docker-compose.yml

services:
  valkey:
    image: valkey/valkey:8-alpine
    container_name: valkey
    ports:
      - "127.0.0.1:6379:6379"
    volumes:
      - valkey_data:/data
    command: valkey-server --appendonly yes
    restart: unless-stopped

  # Fast node - primary database for approved queries
  postgres-fast:
    image: postgres:16-alpine
    container_name: pgproxy-fast
    ports:
      - "127.0.0.1:5433:5432"
    environment:
      POSTGRES_USER: testuser
      POSTGRES_PASSWORD: testpass
      POSTGRES_DB: testdb
    volumes:
      - postgres_fast_data:/var/lib/postgresql/data
      - ./init.sql:/docker-entrypoint-initdb.d/init.sql:ro
    restart: unless-stopped
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U testuser -d testdb"]
      interval: 5s
      timeout: 5s
      retries: 5

  # Shunt node - slow/penalty node for rejected queries
  # Same schema as fast node
  postgres-shunt:
    image: postgres:16-alpine
    container_name: pgproxy-shunt
    ports:
      - "127.0.0.1:5434:5432"
    environment:
      POSTGRES_USER: testuser
      POSTGRES_PASSWORD: testpass
      POSTGRES_DB: testdb
    volumes:
      - postgres_shunt_data:/var/lib/postgresql/data
      - ./init.sql:/docker-entrypoint-initdb.d/init.sql:ro
    restart: unless-stopped
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U testuser -d testdb"]
      interval: 5s
      timeout: 5s
      retries: 5

  # Reporter database - stores query issues
  # Schema managed by proxy migrations (internal/db/migrations)
  postgres-reporter:
    image: postgres:16-alpine
    container_name: pgproxy-reporter
    ports:
      - "127.0.0.1:5435:5432"
    environment:
      POSTGRES_USER: testuser
      POSTGRES_PASSWORD: testpass
      POSTGRES_DB: testdb
    volumes:
      - postgres_reporter_data:/var/lib/postgresql/data
    restart: unless-stopped
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U testuser -d testdb"]
      interval: 5s
      timeout: 5s
      retries: 5

  pgproxy:
    build: .
    container_name: pgproxy
    ports:
      - "5432:5432"
      - "8080:8080"
    environment:
      # Connect to fast node by default
      PG_BACKEND_URL: ${PG_BACKEND_URL:-postgres://testuser:testpass@postgres-fast:5432/testdb?sslmode=disable}
      # Shunt node for rejected queries (shunt mode)
      SHUNT_NODE_URL: ${SHUNT_NODE_URL:-postgres://testuser:testpass@postgres-shunt:5432/testdb?sslmode=disable}
      # Reporter database URL (migrations run automatically)
      REPORTER_DB_URL: ${REPORTER_DB_URL:-postgres://testuser:testpass@postgres-reporter:5432/testdb?sslmode=disable}
      # Valkey/Redis URL for approval cache
      VALKEY_URL: ${VALKEY_URL:-redis://valkey:6379}
      # AWS credentials for Bedrock
      AWS_ACCESS_KEY_ID: ${AWS_ACCESS_KEY_ID}
      AWS_SECRET_ACCESS_KEY: ${AWS_SECRET_ACCESS_KEY}
      AWS_SESSION_TOKEN: ${AWS_SESSION_TOKEN}
      BEDROCK_AWS_REGION: ${BEDROCK_AWS_REGION:-${AWS_REGION:-eu-west-1}}
      # Proxy mode: non-blocking, blocking, shunt
      PROXY_MODE: ${PROXY_MODE:-non-blocking}
    extra_hosts:
      - "host.docker.internal:host-gateway"
    depends_on:
      valkey:
        condition: service_started
      postgres-fast:
        condition: service_healthy
      postgres-shunt:
        condition: service_healthy
      postgres-reporter:
        condition: service_healthy
    restart: unless-stopped
    healthcheck:
      test: ["CMD-SHELL", "curl -f http://localhost:8080/ready || exit 1"]
      interval: 10s
      timeout: 5s
      retries: 3
      start_period: 10s

volumes:
  valkey_data:
  postgres_fast_data:
  postgres_shunt_data:
  postgres_reporter_data: