admin / SAynapse-Horizon

# Synapse-Horizon — Cyber Threat Intelligence dashboard
#
# Production:   docker compose up -d --build        → http://localhost:8080
# Development:  docker compose --profile dev up      → http://localhost:5190
#
# Live-source credentials are read from a local `.env` file (see .env.example).

services:
  # Ingestion backend — fetches, authenticates and normalizes live CTI feeds.
  api:
    build:
      context: ./backend
      dockerfile: Dockerfile
    image: synapse-horizon-api:latest
    container_name: synapse-horizon-api
    env_file:
      - .env
    environment:
      PORT: "4000"
    expose:
      - "4000"
    ports:
      - "4000:4000" # exposed for direct API inspection; remove to keep internal-only
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "wget", "-qO-", "http://localhost:4000/api/health"]
      interval: 30s
      timeout: 4s
      retries: 3
      start_period: 8s

  # Frontend — nginx serves the built SPA and proxies /api → api:4000.
  horizon:
    build:
      context: .
      dockerfile: Dockerfile
    image: synapse-horizon:latest
    container_name: synapse-horizon
    depends_on:
      - api
    ports:
      - "8080:80"
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "wget", "-qO-", "http://localhost/"]
      interval: 30s
      timeout: 3s
      retries: 3
      start_period: 5s

  # Optional hot-reloading dev frontend (Vite). Proxies /api → api:4000.
  horizon-dev:
    profiles: ["dev"]
    image: node:20-alpine
    container_name: synapse-horizon-dev
    working_dir: /app
    command: sh -c "npm install && npm run dev"
    environment:
      VITE_API_TARGET: "http://api:4000"
    depends_on:
      - api
    ports:
      - "5190:5190"
    volumes:
      - ./:/app
      - /app/node_modules
    restart: unless-stopped