yunke/docker-compose.yml

# docker-compose for the yunke data mirror (M6, Part C).
#
# Five services:
#   mysql     — MySQL 8 data store (volume-backed).
#   redis     — Redis 7 (future cache/queue use; not yet wired into the app).
#   backend   — FastAPI viewing API (uvicorn) talking to mysql + redis.
#   scheduler — APScheduler loop (python -m app.sync.cli scheduler) that
#               periodically scrapes yunke CRM into mysql.
#   frontend  — yunkes SPA built with Vite, served by nginx, reverse-proxying
#               /api to the backend service.
#
# Auth: the scheduler + backend read yunke creds from .env (the host's .env
# is passed through as-is). Session-cookie mode (YK_USERID / YK_COMPANY /
# YK_COOKIE) is preferred; pcLogin mode is wired but deferred (see README).
#
# Usage:
#   docker-compose --env-file .env up        # build + start everything
#   docker-compose up backend                # just backend (+ deps)
#   docker-compose logs -f scheduler         # tail scheduler JSON logs
#
# The frontend's container exposes port 80; mapped to 5173 on the host so
# the same URL (http://localhost:5173) works in dev and prod.

services:
  # ----------------------------------------------------------------------- #
  # Data plane
  # ----------------------------------------------------------------------- #
  mysql:
    image: mysql:8.0
    restart: unless-stopped
    environment:
      MYSQL_DATABASE: ${MYSQL_DATABASE:-yunke}
      MYSQL_USER: ${MYSQL_USER:-yunke}
      MYSQL_PASSWORD: ${MYSQL_PASSWORD:-yunke}
      MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD:-root}
    # Default MySQL settings are fine for dev. The container ships its own
    # healthcheck (mysqladmin ping); we use it so dependents wait until the
    # server is actually accepting connections, not just listening on the port.
    healthcheck:
      test: ["CMD", "mysqladmin", "ping", "-h", "localhost"]
      interval: 10s
      timeout: 5s
      retries: 10
    volumes:
      - mysql_data:/var/lib/mysql
    ports:
      # Expose for host-side inspection (mysql CLI / DBeaver); omit if you
      # don't need cross-container access from the host.
      - "3306:3306"

  redis:
    image: redis:7-alpine
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 3s
      retries: 10
    volumes:
      - redis_data:/data

  # ----------------------------------------------------------------------- #
  # Application plane — same image, two entrypoints
  # ----------------------------------------------------------------------- #
  backend:
    build:
      context: ./yunke-server
      dockerfile: Dockerfile
    restart: unless-stopped
    # uvicorn entrypoint (matches the Dockerfile's default CMD, restated so
    # the role of this service is self-documenting at a glance).
    command:
      - uvicorn
      - app.api.main:app
      - --host
      - 0.0.0.0
      - --port
      - "8000"
    depends_on:
      mysql:
        condition: service_healthy
      redis:
        condition: service_healthy
    environment:
      # DB_URL points at the mysql *service* (not localhost) — the container
      # resolves it via docker-compose DNS. asyncmy is the async driver the
      # app expects; the creds match the mysql service block above.
      DB_URL: mysql+asyncmy://${MYSQL_USER:-yunke}:${MYSQL_PASSWORD:-yunke}@mysql:3306/${MYSQL_DATABASE:-yunke}
      REDIS_URL: redis://redis:6379/0
      MEDIA_DIR: /data/media
      # Pass through yunke auth + viewing-API token verbatim from .env so the
      # same .env works in dev and docker.
      YUNKE_BASE_URL: ${YUNKE_BASE_URL:-https://crm2.yunkecn.com}
      YUNKE_USERNAME: ${YUNKE_USERNAME:-}
      YUNKE_PASSWORD: ${YUNKE_PASSWORD:-}
      YK_USERID: ${YK_USERID:-}
      YK_COMPANY: ${YK_COMPANY:-}
      YK_COOKIE: ${YK_COOKIE:-}
      API_TOKEN: ${API_TOKEN:-}
      ENCRYPTION_KEY: ${ENCRYPTION_KEY:-}
    volumes:
      # Persist downloaded media blobs across container restarts.
      - media_data:/data/media
    ports:
      - "8000:8000"

  scheduler:
    build:
      context: ./yunke-server
      dockerfile: Dockerfile
    restart: unless-stopped
    # Scheduler entrypoint — same image, different command. Cadence is
    # configurable via env (FULL_SYNC_HOUR / MESSAGE_INTERVAL_HOURS) so
    # operators can tune without rebuilding.
    command:
      - python
      - -m
      - app.sync.cli
      - scheduler
    depends_on:
      mysql:
        condition: service_healthy
      redis:
        condition: service_healthy
    environment:
      DB_URL: mysql+asyncmy://${MYSQL_USER:-yunke}:${MYSQL_PASSWORD:-yunke}@mysql:3306/${MYSQL_DATABASE:-yunke}
      REDIS_URL: redis://redis:6379/0
      MEDIA_DIR: /data/media
      YUNKE_BASE_URL: ${YUNKE_BASE_URL:-https://crm2.yunkecn.com}
      YUNKE_USERNAME: ${YUNKE_USERNAME:-}
      YUNKE_PASSWORD: ${YUNKE_PASSWORD:-}
      YK_USERID: ${YK_USERID:-}
      YK_COMPANY: ${YK_COMPANY:-}
      YK_COOKIE: ${YK_COOKIE:-}
      ENCRYPTION_KEY: ${ENCRYPTION_KEY:-}
      # Scheduler cadence (env-driven; see app.sync.cli._cmd_scheduler).
      FULL_SYNC_HOUR: ${FULL_SYNC_HOUR:-2}
      MESSAGE_INTERVAL_HOURS: ${MESSAGE_INTERVAL_HOURS:-4}
    volumes:
      # Share the media volume with backend so both services see the same
      # downloaded blobs (read-only would be ideal but the scheduler is the
      # writer; mounting read-write here is the simplest correct config).
      - media_data:/data/media

  # ----------------------------------------------------------------------- #
  # Frontend — built + served by nginx
  # ----------------------------------------------------------------------- #
  frontend:
    build:
      context: ./yunkes
      dockerfile: Dockerfile
    restart: unless-stopped
    depends_on:
      - backend
    ports:
      # Map nginx's :80 to the host's :5173 so the same URL
      # (http://localhost:5173) works in dev (vite) and prod (nginx).
      - "5173:80"

volumes:
  mysql_data:
  redis_data:
  media_data: