# Optional observability add-on. Requires this repo's prometheus/ and grafana/
# config directories to be present alongside this file. Run alongside the
# core stack with:
#   docker compose -f docker-compose.yml -f docker-compose.monitoring.yml up -d

services:
  prometheus:
    # Pinned to a specific release so this optional add-on doesn't silently
    # pick up a breaking upstream change on a plain `docker compose pull`.
    # Bump deliberately.
    image: prom/prometheus:v2.53.0
    ports:
      - "9091:9090"
    volumes:
      - ./prometheus/prometheus.yml:/etc/prometheus/prometheus.yml:ro
      - prometheus-data:/prometheus

  grafana:
    # Pinned to a specific release, same rationale as prometheus above.
    image: grafana/grafana:10.4.2
    ports:
      # Loopback-only by default - this ships with factory admin/admin and no
      # GF_SECURITY_ADMIN_PASSWORD set. To expose it intentionally (e.g. for
      # remote access), override to "3000:3000" and set a real admin password.
      - "127.0.0.1:3000:3000"
    volumes:
      - ./grafana/provisioning:/etc/grafana/provisioning:ro
      - ./grafana/marbor.json:/var/lib/grafana/dashboards/marbor.json:ro
      - grafana-data:/var/lib/grafana
    depends_on:
      - prometheus

volumes:
  prometheus-data:
  grafana-data: