version: "3.9"

services:
  neo4j:
    image: neo4j:5.18-community
    ports:
      - "7474:7474"
      - "7687:7687"
    environment:
      # NEO4J_PASSWORD falls back to a dev-only value so `docker compose up`
      # works out of the box. PRODUCTION MUST set NEO4J_PASSWORD in .env or
      # inject it from a secrets manager — never ship the fallback.
      NEO4J_AUTH: neo4j/${NEO4J_PASSWORD:-synapse123}
      NEO4J_PLUGINS: '["apoc"]'
      NEO4J_dbms_security_procedures_unrestricted: apoc.*
    volumes:
      - neo4j_data:/data
    healthcheck:
      test:
        [
          "CMD-SHELL",
          "cypher-shell -u neo4j -p '${NEO4J_PASSWORD:-synapse123}' 'RETURN 1'",
        ]
      interval: 10s
      timeout: 5s
      retries: 10

  qdrant:
    image: qdrant/qdrant:v1.12.4
    ports:
      - "6333:6333"
      - "6334:6334"
    volumes:
      - qdrant_data:/qdrant/storage
    healthcheck:
      test: ["CMD-SHELL", "bash -c '</dev/tcp/localhost/6333' || exit 1"]
      interval: 10s
      timeout: 5s
      retries: 10

  backend:
    build:
      context: ./backend
      dockerfile: Dockerfile
    ports:
      - "8000:8000"
    environment:
      - NEO4J_URI=bolt://neo4j:7687
      - NEO4J_USER=neo4j
      # Dev-only fallback; override NEO4J_PASSWORD in .env for production.
      - NEO4J_PASSWORD=${NEO4J_PASSWORD:-synapse123}
      - QDRANT_HOST=qdrant
      - QDRANT_PORT=6333
      - DATABASE_URL=sqlite+aiosqlite:////data/synapse.db
      - CORS_ALLOWED_ORIGINS=${CORS_ALLOWED_ORIGINS:-http://localhost:3000}
      # Dev convenience: uvicorn auto-reload. Leave unset/false in production.
      - RELOAD=${RELOAD:-true}
    volumes:
      - backend_data:/data
      - /tmp/synapse_repos:/repos
      # Mount your own local repositories via a gitignored
      # docker-compose.override.yml (see README) — no personal paths here.
    depends_on:
      neo4j:
        condition: service_healthy
      qdrant:
        condition: service_healthy

  frontend:
    build:
      context: ./frontend
      dockerfile: Dockerfile
    ports:
      - "3000:3000"
    environment:
      - NEXT_PUBLIC_API_URL=http://localhost:8000
    depends_on:
      - backend

volumes:
  neo4j_data:
  qdrant_data:
  backend_data: