unicef-geospatial/docker-compose.yml at main · tryolabs/unicef-geospatial · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
services:
  # ------------------ Frontend ------------------
  frontend:
    image: 505646497781.dkr.ecr.us-east-1.amazonaws.com/geosphere/frontend:latest
    container_name: frontend
    restart: always
    ports:
      - "0.0.0.0:3000:3000"
    depends_on:
      - agent
    networks:
      - net_frontend_agent

  # ------------------ Agent ------------------
  agent:
    image: 505646497781.dkr.ecr.us-east-1.amazonaws.com/geosphere/agent:latest
    container_name: agent
    restart: always
    secrets:
      - langfuse_host
      - langfuse_public_key
      - langfuse_secret_key
      - openai_api_key
      - jwt_secret_key
      - users
      - vertex_auth.json
      - aws_bearer_token_bedrock
    depends_on:
      - datawarehouse_mcp
      - rag_mcp
      - geospatial_mcp
    networks:
      - net_frontend_agent
      - net_agent_datawarehouse
      - net_agent_rag
      - net_agent_geospatial
    environment:
      - ENVIRONMENT=prod

  # ------------------ Data-Warehouse MCP ------------------
  datawarehouse_mcp:
    image: 505646497781.dkr.ecr.us-east-1.amazonaws.com/geosphere/datawarehouse:latest
    container_name: datawarehouse_mcp
    restart: always
    networks:
      - net_agent_datawarehouse

  # ------------------ RAG MCP ------------------
  rag_mcp:
    image: 505646497781.dkr.ecr.us-east-1.amazonaws.com/geosphere/rag:latest
    container_name: rag_mcp
    restart: always
    secrets:
      - aws_bearer_token_bedrock
    networks:
      - net_agent_rag

  # ------------------ Geospatial (GEE) MCP ------------------
  geospatial_mcp:
    image: 505646497781.dkr.ecr.us-east-1.amazonaws.com/geosphere/gee:latest
    container_name: geospatial_mcp
    restart: always
    secrets:
      - ee_auth.json
    networks:
      - net_agent_geospatial

  # ------------------ Watchtower ------------------
  watchtower:
    image: containrrr/watchtower
    container_name: watchtower
    restart: always
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - ${HOME}/.docker/config.json:/config.json:ro
      - ${HOME}/.aws:/.aws:ro
      - helper:/go/bin
    environment:
      - AWS_REGION=us-east-1
      - WATCHTOWER_AWS_AUTOSCAN=true
      - WATCHTOWER_POLL_INTERVAL=300
      - WATCHTOWER_CLEANUP=true
      - WATCHTOWER_ROLLING_RESTART=true
      - WATCHTOWER_REMOVE_VOLUMES=true
      - PATH=$PATH:/go/bin
    networks:
      - watchtower-network
    command: --cleanup frontend agent datawarehouse_mcp rag_mcp geospatial_mcp

# ------------------ Networks ------------------
networks:
  net_frontend_agent:
    driver: bridge
  net_agent_datawarehouse:
    driver: bridge
  net_agent_rag:
    driver: bridge
  net_agent_geospatial:
    driver: bridge
  watchtower-network:
    name: watchtower-network
    driver: bridge

# ------------------ Secrets ------------------
secrets:
  langfuse_host:
    file: ./.secrets/langfuse_host.txt
  langfuse_public_key:
    file: ./.secrets/langfuse_public_key.txt
  langfuse_secret_key:
    file: ./.secrets/langfuse_secret_key.txt
  openai_api_key:
    file: ./.secrets/openai_api_key.txt
  jwt_secret_key:
    file: ./.secrets/jwt_secret_key.txt
  ee_auth.json:
    file: ./.secrets/ee_auth.json
  users:
    file: ./.secrets/users.json
  vertex_auth.json:
    file: ./.secrets/vertex_auth.json
  aws_bearer_token_bedrock:
    file: ./.secrets/aws_bearer_token_bedrock.txt

# ------------------ Volumes ------------------
volumes:
  helper:
    external: true