT=8081
      - ALLOWED_ORIGINS=*
      - DATABASE_URL=postgresql://miden-source-code-verification:miden_source_code_verification_dev_password@postgres:5432/miden-source-code-verification
      - API_COMPILE_URL=http://api-compile:8080
    image: miden-source-code-verification-api-registry
    container_name: miden-source-code-verification-api-registry
    depends_on:
      postgres:
        condition: service_healthy
      api-registry-migrate:
        condition: service_completed_successfully
      api-compile:
        condition: service_healthy
    ports:
      - "8081:8081"
    healthcheck:
      # node:slim has no curl; use Node's global fetch instead.
      test:
        [
          "CMD",
          "node",
          "-e",
          "fetch('http://localhost:8081/').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))",
        ]
      interval: 5s
      timeout: 3s
      retries: 30
      start_period: 10s
  web-verifier:
    build:
      # Build context is the monorepo root so pnpm can resolve the workspace.
      context: .
      dockerfile: apps/web-verifier/Dockerfile
    image: miden-source-code-verification-web-verifier
    container_name: miden-source-code-verification-web-verifier
    depends_on:
      api-registry:
        condition: service_healthy
    ports:
      # Host 5173 -> nginx :80. The SPA is served here and (per the baked-in
      # default) calls api-registry at the host-published http://localhost:8081.
      - "5173:80"
    healthcheck:
      # nginx:alpine ships busybox wget (no curl); probe the served index. Use
      # 127.0.0.1 (not localhost) — in-container `localhost` resolves to ::1,
      # but nginx `listen 80;` binds IPv4 only, so localhost would be refused.
      test: ["CMD-SHELL", "wget -qO /dev/null http://127.0.0.1/ || exit 1"]
      interval: 5s
      timeout: 3s
      retries: 30
      start_period: 5s
  web-viewer:
    build:
      # Build context is the monorepo root so pnpm can resolve the workspace.
      context: .
      dockerfile: apps/web-viewer/Dockerfile
    # Unlike web-verifier, the registry is called server-side (from route
    # loaders), so this is its in-network address, not the host-published one.
    environment:
      - API_REGISTRY_URL=http://api-registry:8081
    image: miden-source-code-verification-web-viewer
    container_name: miden-source-code-verification-web-viewer
    depends_on:
      api-registry:
        condition: service_healthy
    ports:
      # react-router-serve server-renders pages on PORT (5174, set in the image).
      - "5174:5174"
    healthcheck:
      # node:slim has no curl; use Node's global fetch instead.
      test:
        [
          "CMD",
          "node",
          "-e",
          "fetch('http://localhost:5174/').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))",
        ]
      interval: 5s
      timeout: 3s
      retries: 30
      start_period: 5s

volumes:
  miden-source-code-verification-postgres: