# # Copyright 2016-present the IoT DC3 original author or authors. # # This program is free software: you can redistribute it and/or modify # it under the terms of the GNU Affero General Public License as # published by the Free Software Foundation, either version 3 of the # License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU Affero General Public License for more details. # # You should have received a copy of the GNU Affero General Public License # along with this program. If not, see . # x-logging: &default-logging driver: json-file options: max-size: ${DC3_LOG_MAX_SIZE:-10M} max-file: "${DC3_LOG_MAX_FILE:-20}" x-app-runtime-env: &app-runtime-env NODE_ENV: test APM_AGENT_ENABLE: ${APM_AGENT_ENABLE:-false} DC3_SECURITY_KEY: ${DC3_SECURITY_KEY:-dc3.security.key.2026.io.github.pnoker} AUTH_HMAC_SECRET: ${AUTH_HMAC_SECRET:-io.github.pnoker.dc3} POSTGRES_HOST: dc3-postgres POSTGRES_PORT: "5432" POSTGRES_USERNAME: ${POSTGRES_USERNAME:-dc3} POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-dc3dc3dc3} POSTGRES_DB: ${POSTGRES_DB:-dc3} RABBITMQ_VIRTUAL_HOST: ${RABBITMQ_VIRTUAL_HOST:-dc3} RABBITMQ_HOST: dc3-rabbitmq RABBITMQ_PORT: "${RABBITMQ_CONTAINER_PORT:-5672}" RABBITMQ_USERNAME: ${RABBITMQ_USERNAME:-dc3} RABBITMQ_PASSWORD: ${RABBITMQ_PASSWORD:-dc3dc3dc3} RABBITMQ_SSL_ENABLED: "${RABBITMQ_SSL_ENABLED:-false}" RABBITMQ_SSL_ALGORITHM: "${RABBITMQ_SSL_ALGORITHM:-TLS}" RABBITMQ_SSL_VALIDATE_SERVER_CERTIFICATE: "${RABBITMQ_SSL_VALIDATE_SERVER_CERTIFICATE:-false}" RABBITMQ_SSL_VERIFY_HOSTNAME: "${RABBITMQ_SSL_VERIFY_HOSTNAME:-false}" MQTT_BROKER_HOST: dc3-rabbitmq MQTT_BROKER_PORT: "1883" MQTT_USERNAME: ${MQTT_USERNAME:-dc3} MQTT_PASSWORD: ${MQTT_PASSWORD:-dc3dc3dc3} services: web: # Frontend follows the same DC3_IMAGE_REGISTRY switch as backend services # (so `make app REGISTRY=cn` retags everything together), and shares # the unified DC3_VERSION for the whole monorepo. image: ${DC3_IMAGE_REGISTRY:-pnoker}/dc3-web:${DC3_VERSION:-latest} build: context: .. dockerfile: dc3-web/Dockerfile restart: always depends_on: gateway: condition: service_healthy ports: - "${DC3_BIND_HOST:-127.0.0.1}:${DC3_WEB_HTTP_PORT:-8080}:80" - "${DC3_BIND_HOST:-127.0.0.1}:${DC3_WEB_HTTPS_PORT:-8443}:443" environment: - APP_API_HOST=${APP_API_HOST:-dc3-gateway} - APP_API_PORT=${APP_API_PORT:-8000} container_name: dc3-web hostname: dc3-web volumes: - nginx:/var/log/nginx healthcheck: test: [ "CMD-SHELL", "curl -fsS http://127.0.0.1/ >/dev/null || exit 1" ] interval: 15s timeout: 5s retries: 10 start_period: 30s logging: *default-logging networks: dc3net: aliases: - dc3-web gateway: image: ${DC3_IMAGE_REGISTRY:-pnoker}/dc3-gateway:${DC3_IMAGE_TAG:-2026.6} restart: always depends_on: auth: condition: service_healthy manager: condition: service_healthy data: condition: service_healthy agentic: condition: service_healthy environment: <<: *app-runtime-env container_name: dc3-gateway hostname: dc3-gateway volumes: - logs:/dc3-gateway/dc3/logs healthcheck: test: [ "CMD-SHELL", "curl -fsS http://127.0.0.1:8000/actuator/health/readiness >/dev/null || exit 1" ] interval: 15s timeout: 5s retries: 10 start_period: 30s logging: *default-logging networks: dc3net: aliases: - dc3-gateway auth: image: ${DC3_IMAGE_REGISTRY:-pnoker}/dc3-center-auth:${DC3_IMAGE_TAG:-2026.6} restart: always environment: <<: *app-runtime-env container_name: dc3-center-auth hostname: dc3-center-auth volumes: - logs:/dc3-center/dc3-center-auth/dc3/logs healthcheck: test: [ "CMD-SHELL", "curl -fsS http://127.0.0.1:8300/auth/actuator/health/readiness >/dev/null || exit 1" ] interval: 15s timeout: 5s retries: 10 start_period: 40s logging: *default-logging networks: dc3net: aliases: - dc3-center-auth manager: image: ${DC3_IMAGE_REGISTRY:-pnoker}/dc3-center-manager:${DC3_IMAGE_TAG:-2026.6} restart: always depends_on: auth: condition: service_healthy environment: <<: *app-runtime-env container_name: dc3-center-manager hostname: dc3-center-manager volumes: - logs:/dc3-center/dc3-center-manager/dc3/logs healthcheck: test: [ "CMD-SHELL", "curl -fsS http://127.0.0.1:8400/manager/actuator/health/readiness >/dev/null || exit 1" ] interval: 15s timeout: 5s retries: 10 start_period: 40s logging: *default-logging networks: dc3net: aliases: - dc3-center-manager data: image: ${DC3_IMAGE_REGISTRY:-pnoker}/dc3-center-data:${DC3_IMAGE_TAG:-2026.6} restart: always depends_on: auth: condition: service_healthy manager: condition: service_healthy environment: <<: *app-runtime-env container_name: dc3-center-data hostname: dc3-center-data volumes: - logs:/dc3-center/dc3-center-data/dc3/logs healthcheck: test: [ "CMD-SHELL", "curl -fsS http://127.0.0.1:8500/data/actuator/health/readiness >/dev/null || exit 1" ] interval: 15s timeout: 5s retries: 10 start_period: 40s logging: *default-logging networks: dc3net: aliases: - dc3-center-data agentic: image: ${DC3_IMAGE_REGISTRY:-pnoker}/dc3-center-agentic:${DC3_IMAGE_TAG:-2026.6} restart: always depends_on: auth: condition: service_healthy manager: condition: service_healthy data: condition: service_healthy environment: <<: *app-runtime-env AGENTIC_FALLBACK_OPENAI_BASE_URL: ${AGENTIC_FALLBACK_OPENAI_BASE_URL:-https://api.openai.com} AGENTIC_FALLBACK_OPENAI_API_KEY: ${AGENTIC_FALLBACK_OPENAI_API_KEY:-} AGENTIC_FALLBACK_OPENAI_MODEL: ${AGENTIC_FALLBACK_OPENAI_MODEL:-gpt-4o} AGENTIC_FALLBACK_OPENAI_TEMPERATURE: ${AGENTIC_FALLBACK_OPENAI_TEMPERATURE:-0.7} AGENTIC_FALLBACK_OPENAI_MAX_TOKENS: ${AGENTIC_FALLBACK_OPENAI_MAX_TOKENS:-2048} AGENTIC_MEMORY_SCHEMA_INIT: ${AGENTIC_MEMORY_SCHEMA_INIT:-never} AGENTIC_MEMORY_ENABLED: ${AGENTIC_MEMORY_ENABLED:-false} AGENTIC_TOOL_CALLING_ENABLED: ${AGENTIC_TOOL_CALLING_ENABLED:-true} AGENTIC_MEMORY_MAX_MESSAGES: ${AGENTIC_MEMORY_MAX_MESSAGES:-50} AGENTIC_ATTACHMENT_STORAGE_PATH: ${AGENTIC_ATTACHMENT_STORAGE_PATH:-dc3/data/agentic/attachments} container_name: dc3-center-agentic hostname: dc3-center-agentic volumes: - logs:/dc3-center/dc3-center-agentic/dc3/logs healthcheck: test: [ "CMD-SHELL", "curl -fsS http://127.0.0.1:8600/agentic/actuator/health/readiness >/dev/null || exit 1" ] interval: 15s timeout: 5s retries: 10 start_period: 40s logging: *default-logging networks: dc3net: aliases: - dc3-center-agentic listening-virtual: image: ${DC3_IMAGE_REGISTRY:-pnoker}/dc3-driver-listening-virtual:${DC3_IMAGE_TAG:-2026.6} restart: always depends_on: manager: condition: service_healthy # Device ingress ports — kept exposed because external device simulators # (or real IoT devices) connect in over TCP/UDP. All other backend ports # are intentionally NOT mapped: web is the only user-facing entry point. ports: - "${DC3_BIND_HOST:-127.0.0.1}:${DC3_LISTENING_VIRTUAL_TCP_PORT:-6270}:6270" - "${DC3_BIND_HOST:-127.0.0.1}:${DC3_LISTENING_VIRTUAL_UDP_PORT:-6271}:6271" environment: <<: *app-runtime-env container_name: dc3-driver-listening-virtual hostname: dc3-driver-listening-virtual volumes: - logs:/dc3-driver/dc3-driver-listening-virtual/dc3/logs - driver_data:/dc3-driver/dc3-driver-listening-virtual/dc3/data logging: *default-logging networks: dc3net: aliases: - dc3-driver-listening-virtual modbus-tcp: image: ${DC3_IMAGE_REGISTRY:-pnoker}/dc3-driver-modbus-tcp:${DC3_IMAGE_TAG:-2026.6} restart: always depends_on: manager: condition: service_healthy environment: <<: *app-runtime-env container_name: dc3-driver-modbus-tcp hostname: dc3-driver-modbus-tcp volumes: - logs:/dc3-driver/dc3-driver-modbus-tcp/dc3/logs - driver_data:/dc3-driver/dc3-driver-modbus-tcp/dc3/data logging: *default-logging networks: dc3net: aliases: - dc3-driver-modbus-tcp modbus-rtu: image: ${DC3_IMAGE_REGISTRY:-pnoker}/dc3-driver-modbus-rtu:${DC3_IMAGE_TAG:-2026.6} restart: always depends_on: manager: condition: service_healthy environment: <<: *app-runtime-env container_name: dc3-driver-modbus-rtu hostname: dc3-driver-modbus-rtu volumes: - logs:/dc3-driver/dc3-driver-modbus-rtu/dc3/logs - driver_data:/dc3-driver/dc3-driver-modbus-rtu/dc3/data logging: *default-logging networks: dc3net: aliases: - dc3-driver-modbus-rtu mqtt: image: ${DC3_IMAGE_REGISTRY:-pnoker}/dc3-driver-mqtt:${DC3_IMAGE_TAG:-2026.6} restart: always depends_on: manager: condition: service_healthy environment: <<: *app-runtime-env container_name: dc3-driver-mqtt hostname: dc3-driver-mqtt volumes: - logs:/dc3-driver/dc3-driver-mqtt/dc3/logs - driver_data:/dc3-driver/dc3-driver-mqtt/dc3/data logging: *default-logging networks: dc3net: aliases: - dc3-driver-mqtt opc-da: image: ${DC3_IMAGE_REGISTRY:-pnoker}/dc3-driver-opc-da:${DC3_IMAGE_TAG:-2026.6} restart: always depends_on: manager: condition: service_healthy environment: <<: *app-runtime-env container_name: dc3-driver-opc-da hostname: dc3-driver-opc-da volumes: - logs:/dc3-driver/dc3-driver-opc-da/dc3/logs - driver_data:/dc3-driver/dc3-driver-opc-da/dc3/data logging: *default-logging networks: dc3net: aliases: - dc3-driver-opc-da opc-ua: image: ${DC3_IMAGE_REGISTRY:-pnoker}/dc3-driver-opc-ua:${DC3_IMAGE_TAG:-2026.6} restart: always depends_on: manager: condition: service_healthy environment: <<: *app-runtime-env container_name: dc3-driver-opc-ua hostname: dc3-driver-opc-ua volumes: - logs:/dc3-driver/dc3-driver-opc-ua/dc3/logs - driver_data:/dc3-driver/dc3-driver-opc-ua/dc3/data logging: *default-logging networks: dc3net: aliases: - dc3-driver-opc-ua plcs7: image: ${DC3_IMAGE_REGISTRY:-pnoker}/dc3-driver-plcs7:${DC3_IMAGE_TAG:-2026.6} restart: always depends_on: manager: condition: service_healthy environment: <<: *app-runtime-env container_name: dc3-driver-plcs7 hostname: dc3-driver-plcs7 volumes: - logs:/dc3-driver/dc3-driver-plcs7/dc3/logs - driver_data:/dc3-driver/dc3-driver-plcs7/dc3/data logging: *default-logging networks: dc3net: aliases: - dc3-driver-plcs7 virtual: image: ${DC3_IMAGE_REGISTRY:-pnoker}/dc3-driver-virtual:${DC3_IMAGE_TAG:-2026.6} restart: always depends_on: manager: condition: service_healthy environment: <<: *app-runtime-env container_name: dc3-driver-virtual hostname: dc3-driver-virtual volumes: - logs:/dc3-driver/dc3-driver-virtual/dc3/logs - driver_data:/dc3-driver/dc3-driver-virtual/dc3/data logging: *default-logging networks: dc3net: aliases: - dc3-driver-virtual bacnet-ip: image: ${DC3_IMAGE_REGISTRY:-pnoker}/dc3-driver-bacnet-ip:${DC3_IMAGE_TAG:-2026.6} restart: always depends_on: manager: condition: service_healthy environment: <<: *app-runtime-env container_name: dc3-driver-bacnet-ip hostname: dc3-driver-bacnet-ip volumes: - logs:/dc3-driver/dc3-driver-bacnet-ip/dc3/logs - driver_data:/dc3-driver/dc3-driver-bacnet-ip/dc3/data logging: *default-logging networks: dc3net: aliases: - dc3-driver-bacnet-ip fins: image: ${DC3_IMAGE_REGISTRY:-pnoker}/dc3-driver-fins:${DC3_IMAGE_TAG:-2026.6} restart: always depends_on: manager: condition: service_healthy environment: <<: *app-runtime-env container_name: dc3-driver-fins hostname: dc3-driver-fins volumes: - logs:/dc3-driver/dc3-driver-fins/dc3/logs - driver_data:/dc3-driver/dc3-driver-fins/dc3/data logging: *default-logging networks: dc3net: aliases: - dc3-driver-fins melsec: image: ${DC3_IMAGE_REGISTRY:-pnoker}/dc3-driver-melsec:${DC3_IMAGE_TAG:-2026.6} restart: always depends_on: manager: condition: service_healthy environment: <<: *app-runtime-env container_name: dc3-driver-melsec hostname: dc3-driver-melsec volumes: - logs:/dc3-driver/dc3-driver-melsec/dc3/logs - driver_data:/dc3-driver/dc3-driver-melsec/dc3/data logging: *default-logging networks: dc3net: aliases: - dc3-driver-melsec ethernet-ip: image: ${DC3_IMAGE_REGISTRY:-pnoker}/dc3-driver-ethernet-ip:${DC3_IMAGE_TAG:-2026.6} restart: always depends_on: manager: condition: service_healthy environment: <<: *app-runtime-env container_name: dc3-driver-ethernet-ip hostname: dc3-driver-ethernet-ip volumes: - logs:/dc3-driver/dc3-driver-ethernet-ip/dc3/logs - driver_data:/dc3-driver/dc3-driver-ethernet-ip/dc3/data logging: *default-logging networks: dc3net: aliases: - dc3-driver-ethernet-ip iec104: image: ${DC3_IMAGE_REGISTRY:-pnoker}/dc3-driver-iec104:${DC3_IMAGE_TAG:-2026.6} restart: always depends_on: manager: condition: service_healthy environment: <<: *app-runtime-env container_name: dc3-driver-iec104 hostname: dc3-driver-iec104 volumes: - logs:/dc3-driver/dc3-driver-iec104/dc3/logs - driver_data:/dc3-driver/dc3-driver-iec104/dc3/data logging: *default-logging networks: dc3net: aliases: - dc3-driver-iec104 sl651: image: ${DC3_IMAGE_REGISTRY:-pnoker}/dc3-driver-sl651:${DC3_IMAGE_TAG:-2026.6} restart: always depends_on: manager: condition: service_healthy environment: <<: *app-runtime-env container_name: dc3-driver-sl651 hostname: dc3-driver-sl651 volumes: - logs:/dc3-driver/dc3-driver-sl651/dc3/logs - driver_data:/dc3-driver/dc3-driver-sl651/dc3/data logging: *default-logging networks: dc3net: aliases: - dc3-driver-sl651 snmp: image: ${DC3_IMAGE_REGISTRY:-pnoker}/dc3-driver-snmp:${DC3_IMAGE_TAG:-2026.6} restart: always depends_on: manager: condition: service_healthy environment: <<: *app-runtime-env container_name: dc3-driver-snmp hostname: dc3-driver-snmp volumes: - logs:/dc3-driver/dc3-driver-snmp/dc3/logs - driver_data:/dc3-driver/dc3-driver-snmp/dc3/data logging: *default-logging networks: dc3net: aliases: - dc3-driver-snmp dlms: image: ${DC3_IMAGE_REGISTRY:-pnoker}/dc3-driver-dlms:${DC3_IMAGE_TAG:-2026.6} restart: always depends_on: manager: condition: service_healthy environment: <<: *app-runtime-env container_name: dc3-driver-dlms hostname: dc3-driver-dlms volumes: - logs:/dc3-driver/dc3-driver-dlms/dc3/logs - driver_data:/dc3-driver/dc3-driver-dlms/dc3/data logging: *default-logging networks: dc3net: aliases: - dc3-driver-dlms coap: image: ${DC3_IMAGE_REGISTRY:-pnoker}/dc3-driver-coap:${DC3_IMAGE_TAG:-2026.6} restart: always depends_on: manager: condition: service_healthy environment: <<: *app-runtime-env container_name: dc3-driver-coap hostname: dc3-driver-coap volumes: - logs:/dc3-driver/dc3-driver-coap/dc3/logs - driver_data:/dc3-driver/dc3-driver-coap/dc3/data logging: *default-logging networks: dc3net: aliases: - dc3-driver-coap lwm2m: image: ${DC3_IMAGE_REGISTRY:-pnoker}/dc3-driver-lwm2m:${DC3_IMAGE_TAG:-2026.6} restart: always depends_on: manager: condition: service_healthy environment: <<: *app-runtime-env container_name: dc3-driver-lwm2m hostname: dc3-driver-lwm2m volumes: - logs:/dc3-driver/dc3-driver-lwm2m/dc3/logs - driver_data:/dc3-driver/dc3-driver-lwm2m/dc3/data logging: *default-logging networks: dc3net: aliases: - dc3-driver-lwm2m http: image: ${DC3_IMAGE_REGISTRY:-pnoker}/dc3-driver-http:${DC3_IMAGE_TAG:-2026.6} restart: always depends_on: manager: condition: service_healthy environment: <<: *app-runtime-env