docker-compose.yml

services:
    # MCP Server - Backend service providing database tools
    postgres-mcp:
        build:
            context: .
            dockerfile: Dockerfile.server
        container_name: pgedge-postgres-mcp
        ports:
            - "${MCP_SERVER_PORT:-8080}:8080"
        environment:
            # HTTP mode (required for web client and API access)
            - PGEDGE_HTTP_ENABLED=true
            # Authentication (set to false only for trusted local development)
            - PGEDGE_AUTH_ENABLED=${PGEDGE_AUTH_ENABLED:-true}
            # Database connection (single database)
            - PGEDGE_DB_HOST=${PGEDGE_DB_HOST:-}
            - PGEDGE_DB_PORT=${PGEDGE_DB_PORT:-5432}
            - PGEDGE_DB_NAME=${PGEDGE_DB_NAME:-}
            - PGEDGE_DB_USER=${PGEDGE_DB_USER:-}
            - PGEDGE_DB_PASSWORD=${PGEDGE_DB_PASSWORD:-}
            - PGEDGE_DB_SSLMODE=${PGEDGE_DB_SSLMODE:-prefer}
            - PGEDGE_DB_ALLOW_WRITES=${PGEDGE_DB_ALLOW_WRITES:-false}
            # Multiple databases (use PGEDGE_DB_N_* pattern, supports 1-10)
            - PGEDGE_DB_1_NAME=${PGEDGE_DB_1_NAME:-}
            - PGEDGE_DB_1_HOST=${PGEDGE_DB_1_HOST:-}
            - PGEDGE_DB_1_PORT=${PGEDGE_DB_1_PORT:-}
            - PGEDGE_DB_1_DATABASE=${PGEDGE_DB_1_DATABASE:-}
            - PGEDGE_DB_1_USER=${PGEDGE_DB_1_USER:-}
            - PGEDGE_DB_1_PASSWORD=${PGEDGE_DB_1_PASSWORD:-}
            - PGEDGE_DB_1_SSLMODE=${PGEDGE_DB_1_SSLMODE:-}
            - PGEDGE_DB_1_ALLOW_WRITES=${PGEDGE_DB_1_ALLOW_WRITES:-}
            - PGEDGE_DB_2_NAME=${PGEDGE_DB_2_NAME:-}
            - PGEDGE_DB_2_HOST=${PGEDGE_DB_2_HOST:-}
            - PGEDGE_DB_2_PORT=${PGEDGE_DB_2_PORT:-}
            - PGEDGE_DB_2_DATABASE=${PGEDGE_DB_2_DATABASE:-}
            - PGEDGE_DB_2_USER=${PGEDGE_DB_2_USER:-}
            - PGEDGE_DB_2_PASSWORD=${PGEDGE_DB_2_PASSWORD:-}
            - PGEDGE_DB_2_SSLMODE=${PGEDGE_DB_2_SSLMODE:-}
            - PGEDGE_DB_2_ALLOW_WRITES=${PGEDGE_DB_2_ALLOW_WRITES:-}
            - PGEDGE_DB_3_NAME=${PGEDGE_DB_3_NAME:-}
            - PGEDGE_DB_3_HOST=${PGEDGE_DB_3_HOST:-}
            - PGEDGE_DB_3_PORT=${PGEDGE_DB_3_PORT:-}
            - PGEDGE_DB_3_DATABASE=${PGEDGE_DB_3_DATABASE:-}
            - PGEDGE_DB_3_USER=${PGEDGE_DB_3_USER:-}
            - PGEDGE_DB_3_PASSWORD=${PGEDGE_DB_3_PASSWORD:-}
            - PGEDGE_DB_3_SSLMODE=${PGEDGE_DB_3_SSLMODE:-}
            - PGEDGE_DB_3_ALLOW_WRITES=${PGEDGE_DB_3_ALLOW_WRITES:-}
            - PGEDGE_DB_4_NAME=${PGEDGE_DB_4_NAME:-}
            - PGEDGE_DB_4_HOST=${PGEDGE_DB_4_HOST:-}
            - PGEDGE_DB_4_PORT=${PGEDGE_DB_4_PORT:-}
            - PGEDGE_DB_4_DATABASE=${PGEDGE_DB_4_DATABASE:-}
            - PGEDGE_DB_4_USER=${PGEDGE_DB_4_USER:-}
            - PGEDGE_DB_4_PASSWORD=${PGEDGE_DB_4_PASSWORD:-}
            - PGEDGE_DB_4_SSLMODE=${PGEDGE_DB_4_SSLMODE:-}
            - PGEDGE_DB_4_ALLOW_WRITES=${PGEDGE_DB_4_ALLOW_WRITES:-}
            - PGEDGE_DB_5_NAME=${PGEDGE_DB_5_NAME:-}
            - PGEDGE_DB_5_HOST=${PGEDGE_DB_5_HOST:-}
            - PGEDGE_DB_5_PORT=${PGEDGE_DB_5_PORT:-}
            - PGEDGE_DB_5_DATABASE=${PGEDGE_DB_5_DATABASE:-}
            - PGEDGE_DB_5_USER=${PGEDGE_DB_5_USER:-}
            - PGEDGE_DB_5_PASSWORD=${PGEDGE_DB_5_PASSWORD:-}
            - PGEDGE_DB_5_SSLMODE=${PGEDGE_DB_5_SSLMODE:-}
            - PGEDGE_DB_5_ALLOW_WRITES=${PGEDGE_DB_5_ALLOW_WRITES:-}
            - PGEDGE_DB_6_NAME=${PGEDGE_DB_6_NAME:-}
            - PGEDGE_DB_6_HOST=${PGEDGE_DB_6_HOST:-}
            - PGEDGE_DB_6_PORT=${PGEDGE_DB_6_PORT:-}
            - PGEDGE_DB_6_DATABASE=${PGEDGE_DB_6_DATABASE:-}
            - PGEDGE_DB_6_USER=${PGEDGE_DB_6_USER:-}
            - PGEDGE_DB_6_PASSWORD=${PGEDGE_DB_6_PASSWORD:-}
            - PGEDGE_DB_6_SSLMODE=${PGEDGE_DB_6_SSLMODE:-}
            - PGEDGE_DB_6_ALLOW_WRITES=${PGEDGE_DB_6_ALLOW_WRITES:-}
            - PGEDGE_DB_7_NAME=${PGEDGE_DB_7_NAME:-}
            - PGEDGE_DB_7_HOST=${PGEDGE_DB_7_HOST:-}
            - PGEDGE_DB_7_PORT=${PGEDGE_DB_7_PORT:-}
            - PGEDGE_DB_7_DATABASE=${PGEDGE_DB_7_DATABASE:-}
            - PGEDGE_DB_7_USER=${PGEDGE_DB_7_USER:-}
            - PGEDGE_DB_7_PASSWORD=${PGEDGE_DB_7_PASSWORD:-}
            - PGEDGE_DB_7_SSLMODE=${PGEDGE_DB_7_SSLMODE:-}
            - PGEDGE_DB_7_ALLOW_WRITES=${PGEDGE_DB_7_ALLOW_WRITES:-}
            - PGEDGE_DB_8_NAME=${PGEDGE_DB_8_NAME:-}
            - PGEDGE_DB_8_HOST=${PGEDGE_DB_8_HOST:-}
            - PGEDGE_DB_8_PORT=${PGEDGE_DB_8_PORT:-}
            - PGEDGE_DB_8_DATABASE=${PGEDGE_DB_8_DATABASE:-}
            - PGEDGE_DB_8_USER=${PGEDGE_DB_8_USER:-}
            - PGEDGE_DB_8_PASSWORD=${PGEDGE_DB_8_PASSWORD:-}
            - PGEDGE_DB_8_SSLMODE=${PGEDGE_DB_8_SSLMODE:-}
            - PGEDGE_DB_8_ALLOW_WRITES=${PGEDGE_DB_8_ALLOW_WRITES:-}
            - PGEDGE_DB_9_NAME=${PGEDGE_DB_9_NAME:-}
            - PGEDGE_DB_9_HOST=${PGEDGE_DB_9_HOST:-}
            - PGEDGE_DB_9_PORT=${PGEDGE_DB_9_PORT:-}
            - PGEDGE_DB_9_DATABASE=${PGEDGE_DB_9_DATABASE:-}
            - PGEDGE_DB_9_USER=${PGEDGE_DB_9_USER:-}
            - PGEDGE_DB_9_PASSWORD=${PGEDGE_DB_9_PASSWORD:-}
            - PGEDGE_DB_9_SSLMODE=${PGEDGE_DB_9_SSLMODE:-}
            - PGEDGE_DB_9_ALLOW_WRITES=${PGEDGE_DB_9_ALLOW_WRITES:-}
            - PGEDGE_DB_10_NAME=${PGEDGE_DB_10_NAME:-}
            - PGEDGE_DB_10_HOST=${PGEDGE_DB_10_HOST:-}
            - PGEDGE_DB_10_PORT=${PGEDGE_DB_10_PORT:-}
            - PGEDGE_DB_10_DATABASE=${PGEDGE_DB_10_DATABASE:-}
            - PGEDGE_DB_10_USER=${PGEDGE_DB_10_USER:-}
            - PGEDGE_DB_10_PASSWORD=${PGEDGE_DB_10_PASSWORD:-}
            - PGEDGE_DB_10_SSLMODE=${PGEDGE_DB_10_SSLMODE:-}
            - PGEDGE_DB_10_ALLOW_WRITES=${PGEDGE_DB_10_ALLOW_WRITES:-}
