compose.yml

services:

  # Applications

  keycloak:
    image: quay.io/keycloak/keycloak:24.0
    container_name: keycloak
    command: start-dev --import-realm --metrics-enabled=true
    depends_on:
      - alloy
    volumes:
      - ./platform/keycloak:/opt/keycloak/data/import
    environment:
      - KEYCLOAK_ADMIN=user
      - KEYCLOAK_ADMIN_PASSWORD=password
    ports:
      - 8080:8080

  # Data

  chroma:
    image: ghcr.io/chroma-core/chroma:0.4.24
    container_name: chroma
    depends_on:
      - alloy
    ports:
      - 8000:8000
    environment:
      - CHROMA_OTEL_COLLECTION_ENDPOINT=http://grafana-agent:4317
      - CHROMA_OTEL_SERVICE_NAME=chroma
      - CHROMA_OTEL_GRANULARITY=all
      - ANONYMIZED_TELEMETRY=False

  postgres:
    image: docker.io/library/postgres:16.2
    container_name: postgres
    depends_on:
      - alloy
    environment:
      - POSTGRES_USER=user
      - POSTGRES_PASSWORD=password
      - POSTGRES_DB=grafana
    volumes:
      - postgres-data:/var/lib/postgresql/data
    restart: unless-stopped

  # Observability

  grafana:
    image: docker.io/grafana/grafana-oss:10.4.2
    container_name: grafana
    depends_on:
      - loki
      - prometheus
      - tempo
    ports:
      - "3000:3000"
    hostname: ${HOST_NAME:-localhost}
    environment:
      - GF_AUTH_ANONYMOUS_ENABLED=true
      - GF_AUTH_ANONYMOUS_ORG_ROLE=Viewer
      - GF_DATABASE_USER=user
      - GF_DATABASE_PASSWORD=password
      - GF_SECURITY_ADMIN_USER=user
      - GF_SECURITY_ADMIN_PASSWORD=password
    volumes:
      - ./platform/grafana/datasources:/etc/grafana/provisioning/datasources:ro
      - ./platform/grafana/dashboards:/etc/grafana/provisioning/dashboards:ro
      - ./platform/grafana/grafana.ini:/etc/grafana/grafana.ini:ro
      - grafana-data:/var/lib/grafana
    restart: unless-stopped

  loki:
    image: docker.io/grafana/loki:2.9.7
    container_name: loki
    command: -config.file=/etc/config/loki.yml
    ports:
      - "3100:3100"
    hostname: ${HOST_NAME:-localhost}
    volumes:
      - ./platform/loki/loki.yml:/etc/config/loki.yml
    restart: unless-stopped

  prometheus:
    image: quay.io/prometheus/prometheus:v2.51.2
    container_name: prometheus
    command:
      - "--config.file=/etc/config/prometheus.yml"
      - "--enable-feature=otlp-write-receiver"
      - "--enable-feature=exemplar-storage"
      - "--web.enable-remote-write-receiver"
    ports:
      - "9090"
    hostname: ${HOST_NAME:-localhost}
    volumes:
      - ./platform/prometheus/prometheus.yml:/etc/config/prometheus.yml
    restart: unless-stopped

  tempo:
    image: docker.io/grafana/tempo:2.4.1
    container_name: tempo
    command: -config.file /etc/tempo-config.yml
    ports:
      - "3110"     # Tempo
      - "4317"     # OTLP gRPC
      - "4318"     # OTLP HTTP
      - "9411"     # Zipkin
    hostname: ${HOST_NAME:-localhost}
    volumes:
      - ./platform/tempo/tempo.yml:/etc/tempo-config.yml
    restart: unless-stopped

  alloy:
    image: docker.io/grafana/alloy:v1.0.0
    container_name: alloy
    command:
      - "run"
      - "--server.http.listen-addr=0.0.0.0:12345"
      - "--storage.path=/data-alloy"
      - "--disable-reporting"
      - "/etc/alloy/config.alloy"
    depends_on:
      - loki
      - prometheus
      - tempo
    hostname: ${HOST_NAME:-localhost}
    environment:
      - ENVIRONMENT=dev
      - LOKI_URL=http://loki:3100/loki/api/v1/push
      - PROMETHEUS_URL=http://prometheus:9090/api/v1/write
      - TEMPO_URL=http://tempo:4317
      - POSTGRES_USER=user
      - POSTGRES_PASSWORD=password
    ports:
      - "12345:12345"
      - "4317:4317"
      - "4318:4318"
    volumes:
      - ./platform/alloy/config.alloy:/etc/alloy/config.alloy
      - /var/run/docker.sock:/var/run/docker.sock
      - alloy-data:/data-alloy
    restart: unless-stopped

volumes:
  alloy-data: { }
  grafana-data: { }
  postgres-data: { }