version: '3.7'

services:
  app_proxy:
    environment:
      APP_HOST: lobe-chat_lobe_1
      APP_PORT: 3210
      PROXY_AUTH_ADD: "false"

  postgresql:
    image: pgvector/pgvector:pg16
    ports:
      - '5432:5432'
    volumes:
      - '${APP_DATA_DIR}/data/db:/var/lib/postgresql/data'
    environment:
      - 'POSTGRES_DB=lobe'
      - 'POSTGRES_PASSWORD=lobe'
    healthcheck:
      test: ['CMD-SHELL', 'pg_isready -U postgres']
      interval: 5s
      timeout: 5s
      retries: 5
    restart: always

  minio:
    image: minio/minio
    volumes:
      - '${APP_DATA_DIR}/data/s3:/etc/minio/data'
    environment:
      - 'MINIO_ROOT_USER=lobe'
      - 'MINIO_ROOT_PASSWORD=lobe-chat'
      - 'MINIO_API_CORS_ALLOW_ORIGIN=http://${APP_DOMAIN}:3210'
    restart: always
    command: >
      server /etc/minio/data --address ":9000" --console-address ":9001"


  casdoor:
    image: casbin/casdoor
    entrypoint: /bin/sh -c './server --createDatabase=true'
    depends_on:
      postgresql:
        condition: service_healthy
    environment:
      RUNNING_IN_DOCKER: 'true'
      driverName: 'postgres'
      dataSourceName: 'user=postgres password=lobe host=postgresql port=5432 sslmode=disable dbname=casdoor'
      origin: 'http://${APP_DOMAIN}:8000'
      runmode: 'dev'
    volumes:
      - ${APP_DATA_DIR}/data/casdoor/init_data.json:/init_data.json

  lobe:
    image: lobehub/lobe-chat-database
    depends_on:
      postgresql:
        condition: service_healthy
      minio:
        condition: service_started
      casdoor:
        condition: service_started
    environment:
      - 'APP_URL=http://${APP_DOMAIN}:7455'
      - 'NEXT_AUTH_SSO_PROVIDERS=casdoor'
      - 'KEY_VAULTS_SECRET=Kix2wcUONd4CX51E/ZPAd36BqM4wzJgKjPtz2sGztqQ='
      - 'NEXT_AUTH_SECRET=NX2kaPE923dt6BL2U8e9oSre5RfoT7hg'
      - 'AUTH_URL=http://${APP_DOMAIN}:7455/api/auth'
      - 'AUTH_CASDOOR_ISSUER=http://${APP_DOMAIN}'
      - 'DATABASE_URL=postgresql://postgres:lobe@postgresql:5432/lobe'
      - 'S3_ENDPOINT=http://minio:9000'
      - 'S3_BUCKET=lobe'
      - 'S3_PUBLIC_DOMAIN=http://${APP_DOMAIN}:9000'
      - 'S3_ACCESS_KEY_ID=soaucnP8Bip0TDdUjxng'
      - 'S3_SECRET_ACCESS_KEY=ZPUzvY34umfcfxvWKSv0P00vczVMB6YmgJS5J9eO'
      - 'S3_ENABLE_PATH_STYLE=1'
      - 'LLM_VISION_IMAGE_USE_BASE64=1'
      - 'AUTH_CASDOOR_ID=a387a4892ee19b1a2249'
      - 'AUTH_CASDOOR_SECRET=f9c6471fd26b8baf224f67e9e77bb364'
    restart: always