docker-compose.deploy.yml

services:
  xray-proxy:
    image: ghcr.io/xtls/xray-core:latest
    restart: unless-stopped
    profiles: ["proxy"]
    command: ["run", "-c", "/etc/xray/config.json"]
    volumes:
      - ./xray-local/config.json:/etc/xray/config.json:ro
    networks:
      - platform-net

  backend-api:
    image: ${BACKEND_API_IMAGE}:${BACKEND_API_IMAGE_TAG}
    restart: unless-stopped
    environment:
      NODE_ENV: production
      PORT: 3000
      GRAPHQL_PATH: /graphql
      SCRAPER_CONTROL_URL: ${SCRAPER_CONTROL_URL:-http://scraper-service:3001}
      DATABASE_URL: ${DATABASE_URL}
      REDIS_URL: ${REDIS_URL}
      RABBITMQ_URL: ${RABBITMQ_URL}
      JWT_ACCESS_SECRET: ${JWT_ACCESS_SECRET}
      JWT_ACCESS_TTL: ${JWT_ACCESS_TTL:-15m}
      REFRESH_TOKEN_TTL_DAYS: ${REFRESH_TOKEN_TTL_DAYS:-30}
      INGEST_API_TOKEN: ${INGEST_API_TOKEN}
      ADMIN_EMAIL: ${ADMIN_EMAIL}
      ADMIN_PASSWORD: ${ADMIN_PASSWORD}
      ADMIN_FULL_NAME: ${ADMIN_FULL_NAME:-Deploy Administrator}
      ENABLED_SOURCES: ${ENABLED_SOURCES}
      LOG_LEVEL: ${LOG_LEVEL:-info}
      THROTTLE_TTL_MS: ${THROTTLE_TTL_MS:-60000}
      THROTTLE_LIMIT: ${THROTTLE_LIMIT:-120}
      MINIO_ROOT_USER: ${MINIO_ROOT_USER}
      MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD}
      MINIO_BUCKET: ${MINIO_BUCKET}
      S3_ENDPOINT: ${S3_ENDPOINT}
      S3_REGION: ${S3_REGION}
      S3_ACCESS_KEY: ${S3_ACCESS_KEY}
      S3_SECRET_KEY: ${S3_SECRET_KEY}
      S3_FORCE_PATH_STYLE: ${S3_FORCE_PATH_STYLE:-true}
    ports:
      - "${BACKEND_PORT:-3000}:3000"
    healthcheck:
      test:
        [
          "CMD-SHELL",
          "wget -qO- http://127.0.0.1:3000/api/health/ready | grep -q '\"status\":\"ready\"'"
        ]
      interval: 10s
      timeout: 5s
      retries: 20
      start_period: 30s
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
      rabbitmq:
        condition: service_healthy
      minio:
        condition: service_healthy
      minio-init:
        condition: service_completed_successfully
    networks:
      - platform-net

  scraper-service:
    image: ${SCRAPER_SERVICE_IMAGE}:${SCRAPER_SERVICE_IMAGE_TAG}
    restart: unless-stopped
    environment:
      NODE_ENV: production
      CONTROL_HOST: ${SCRAPER_CONTROL_HOST:-0.0.0.0}
      CONTROL_PORT: ${SCRAPER_CONTROL_PORT:-3001}
      BACKEND_INTERNAL_URL: ${BACKEND_INTERNAL_URL:-http://backend-api:3000/api/internal/scraper/config}
      BACKEND_SOURCE_RUNS_URL: ${BACKEND_SOURCE_RUNS_URL:-http://backend-api:3000/api/internal/scraper/source-runs}
      API_INGEST_TOKEN: ${API_INGEST_TOKEN}
      RABBITMQ_URL: ${RABBITMQ_URL}
      QUEUE_RAW_EVENT: source.raw.v1
      QUEUE_QUARANTINE_EVENT: source.raw.quarantine.v1
      SCRAPE_SCHEDULE: "${SCRAPE_SCHEDULE:-*/20 * * * *}"
      SHARED_CONTRACTS_DIR: /opt/shared-contracts
      S3_ENDPOINT: ${S3_ENDPOINT}
      S3_REGION: ${S3_REGION}
      S3_ACCESS_KEY: ${S3_ACCESS_KEY}
      S3_SECRET_KEY: ${S3_SECRET_KEY}
      S3_BUCKET: ${S3_BUCKET}
      S3_FORCE_PATH_STYLE: ${S3_FORCE_PATH_STYLE:-true}
      REQUEST_TIMEOUT_MS: ${REQUEST_TIMEOUT_MS:-15000}
      RETRY_ATTEMPTS: ${RETRY_ATTEMPTS:-3}
      RETRY_BASE_DELAY_MS: ${RETRY_BASE_DELAY_MS:-1000}
      CIRCUIT_BREAKER_FAILURE_THRESHOLD: ${CIRCUIT_BREAKER_FAILURE_THRESHOLD:-3}
      CIRCUIT_BREAKER_OPEN_MS: ${CIRCUIT_BREAKER_OPEN_MS:-600000}
      HTTP_PROXY: ${HTTP_PROXY:-}
      HTTPS_PROXY: ${HTTPS_PROXY:-}
      NO_PROXY: ${NO_PROXY:-localhost,127.0.0.1,backend-api,postgres,redis,rabbitmq,minio}
      ENABLED_SOURCES: ${ENABLED_SOURCES}
      EASUZ_BASE_URL: ${EASUZ_BASE_URL:-https://easuz.mosreg.ru}
      EASUZ_SEARCH_URL: ${EASUZ_SEARCH_URL:-https://easuz.mosreg.ru/tenders}
      EASUZ_MAX_ITEMS: ${EASUZ_MAX_ITEMS:-20}
      EASUZ_USER_AGENT: ${EASUZ_USER_AGENT:-NPPWEB procurement monitor/1.0 (+https://example.local/nppweb)}
      EIS_BASE_URL: ${EIS_BASE_URL:-https://zakupki.gov.ru}
      EIS_SEARCH_URL: ${EIS_SEARCH_URL:-https://zakupki.gov.ru/epz/order/extendedsearch/results.html?searchString=&morphology=on&sortDirection=false&recordsPerPage=_10&showLotsInfoHidden=false}
      EIS_MAX_ITEMS: ${EIS_MAX_ITEMS:-30}
      EIS_MAX_PAGES: ${EIS_MAX_PAGES:-8}
      EIS_RECORDS_PER_PAGE: ${EIS_RECORDS_PER_PAGE:-10}
      EIS_PUBLISH_DATE_FROM: ${EIS_PUBLISH_DATE_FROM:-2025-01-01}
      EIS_CONTRACTS_SEARCH_URL: ${EIS_CONTRACTS_SEARCH_URL:-https://zakupki.gov.ru/epz/contract/search/results.html?searchString=&recordsPerPage=_10}
      EIS_CONTRACTS_MAX_ITEMS: ${EIS_CONTRACTS_MAX_ITEMS:-40}
      EIS_CONTRACTS_223_SEARCH_URL: ${EIS_CONTRACTS_223_SEARCH_URL:-https://zakupki.gov.ru/epz/contractfz223/search/results.html?searchString=&recordsPerPage=_10}
      EIS_CONTRACTS_223_MAX_ITEMS: ${EIS_CONTRACTS_223_MAX_ITEMS:-80}
      EIS_USER_AGENT: ${EIS_USER_AGENT:-NPPWEB procurement monitor/1.0 (+https://example.local/nppweb)}
      RNP_BASE_URL: ${RNP_BASE_URL:-https://zakupki.gov.ru}
      RNP_SEARCH_URL: ${RNP_SEARCH_URL:-https://zakupki.gov.ru/epz/dishonestsupplier/search/results.html?searchString=&recordsPerPage=_10}
      RNP_MAX_ITEMS: ${RNP_MAX_ITEMS:-20}
      RNP_USER_AGENT: ${RNP_USER_AGENT:-NPPWEB procurement monitor/1.0 (+https://example.local/nppweb)}
      FEDRESURS_BASE_URL: ${FEDRESURS_BASE_URL:-https://bankrot.fedresurs.ru}
      FEDRESURS_API_URL: ${FEDRESURS_API_URL:-https://bank-publications-prod.fedresurs.ru}
      FEDRESURS_API_LOGIN: ${FEDRESURS_API_LOGIN:-}
      FEDRESURS_API_PASSWORD: ${FEDRESURS_API_PASSWORD:-}
      FEDRESURS_API_LOOKBACK_DAYS: ${FEDRESURS_API_LOOKBACK_DAYS:-31}
      FEDRESURS_SEARCH_URL: ${FEDRESURS_SEARCH_URL:-https://bankrot.fedresurs.ru/Messages.aspx}
      FEDRESURS_MAX_ITEMS: ${FEDRESURS_MAX_ITEMS:-20}
      FEDRESURS_USER_AGENT: ${FEDRESURS_USER_AGENT:-NPPWEB procurement monitor/1.0 (+https://example.local/nppweb)}
      FNS_BASE_URL: ${FNS_BASE_URL:-https://egrul.nalog.ru}
      FNS_LOOKUP_QUERIES: ${FNS_LOOKUP_QUERIES:-7707083893}
      FNS_MAX_ITEMS: ${FNS_MAX_ITEMS:-10}
      FNS_USER_AGENT: ${FNS_USER_AGENT:-NPPWEB procurement monitor/1.0 (+https://example.local/nppweb)}
      FNS_DOWNLOAD_EXTRACT: ${FNS_DOWNLOAD_EXTRACT:-true}
      GISTORGI_BASE_URL: ${GISTORGI_BASE_URL:-https://torgi.gov.ru}
      GISTORGI_SEARCH_URL: ${GISTORGI_SEARCH_URL:-https://torgi.gov.ru/new/public/lots/search}
      GISTORGI_MAX_ITEMS: ${GISTORGI_MAX_ITEMS:-20}
      GISTORGI_USER_AGENT: ${GISTORGI_USER_AGENT:-NPPWEB procurement monitor/1.0 (+https://example.local/nppweb)}
    volumes:
      - ./contracts:/opt/shared-contracts:ro
    depends_on:
      backend-api:
        condition: service_healthy
      rabbitmq:
        condition: service_healthy
      minio:
        condition: service_healthy
      minio-init:
        condition: service_completed_successfully
    networks:
      - platform-net

  processing-worker:
    image: ${PROCESSING_WORKER_IMAGE}:${PROCESSING_WORKER_IMAGE_TAG}
    restart: unless-stopped
    environment:
      NODE_ENV: production
      RABBITMQ_URL: ${RABBITMQ_URL}
      API_GRAPHQL_URL: ${API_GRAPHQL_URL:-http://backend-api:3000/graphql}
      API_INGEST_TOKEN: ${API_INGEST_TOKEN}
      QUEUE_RAW_EVENT: source.raw.v1
      QUEUE_RETRY_EVENT: source.raw.retry.v1
      QUEUE_DEAD_LETTER_EVENT: source.raw.dlq.v1
      QUEUE_NORMALIZED_EVENT: source.normalized.v1
      SHARED_CONTRACTS_DIR: /opt/shared-contracts
    volumes:
      - ./contracts:/opt/shared-contracts:ro
    depends_on:
      rabbitmq:
        condition: service_healthy
      backend-api:
        condition: service_healthy
    networks:
      - platform-net

  frontend:
    image: ${FRONTEND_IMAGE}:${FRONTEND_IMAGE_TAG}
    restart: unless-stopped
    ports:
      - "${FRONTEND_PORT:-8080}:80"
    depends_on:
      backend-api:
        condition: service_healthy
    networks:
      - platform-net

networks:
  platform-net: {}