name: data-terminal-cloud x-backend-environment: &backend-environment APP_ENV: local LOG_LEVEL: debug DATABASE_URL: postgres://voice:voice_dev_only@postgres:5432/voice_platform?sslmode=disable REDIS_ADDR: redis:6379 REDIS_PASSWORD: "" REDIS_DB: "0" DEPENDENCY_TIMEOUT: 2s EXTERNAL_PROBE_INTERVAL: 30s SHUTDOWN_TIMEOUT: 10s AUTH_ISSUER_URL: http://localhost:58180/realms/voice-local AUTH_JWKS_URL: http://keycloak:8080/realms/voice-local/protocol/openid-connect/certs AUTH_AUDIENCE: voice-platform-web OTEL_EXPORTER_OTLP_ENDPOINT: otel-collector:4317 RATE_LIMIT_RPS: "50" RATE_LIMIT_BURST: "100" RATE_LIMIT_USER_RPS: "20" RATE_LIMIT_USER_BURST: "40" RATE_LIMIT_TENANT_RPS: "200" RATE_LIMIT_TENANT_BURST: "400" RATE_LIMIT_DEVICE_RPS: "10" RATE_LIMIT_DEVICE_BURST: "20" PROVIDER_START_RPS: "20" PROVIDER_START_BURST: "40" PROVIDER_MAX_ACTIVE_TASKS: "100" DEVICE_CLOCK_SKEW: 5m DEVICE_SECRET_DIRECTORY: ${DEVICE_SECRET_DIRECTORY:-} RTC_APP_ID: local-public-rtc-app RTC_APP_KEY: ${RTC_APP_KEY:-} RTC_TOKEN_ISSUER: ${RTC_TOKEN_ISSUER:-local} RTC_TOKEN_TTL: 5m CURSOR_SIGNING_SECRET: local-signed-pagination-cursor-secret-32-bytes-minimum SHARE_TOKEN_SIGNING_SECRET: local-share-token-signing-secret-32-bytes-minimum CONVERSATION_ALLOCATION_TTL: 30s HEARTBEAT_INTERVAL_SECONDS: "15" PROVIDER_CALLBACK_CLOCK_SKEW: 5m PROVIDER_REQUEST_TIMEOUT: 5s VOICE_PROVIDER: ${VOICE_PROVIDER:-mock} VOLC_RTC_BASE_URL: ${VOLC_RTC_BASE_URL:-https://rtc.volcengineapi.com} VOLC_ACCESS_KEY_ID: ${VOLC_ACCESS_KEY_ID:-} VOLC_SECRET_ACCESS_KEY: ${VOLC_SECRET_ACCESS_KEY:-} VOLC_SESSION_TOKEN: ${VOLC_SESSION_TOKEN:-} VOLC_RTC_REGION: ${VOLC_RTC_REGION:-cn-north-1} VOLC_RTC_API_VERSION: ${VOLC_RTC_API_VERSION:-2024-12-01} VOLC_VOICE_CHAT_TEMPLATE_FILE: ${VOLC_VOICE_CHAT_TEMPLATE_FILE:-} PROVIDER_FAILURE_THRESHOLD: "3" PROVIDER_CIRCUIT_COOLDOWN: 1m RECOVERY_SCAN_INTERVAL: 5s RECOVERY_STARTING_AFTER: 20s RECOVERY_STOPPING_AFTER: 20s OBJECT_STORE_ENDPOINT: minio:9000 OBJECT_STORE_PUBLIC_ENDPOINT: localhost:59000 OBJECT_STORE_ACCESS_KEY: local_minio OBJECT_STORE_SECRET_KEY: local_minio_password OBJECT_STORE_EXPORT_BUCKET: private-exports OBJECT_STORE_REGION: us-east-1 OBJECT_STORE_SECURE: "false" EXPORT_DOWNLOAD_TTL: 10m EXPORT_OBJECT_TTL: 24h MEDIA_LOCAL_DELETE_GRACE: ${MEDIA_LOCAL_DELETE_GRACE:-1s} EMBEDDING_PROVIDER: ${EMBEDDING_PROVIDER:-local} ARK_BASE_URL: ${ARK_BASE_URL:-https://ark.cn-beijing.volces.com/api/v3} ARK_API_KEY: ${ARK_API_KEY:-} ARK_EMBEDDING_MODEL: ${ARK_EMBEDDING_MODEL:-} ARK_REQUEST_TIMEOUT: ${ARK_REQUEST_TIMEOUT:-30s} x-backend-dependencies: &backend-dependencies postgres: condition: service_healthy redis: condition: service_healthy minio: condition: service_healthy migrate: condition: service_completed_successfully seed: condition: service_completed_successfully services: postgres: image: pgvector/pgvector:pg16 environment: POSTGRES_DB: voice_platform POSTGRES_USER: voice POSTGRES_PASSWORD: voice_dev_only ports: - "${POSTGRES_PORT:-55432}:5432" volumes: - postgres-data:/var/lib/postgresql/data healthcheck: test: ["CMD-SHELL", "pg_isready -U voice -d voice_platform"] interval: 5s timeout: 3s retries: 20 redis: image: redis:7-alpine command: ["redis-server", "--appendonly", "yes"] ports: - "${REDIS_PORT:-56379}:6379" volumes: - redis-data:/data healthcheck: test: ["CMD", "redis-cli", "ping"] interval: 5s timeout: 3s retries: 20 minio: image: quay.io/minio/minio:latest command: ["server", "/data", "--console-address", ":9001"] environment: MINIO_ROOT_USER: local_minio MINIO_ROOT_PASSWORD: local_minio_password ports: - "${MINIO_API_PORT:-59000}:9000" - "${MINIO_CONSOLE_PORT:-59001}:9001" volumes: - minio-data:/data healthcheck: test: ["CMD-SHELL", "curl -fsS http://localhost:9000/minio/health/ready >/dev/null"] interval: 5s timeout: 3s retries: 20 keycloak: image: quay.io/keycloak/keycloak:26.2 command: ["start-dev", "--import-realm"] environment: KC_BOOTSTRAP_ADMIN_USERNAME: admin KC_BOOTSTRAP_ADMIN_PASSWORD: local_admin_only KC_HOSTNAME: http://localhost:58180 ports: - "${KEYCLOAK_PORT:-58180}:8080" volumes: - ./deploy/keycloak:/opt/keycloak/data/import:ro otel-collector: image: otel/opentelemetry-collector-contrib:latest command: ["--config=/etc/otelcol-contrib/config.yaml"] volumes: - ./deploy/otel/collector.yaml:/etc/otelcol-contrib/config.yaml:ro ports: - "${OTEL_GRPC_PORT:-54317}:4317" prometheus: image: prom/prometheus:latest command: ["--config.file=/etc/prometheus/prometheus.yml"] volumes: - ./deploy/prometheus/prometheus.yml:/etc/prometheus/prometheus.yml:ro - ./deploy/prometheus/rules:/etc/prometheus/rules:ro ports: - "${PROMETHEUS_PORT:-59190}:9090" grafana: image: grafana/grafana:12.2.0 environment: GF_AUTH_ANONYMOUS_ENABLED: "true" GF_AUTH_ANONYMOUS_ORG_ROLE: Viewer GF_USERS_DEFAULT_THEME: light volumes: - ./deploy/grafana/provisioning:/etc/grafana/provisioning:ro - ./deploy/grafana/dashboards:/var/lib/grafana/dashboards:ro ports: - "${GRAFANA_PORT:-59300}:3000" depends_on: - prometheus migrate: image: migrate/migrate:v4.18.3 volumes: - ./migrations:/migrations:ro command: - -path=/migrations - -database=postgres://voice:voice_dev_only@postgres:5432/voice_platform?sslmode=disable - up depends_on: postgres: condition: service_healthy restart: "no" seed: image: pgvector/pgvector:pg16 environment: PGPASSWORD: voice_dev_only volumes: - ./test/fixtures:/fixtures:ro command: ["psql", "-h", "postgres", "-U", "voice", "-d", "voice_platform", "-v", "ON_ERROR_STOP=1", "-f", "/fixtures/local_seed.sql"] depends_on: migrate: condition: service_completed_successfully restart: "no" api: build: context: . dockerfile: deploy/backend.Dockerfile entrypoint: ["/app/api"] environment: <<: *backend-environment HTTP_ADDR: 0.0.0.0:8080 DEVICE_LOCAL_SECRET: local-simulated-device-secret-32-bytes-minimum RTC_TOKEN_SIGNING_SECRET: local-simulated-rtc-token-secret-32-bytes-minimum ports: - "${API_PORT:-58080}:8080" depends_on: *backend-dependencies callbacks: build: context: . dockerfile: deploy/backend.Dockerfile entrypoint: ["/app/callbacks"] environment: <<: *backend-environment HTTP_ADDR: 0.0.0.0:8081 PROVIDER_CALLBACK_SECRET: local-provider-callback-secret-32-bytes-minimum RATE_LIMIT_RPS: "1000" RATE_LIMIT_BURST: "1500" ports: - "${CALLBACKS_PORT:-58081}:8081" depends_on: *backend-dependencies worker: build: context: . dockerfile: deploy/backend.Dockerfile entrypoint: ["/app/worker"] environment: <<: *backend-environment HTTP_ADDR: 0.0.0.0:8082 MOCK_PROVIDER_BASE_URL: http://mock-provider:8083 MOCK_PROVIDER_API_KEY: local-mock-provider-key ALERT_WEBHOOK_URL: ${ALERT_WEBHOOK_URL:-http://mock-alert-receiver:8084/webhooks/alerts} ALERT_WEBHOOK_SECRET: ${ALERT_WEBHOOK_SECRET:-local-alert-webhook-secret-32-bytes-minimum} ALERT_WEBHOOK_TIMEOUT: ${ALERT_WEBHOOK_TIMEOUT:-5s} CONTENT_GENERATOR: ${CONTENT_GENERATOR:-local} CONTENT_SAFETY_PROVIDER: ${CONTENT_SAFETY_PROVIDER:-local} CONTENT_SAFETY_ENDPOINT: ${CONTENT_SAFETY_ENDPOINT:-} CONTENT_SAFETY_API_KEY: ${CONTENT_SAFETY_API_KEY:-} CONTENT_SAFETY_POLICY_REF: ${CONTENT_SAFETY_POLICY_REF:-} CONTENT_SAFETY_TIMEOUT: ${CONTENT_SAFETY_TIMEOUT:-5s} ARK_BASE_URL: ${ARK_BASE_URL:-https://ark.cn-beijing.volces.com/api/v3} ARK_API_KEY: ${ARK_API_KEY:-} ARK_CONTENT_MODEL: ${ARK_CONTENT_MODEL:-} ARK_REQUEST_TIMEOUT: ${ARK_REQUEST_TIMEOUT:-30s} ports: - "${WORKER_PORT:-58082}:8082" depends_on: <<: *backend-dependencies mock-provider: condition: service_started mock-alert-receiver: condition: service_started mock-provider: build: context: . dockerfile: deploy/backend.Dockerfile entrypoint: ["/app/mock-provider"] environment: HTTP_ADDR: 0.0.0.0:8083 MOCK_PROVIDER_API_KEY: local-mock-provider-key MOCK_PROVIDER_CALLBACK_URL: http://callbacks:8081/callbacks/v1/vertc/voice-chat PROVIDER_CALLBACK_SECRET: local-provider-callback-secret-32-bytes-minimum MOCK_PROVIDER_START_DELAY: 100ms MOCK_PROVIDER_DUPLICATE_CALLBACKS: "2" ports: - "${MOCK_PROVIDER_PORT:-59200}:8083" depends_on: callbacks: condition: service_started mock-alert-receiver: build: context: . dockerfile: deploy/backend.Dockerfile entrypoint: ["/app/mock-alert-receiver"] environment: HTTP_ADDR: 0.0.0.0:8084 ALERT_WEBHOOK_SECRET: ${ALERT_WEBHOOK_SECRET:-local-alert-webhook-secret-32-bytes-minimum} ports: - "${MOCK_ALERT_RECEIVER_PORT:-59210}:8084" sim-device: profiles: [simulation] build: context: . dockerfile: deploy/backend.Dockerfile entrypoint: ["/app/sim-device"] environment: SIM_API_URL: http://api:8080 SIM_DEVICE_ID: 10000000-0000-0000-0000-000000000511 SIM_DEVICE_SECRET: local-simulated-device-secret-32-bytes-minimum depends_on: api: condition: service_started web: build: context: . dockerfile: deploy/web.Dockerfile environment: WEB_OIDC_AUTHORITY: ${WEB_OIDC_AUTHORITY:-http://localhost:58180/realms/voice-local} WEB_OIDC_CLIENT_ID: ${WEB_OIDC_CLIENT_ID:-voice-platform-web} ports: - "${WEB_PORT:-3100}:8080" depends_on: api: condition: service_started volumes: postgres-data: redis-data: minio-data: