docker-compose.yml

services:
  # Neo4j knowledge graph database (standalone mode for development/graph administration)
  # In production, Neo4j is embedded in the imas-codex container.
  # Use this standalone service only for: graph shell, data import/export, debugging.
  neo4j:
    image: neo4j:2026.01.4-community
    ports:
      - "${BOLT_PORT:-7687}:${BOLT_PORT:-7687}"
      - "${HTTP_PORT:-7474}:${HTTP_PORT:-7474}"
    environment:
      - NEO4J_AUTH=neo4j/${NEO4J_PASSWORD:-imas-codex}
      - NEO4J_PLUGINS=["apoc"]
      - NEO4J_server_bolt_listen__address=:${BOLT_PORT:-7687}
      - NEO4J_server_http_listen__address=:${HTTP_PORT:-7474}
    volumes:
      - neo4j_data:/data
      - neo4j_logs:/logs
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "wget", "-q", "--spider", "http://localhost:${HTTP_PORT:-7474}/"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 30s
    profiles:
      - graph

  imas-codex:
    image: imas-codex:${IDS_FILTER:-latest}
    build:
      context: .
      dockerfile: Dockerfile
      args:
        - BUILDKIT_INLINE_CACHE=1
        - IDS_FILTER=${IDS_FILTER}
        - GRAPH_TAG=${GRAPH_TAG:-latest}
        - GRAPH_PACKAGE=${GRAPH_PACKAGE:-imas-codex-graph-dd}
        - GHCR_REGISTRY=${GHCR_REGISTRY:-ghcr.io/iterorganization}
      secrets:
        - ghcr_token
    ports:
      - "8000:8000"
    environment:
      - PYTHONPATH=/app
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "curl", "-sf", "http://localhost:8000/health"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 60s

  # Optional: Add nginx reverse proxy for production
  nginx:
    image: nginx:alpine
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - ./nginx.conf:/etc/nginx/nginx.conf:ro
    depends_on:
      - imas-codex
    restart: unless-stopped
    profiles:
      - production

secrets:
  ghcr_token:
    environment: GHCR_TOKEN

volumes:
  neo4j_data:
  neo4j_logs: