# Quick start with the published Docker Hub runtime image.
#
# Requires a git checkout of this repo (gateway nginx config + lab TLS are
# bind-mounted from ./docker/). The simulator image itself is pulled from Hub.
#
#   docker compose -f docker-compose.release.yml up -d --wait
#   docker compose -f docker-compose.release.yml run --rm --entrypoint python \
#     simulator -m app.openstack.seed_cli --profile minimal
#
# Override the image tag:
#   IMAGE_TAG=0.1.0 docker compose -f docker-compose.release.yml up -d
#
# Clients should hit api-gateway OpenStack ports (5000 keystone, 8774 nova, …).

name: openstack-api-simulator-release

x-app-image: &app-image
  image: ${DOCKER_IMAGE:-inecs/openstack-api-simulator}:${IMAGE_TAG:-latest}

x-app-env: &app-env
  DATABASE_URL: postgresql://openstack:openstack@postgres:5432/openstack_simulator
  LOG_LEVEL: ${LOG_LEVEL:-INFO}
  TICKET_SIGNING_KEY: ${TICKET_SIGNING_KEY:-development-only-signing-key-change-me}
  TASK_WORKER_CONCURRENCY: ${TASK_WORKER_CONCURRENCY:-2}
  SIMULATION_TIME_SCALE: ${SIMULATION_TIME_SCALE:-10}
  APP_PORT: "8080"

networks:
  simulator:
    driver: bridge

volumes:
  postgres-data:

services:
  postgres:
    image: postgres:17.5-bookworm
    restart: unless-stopped
    networks: [simulator]
    environment:
      POSTGRES_DB: openstack_simulator
      POSTGRES_USER: openstack
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-openstack}
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U openstack -d openstack_simulator"]
      interval: 5s
      timeout: 3s
      retries: 10
      start_period: 5s
    volumes:
      - postgres-data:/var/lib/postgresql/data
    ports:
      - "${POSTGRES_PORT:-127.0.0.1:5433}:5432"

  migrate:
    <<: *app-image
    networks: [simulator]
    environment:
      <<: *app-env
      DATABASE_URL: postgresql://openstack:${POSTGRES_PASSWORD:-openstack}@postgres:5432/openstack_simulator
    depends_on:
      postgres:
        condition: service_healthy
    entrypoint: ["python"]
    command: ["-m", "app.db.migrate_cli"]
    restart: "no"

  simulator:
    <<: *app-image
    restart: unless-stopped
    networks: [simulator]
    environment:
      <<: *app-env
      DATABASE_URL: postgresql://openstack:${POSTGRES_PASSWORD:-openstack}@postgres:5432/openstack_simulator
    depends_on:
      migrate:
        condition: service_completed_successfully
    healthcheck:
      test:
        [
          "CMD",
          "python",
          "-c",
          "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8080/health/ready', timeout=2)",
        ]
      interval: 10s
      timeout: 3s
      retries: 8
      start_period: 20s
    expose:
      - "8080"

  api-gateway:
    image: nginx:1.28.0-alpine
    restart: unless-stopped
    networks: [simulator]
    depends_on:
      simulator:
        condition: service_healthy
    ports:
      - "80:80"  # openstack
      - "443:443"  # openstack
      - "1234:1234"  # openstack
      - "5000:5000"  # openstack
      - "5050:5050"  # openstack
      - "8888:8888"  # openstack zaqar
      - "9322:9322"  # openstack watcher
      - "6385:6385"  # openstack
      - "8000:8000"  # openstack
      - "8003:8003"  # openstack
      - "8004:8004"  # openstack
      - "8042:8042"  # openstack
      - "8080:8080"  # openstack
      - "8774:8774"  # openstack
      - "8776:8776"  # openstack
      - "8779:8779"  # openstack
      - "8786:8786"  # openstack
      - "8889:8889"  # openstack
      - "8989:8989"  # openstack
      - "8999:8999"  # openstack
      - "9001:9001"  # openstack
      - "9090:9090"  # openstack
      - "9292:9292"  # openstack
      - "9311:9311"  # openstack
      - "9511:9511"  # openstack
      - "9517:9517"  # openstack
      - "9696:9696"  # openstack
      - "9876:9876"  # openstack
      - "9890:9890"  # openstack
      - "15868:15868"  # openstack
    volumes:
      - ./docker/gateway/openstack-ports.conf:/etc/nginx/conf.d/default.conf:ro
      - ./docker/tls/server.crt:/etc/nginx/tls/server.crt:ro
      - ./docker/tls/server.key:/etc/nginx/tls/server.key:ro
    healthcheck:
      test:
        [
          "CMD-SHELL",
          "wget -qO- http://127.0.0.1:8774/health/live || exit 1",
        ]
      interval: 10s
      timeout: 3s
      retries: 5
      start_period: 5s