            # LLM database switching (for multi-database setups)
            - PGEDGE_LLM_DB_SWITCHING=${PGEDGE_LLM_DB_SWITCHING:-false}
            # Embedding configuration
            - PGEDGE_EMBEDDING_ENABLED=${PGEDGE_EMBEDDING_ENABLED:-true}
            - PGEDGE_EMBEDDING_PROVIDER=${PGEDGE_EMBEDDING_PROVIDER:-anthropic}
            - PGEDGE_EMBEDDING_MODEL=${PGEDGE_EMBEDDING_MODEL}
            - PGEDGE_ANTHROPIC_API_KEY=${PGEDGE_ANTHROPIC_API_KEY}
            - PGEDGE_OPENAI_API_KEY=${PGEDGE_OPENAI_API_KEY}
            - PGEDGE_OLLAMA_URL=${PGEDGE_OLLAMA_URL}
            # Custom base URLs (for proxies or self-hosted endpoints)
            - PGEDGE_ANTHROPIC_BASE_URL=${PGEDGE_ANTHROPIC_BASE_URL:-}
            - PGEDGE_OPENAI_BASE_URL=${PGEDGE_OPENAI_BASE_URL:-}
            - PGEDGE_VOYAGE_BASE_URL=${PGEDGE_VOYAGE_BASE_URL:-}
            - PGEDGE_OPENAI_EMBEDDING_BASE_URL=${PGEDGE_OPENAI_EMBEDDING_BASE_URL:-}
            # LLM proxy configuration (for web client chat)
            - PGEDGE_LLM_ENABLED=${PGEDGE_LLM_ENABLED:-true}
            - PGEDGE_LLM_PROVIDER=${PGEDGE_LLM_PROVIDER:-anthropic}
            - PGEDGE_LLM_MODEL=${PGEDGE_LLM_MODEL:-claude-sonnet-4-5}
            - PGEDGE_LLM_MAX_TOKENS=${PGEDGE_LLM_MAX_TOKENS:-4096}
            - PGEDGE_LLM_TEMPERATURE=${PGEDGE_LLM_TEMPERATURE:-0.7}
            # Knowledgebase configuration
            - PGEDGE_KB_ENABLED=${PGEDGE_KB_ENABLED:-false}
            - PGEDGE_KB_DATABASE_PATH=${PGEDGE_KB_DATABASE_PATH:-}
            - PGEDGE_KB_EMBEDDING_PROVIDER=${PGEDGE_KB_EMBEDDING_PROVIDER:-}
            - PGEDGE_KB_EMBEDDING_MODEL=${PGEDGE_KB_EMBEDDING_MODEL:-}
            - PGEDGE_KB_VOYAGE_API_KEY=${PGEDGE_KB_VOYAGE_API_KEY:-}
            - PGEDGE_KB_OPENAI_API_KEY=${PGEDGE_KB_OPENAI_API_KEY:-}
            - PGEDGE_KB_OLLAMA_URL=${PGEDGE_KB_OLLAMA_URL:-}
            - PGEDGE_KB_VOYAGE_BASE_URL=${PGEDGE_KB_VOYAGE_BASE_URL:-}
            - PGEDGE_KB_OPENAI_BASE_URL=${PGEDGE_KB_OPENAI_BASE_URL:-}
            # Authentication (both tokens and users can be used simultaneously)
            - PGEDGE_TOKEN_FILE=/app/data/tokens.json
            - PGEDGE_USERS_FILE=/app/data/users.json
            - INIT_TOKENS=${INIT_TOKENS}
            - INIT_USERS=${INIT_USERS}
            # Rate limiting and account lockout
            # Security note: With lockout disabled (0), only IP-based rate limiting
            # is active. For production, consider enabling account lockout by
            # setting MAX_FAILED_ATTEMPTS_BEFORE_LOCKOUT to a non-zero value (e.g., 5).
            - PGEDGE_AUTH_MAX_FAILED_ATTEMPTS_BEFORE_LOCKOUT=${PGEDGE_AUTH_MAX_FAILED_ATTEMPTS_BEFORE_LOCKOUT:-0}
            - PGEDGE_AUTH_RATE_LIMIT_WINDOW_MINUTES=${PGEDGE_AUTH_RATE_LIMIT_WINDOW_MINUTES:-15}
            - PGEDGE_AUTH_RATE_LIMIT_MAX_ATTEMPTS=${PGEDGE_AUTH_RATE_LIMIT_MAX_ATTEMPTS:-10}
            # Data directory for conversation history and preferences
            - PGEDGE_DATA_DIR=/app/data
            # Debugging
            - PGEDGE_DEBUG=${PGEDGE_DEBUG:-false}
            - PGEDGE_DB_LOG_LEVEL=${PGEDGE_DB_LOG_LEVEL:-none}
            - PGEDGE_LLM_LOG_LEVEL=${PGEDGE_LLM_LOG_LEVEL:-none}
            - PGEDGE_TRACE_FILE=${PGEDGE_TRACE_FILE:-}
        volumes:
            # Persistent data volume for:
            # - Authentication tokens (tokens.json)
            # - User credentials (users.json)
            # - Conversation history (conversations.db)
            # - User preferences
            - mcp-data:/app/data
        networks:
            - pgedge-network
        restart: unless-stopped
        healthcheck:
            test: ["CMD", "/bin/sh", "-c", "test -f /app/pgedge-postgres-mcp"]
            interval: 10s
            timeout: 5s
            retries: 3
            start_period: 10s

    # Web Client - Browser-based chat interface
    web-client:
        build:
            context: .
            dockerfile: Dockerfile.web
        container_name: pgedge-nla-web-client
        ports:
            - "${WEB_CLIENT_PORT:-8081}:8081"
        depends_on:
            postgres-mcp:
                condition: service_healthy
        networks:
            - pgedge-network
        restart: unless-stopped
        healthcheck:
            test: ["CMD", "curl", "-f", "http://localhost:8081/health"]
            interval: 10s
            timeout: 5s
            retries: 3
            start_period: 10s

    # CLI Client - Interactive command-line interface (optional)
    # Uncomment to run the CLI client in a container
    # Note: For interactive use, you'll want to run this with:
    #   docker-compose run --rm cli-client
    # cli-client:
    #     build:
    #         context: .
    #         dockerfile: Dockerfile.cli
    #     container_name: pgedge-nla-cli-client
    #     stdin_open: true
    #     tty: true
    #     environment:
    #         # MCP connection
    #         - PGEDGE_MCP_MODE=http
    #         - PGEDGE_MCP_URL=http://postgres-mcp:8080
    #         - PGEDGE_MCP_TOKEN=${MCP_CLIENT_TOKEN}
    #         # LLM configuration
    #         - PGEDGE_LLM_PROVIDER=${PGEDGE_LLM_PROVIDER:-anthropic}
    #         - PGEDGE_LLM_MODEL=${PGEDGE_LLM_MODEL}
    #         - PGEDGE_ANTHROPIC_API_KEY=${PGEDGE_ANTHROPIC_API_KEY}
    #         - PGEDGE_OPENAI_API_KEY=${PGEDGE_OPENAI_API_KEY}
    #         - PGEDGE_OLLAMA_URL=${PGEDGE_OLLAMA_URL}
    #         # UI configuration
    #         - NO_COLOR=${NO_COLOR:-}
    #     depends_on:
    #         postgres-mcp:
    #             condition: service_healthy
    #     networks:
    #         - pgedge-network

volumes:
    mcp-data:
        driver: local

networks:
    pgedge-network:
        driver: bridge