container_name: dc3-driver-http hostname: dc3-driver-http volumes: - logs:/dc3-driver/dc3-driver-http/dc3/logs - driver_data:/dc3-driver/dc3-driver-http/dc3/data logging: *default-logging networks: dc3net: aliases: - dc3-driver-http serial: image: ${DC3_IMAGE_REGISTRY:-pnoker}/dc3-driver-serial:${DC3_IMAGE_TAG:-2026.6} restart: always depends_on: manager: condition: service_healthy environment: <<: *app-runtime-env container_name: dc3-driver-serial hostname: dc3-driver-serial volumes: - logs:/dc3-driver/dc3-driver-serial/dc3/logs - driver_data:/dc3-driver/dc3-driver-serial/dc3/data logging: *default-logging networks: dc3net: aliases: - dc3-driver-serial tcp-udp: image: ${DC3_IMAGE_REGISTRY:-pnoker}/dc3-driver-tcp-udp:${DC3_IMAGE_TAG:-2026.6} restart: always depends_on: manager: condition: service_healthy environment: <<: *app-runtime-env container_name: dc3-driver-tcp-udp hostname: dc3-driver-tcp-udp volumes: - logs:/dc3-driver/dc3-driver-tcp-udp/dc3/logs - driver_data:/dc3-driver/dc3-driver-tcp-udp/dc3/data logging: *default-logging networks: dc3net: aliases: - dc3-driver-tcp-udp mysql: image: ${DC3_IMAGE_REGISTRY:-pnoker}/dc3-driver-mysql:${DC3_IMAGE_TAG:-2026.6} restart: always depends_on: manager: condition: service_healthy environment: <<: *app-runtime-env container_name: dc3-driver-mysql hostname: dc3-driver-mysql volumes: - logs:/dc3-driver/dc3-driver-mysql/dc3/logs - driver_data:/dc3-driver/dc3-driver-mysql/dc3/data logging: *default-logging networks: dc3net: aliases: - dc3-driver-mysql postgresql: image: ${DC3_IMAGE_REGISTRY:-pnoker}/dc3-driver-postgresql:${DC3_IMAGE_TAG:-2026.6} restart: always depends_on: manager: condition: service_healthy environment: <<: *app-runtime-env container_name: dc3-driver-postgresql hostname: dc3-driver-postgresql volumes: - logs:/dc3-driver/dc3-driver-postgresql/dc3/logs - driver_data:/dc3-driver/dc3-driver-postgresql/dc3/data logging: *default-logging networks: dc3net: aliases: - dc3-driver-postgresql oracle: image: ${DC3_IMAGE_REGISTRY:-pnoker}/dc3-driver-oracle:${DC3_IMAGE_TAG:-2026.6} restart: always depends_on: manager: condition: service_healthy environment: <<: *app-runtime-env container_name: dc3-driver-oracle hostname: dc3-driver-oracle volumes: - logs:/dc3-driver/dc3-driver-oracle/dc3/logs - driver_data:/dc3-driver/dc3-driver-oracle/dc3/data logging: *default-logging networks: dc3net: aliases: - dc3-driver-oracle sqlserver: image: ${DC3_IMAGE_REGISTRY:-pnoker}/dc3-driver-sqlserver:${DC3_IMAGE_TAG:-2026.6} restart: always depends_on: manager: condition: service_healthy environment: <<: *app-runtime-env container_name: dc3-driver-sqlserver hostname: dc3-driver-sqlserver volumes: - logs:/dc3-driver/dc3-driver-sqlserver/dc3/logs - driver_data:/dc3-driver/dc3-driver-sqlserver/dc3/data logging: *default-logging networks: dc3net: aliases: - dc3-driver-sqlserver volumes: logs: driver_data: nginx: networks: dc3net: driver: bridge