docker-compose.distributed.yml

services:
  # Redis/Valkey for distributed caching and sessions
  valkey:
    image: valkey/valkey:7.2-alpine
    container_name: dirge-valkey
    restart: unless-stopped
    ports:
      - "6379:6379"
    volumes:
      - valkey-data:/data
    command: valkey-server --appendonly yes --maxmemory 256mb --maxmemory-policy allkeys-lru
    healthcheck:
      test: ["CMD", "valkey-cli", "ping"]
      interval: 10s
      timeout: 3s
      retries: 3
    networks:
      - dirge-cluster
    deploy:
      resources:
        limits:
          cpus: '1'
          memory: 512M

  # Master node - coordinator with auto-updater
  dirge-master:
    build:
      context: .
      dockerfile: Dockerfile
    image: dirge:latest
    container_name: dirge-master
    restart: unless-stopped
    ports:
      - "8080:8080"
      - "8081:8081"
    volumes:
      - ./config.toml:/app/config.toml:ro
      - ./routes.toml:/app/routes.toml:ro
      - ./home:/app/home:ro
      - ./admin-home:/app/admin-home:ro
      - shared-config:/app/shared
      - master-data:/app/internals
    environment:
      - TZ=UTC
      - DIRGE_NODE_ROLE=master
      - DIRGE_PREFORK=true

      # Server
      - DIRGE_BIND=0.0.0.0
      - DIRGE_PORT=8080
      - DIRGE_CMD_PORT=8081

      # Database (shared or per-node)
      - DIRGE_DB_TYPE=sqlite3
      - DIRGE_DB_DSN=/app/internals/database.db

      # Distributed cache
      - DIRGE_CACHE_VALKEY_URL=valkey://valkey:6379/0
      - DIRGE_CACHE_MEMORY=false

      # Session storage
      - DIRGE_AUTH_SESSION_STORAGE=valkey

      # Observability
      - DIRGE_OBSERVABILITY_ENABLED=true
      - DIRGE_HEALTH_CHECK_ENABLED=true
      - DIRGE_METRICS_ENABLED=true
      - DIRGE_PROMETHEUS_ENABLED=true

      # Updater configuration
      - DIRGE_UPDATER_ENABLED=true
      - DIRGE_UPDATER_AUTHORITATIVE=true
      - DIRGE_UPDATER_CHECK_INTERVAL=24
      - DIRGE_UPDATER_AUTO_APPLY=false
      - DIRGE_UPDATER_CHANNEL=stable

      # Auth
      - DIRGE_AUTH_BASIC_USERNAME=admin
      - DIRGE_AUTH_BASIC_PASSWORD=changeme
    depends_on:
      valkey:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:8080/h/live"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 15s
    networks:
      - dirge-cluster
    deploy:
      resources:
        limits:
          cpus: '2'
          memory: 768M

  # Auth node - dedicated authentication and session management
  dirge-auth:
    build:
      context: .
      dockerfile: Dockerfile
    image: dirge:latest
    container_name: dirge-auth
    restart: unless-stopped
    ports:
      - "8082:8080"
    volumes:
      - ./config.toml:/app/config.toml:ro
      - ./routes.toml:/app/routes.toml:ro
      - ./home:/app/home:ro
      - ./admin-home:/app/admin-home:ro
      - shared-config:/app/shared:ro
      - auth-data:/app/internals
    environment:
      - TZ=UTC
      - DIRGE_NODE_ROLE=auth
      - DIRGE_PREFORK=true

      # Server
      - DIRGE_BIND=0.0.0.0
      - DIRGE_PORT=8080
      - DIRGE_CMD_PORT=8081

      # Database
      - DIRGE_DB_TYPE=sqlite3
      - DIRGE_DB_DSN=/app/internals/database.db

      # Distributed cache
      - DIRGE_CACHE_VALKEY_URL=valkey://valkey:6379/0
      - DIRGE_CACHE_MEMORY=false

      # Session storage
      - DIRGE_AUTH_SESSION_STORAGE=valkey

      # Observability
      - DIRGE_OBSERVABILITY_ENABLED=true
      - DIRGE_HEALTH_CHECK_ENABLED=true

      # Auth
      - DIRGE_AUTH_ENABLED=true
      - DIRGE_AUTH_TYPE=paseto
    depends_on:
      valkey:
        condition: service_healthy
      dirge-master:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:8080/h/live"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 15s
    networks:
      - dirge-cluster
    deploy:
      resources:
        limits:
          cpus: '1'
          memory: 512M

  # Worker nodes - scalable request handlers
  dirge-worker-1:
    build:
      context: .
      dockerfile: Dockerfile
    image: dirge:latest
    container_name: dirge-worker-1
    restart: unless-stopped
    ports:
      - "8083:8080"
    volumes:
      - ./config.toml:/app/config.toml:ro
      - ./routes.toml:/app/routes.toml:ro
      - ./home:/app/home:ro
      - ./admin-home:/app/admin-home:ro
      - shared-config:/app/shared:ro
      - worker1-data:/app/internals
    environment:
      - TZ=UTC
      - DIRGE_NODE_ROLE=worker
      - DIRGE_PREFORK=true

      # Server
      - DIRGE_BIND=0.0.0.0
      - DIRGE_PORT=8080
      - DIRGE_CMD_PORT=8081

      # Database (read replica or shared)
      - DIRGE_DB_TYPE=sqlite3
      - DIRGE_DB_DSN=/app/internals/database.db

      # Distributed cache
      - DIRGE_CACHE_VALKEY_URL=valkey://valkey:6379/0
      - DIRGE_CACHE_MEMORY=false

      # Session storage
      - DIRGE_AUTH_SESSION_STORAGE=valkey

      # Observability
      - DIRGE_OBSERVABILITY_ENABLED=true
      - DIRGE_HEALTH_CHECK_ENABLED=true
    depends_on:
      valkey:
        condition: service_healthy
      dirge-master:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:8080/h/live"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 15s
    networks:
      - dirge-cluster
    deploy:
      resources:
        limits:
          cpus: '2'
          memory: 512M

  dirge-worker-2:
    build:
      context: .
      dockerfile: Dockerfile
    image: dirge:latest
    container_name: dirge-worker-2
    restart: unless-stopped
    ports:
      - "8084:8080"
    volumes:
      - ./config.toml:/app/config.toml:ro
      - ./routes.toml:/app/routes.toml:ro
      - ./home:/app/home:ro
      - ./admin-home:/app/admin-home:ro
      - shared-config:/app/shared:ro
      - worker2-data:/app/internals
    environment:
      - TZ=UTC
      - DIRGE_NODE_ROLE=worker
      - DIRGE_PREFORK=true

      # Server
      - DIRGE_BIND=0.0.0.0
      - DIRGE_PORT=8080
      - DIRGE_CMD_PORT=8081

      # Database (read replica or shared)
      - DIRGE_DB_TYPE=sqlite3
      - DIRGE_DB_DSN=/app/internals/database.db

      # Distributed cache
      - DIRGE_CACHE_VALKEY_URL=valkey://valkey:6379/0
      - DIRGE_CACHE_MEMORY=false

      # Session storage
      - DIRGE_AUTH_SESSION_STORAGE=valkey

      # Observability
      - DIRGE_OBSERVABILITY_ENABLED=true
      - DIRGE_HEALTH_CHECK_ENABLED=true
    depends_on:
      valkey:
        condition: service_healthy
      dirge-master:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:8080/h/live"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 15s
    networks:
      - dirge-cluster
    deploy:
      resources:
        limits:
          cpus: '2'
          memory: 512M

  # Load balancer (optional - use Nginx or Traefik in production)
  # nginx:
  #   image: nginx:alpine
  #   container_name: dirge-lb
  #   restart: unless-stopped
  #   ports:
  #     - "80:80"
  #     - "443:443"
  #   volumes:
  #     - ./nginx.conf:/etc/nginx/nginx.conf:ro
  #   depends_on:
  #     - dirge-master
  #     - dirge-worker-1
  #     - dirge-worker-2
  #   networks:
  #     - dirge-cluster

volumes:
  valkey-data:
    driver: local
  shared-config:
    driver: local
  master-data:
    driver: local
  auth-data:
    driver: local
  worker1-data:
    driver: local
  worker2-data:
    driver: local

networks:
  dirge-cluster:
    driver: bridge
    ipam:
      config:
        - subnet: 172.20.0.0/16