docker-compose.dev.yml

# Orion Platform — Dev Compose (Codespace / Local Testing)
# Mirrors production topology for integration testing on amd64.
# Production targets linux/arm64 (RPi5) — use deploy-to-cluster.sh for ARM builds.
#
# Usage:
#   docker compose -f docker-compose.dev.yml build
#   docker compose -f docker-compose.dev.yml up -d
#   docker compose -f docker-compose.dev.yml logs -f
#   docker compose -f docker-compose.dev.yml down

services:

  # --- MAL01 stack (Memory / Router / Management) ---

  orion-router:
    build: ./src/orion-router
    image: orion/orion-router:dev
    container_name: orion-router-dev
    ports:
      - "127.0.0.1:7200:7200"
      - "127.0.0.1:7201:7201"
      - "127.0.0.1:7202:7202"
      - "127.0.0.1:7210:7210"
    environment:
      DATA_PORT: "7200"
      HEALTH_PORT: "7201"
      CONTROL_PORT: "7202"
      ROUTING_API_PORT: "7210"
      ROUTING_API_HOST: "0.0.0.0"
      MEMORY_HOST: "orion-memory-connection"
      MEMORY_DATA_PORT: "7300"
      ANALYTICS_HOST: "orion-analytics-ingestion"
      ANALYTICS_DATA_PORT: "7400"
      ANALYTICS_HEALTH_PORT: "7401"
      ORION_PSK: "${ORION_PSK:-dev-test-psk}"
      PRIORITY_MODE: "dev"
      LOG_LEVEL: "DEBUG"
    networks:
      - orion-router
      - orion-bridge
    security_opt:
      - no-new-privileges:true
    read_only: true
    tmpfs:
      - /tmp

  orion-memory-connection:
    build: ./src/orion-memory-connection
    image: orion/memory-connection-v2:dev
    container_name: orion-memory-connection-dev
    ports:
      - "127.0.0.1:7300:7300"
      - "127.0.0.1:7301:7301"
      - "127.0.0.1:7302:7302"
    volumes:
      - memory-db:/data
      - memory-sockets:/sockets
    environment:
      NODE_TYPE: MEMORY
      NODE_ID: ANDROMEDA
      CTRL01_HOST: "orion-router"
      CTRL01_ROUTING_API: "http://orion-router:7210"
      SESSION_AUTHORITY: "true"
      CONFIG_STORE: "true"
      SOCKET_DIR: /sockets
      ORION_PSK: "${ORION_PSK:-dev-test-psk}"
    networks:
      - orion-memory
      - orion-bridge
    security_opt:
      - no-new-privileges:true

  orion-memory-orchestration:
    build: ./src/orion-memory-orchestration
    image: orion/memory-orchestration-v2:dev
    container_name: orion-memory-orchestration-dev
    ports:
      - "127.0.0.1:7310:7310"
      - "127.0.0.1:7315:7315"
    volumes:
      - memory-db:/data
      - memory-sockets:/sockets
    environment:
      MCP_PORT: "7310"
      CONFIG_API_PORT: "7315"
      ROUTING_DIRECTOR: "true"
      CTRL01_ROUTING_API: "http://orion-router:7210"
      ORION_PSK: "${ORION_PSK:-dev-test-psk}"
    networks:
      - orion-memory
      - orion-bridge
    depends_on:
      - orion-memory-connection
    security_opt:
      - no-new-privileges:true

  orion-management-core:
    build: ./src/orion-management-core
    image: orion/management-core:dev
    container_name: orion-management-core-dev
    ports:
      - "127.0.0.1:7321:7321"
    volumes:
      - memory-db:/data
      - memory-sockets:/sockets
    environment:
      MGMT_PORT: "7321"
      MGMT_API_KEY: "${MGMT_API_KEY:?Set MGMT_API_KEY in your local .env file}"
      CTRL01_ROUTING_API: "http://orion-router:7210"
      ASL01_HOST: "orion-analytics-ingestion"
      MAL01_HOST: "orion-memory-connection"
      ORION_KEYSTORE_PATH: /data/.orion/keystore.enc
      SYSTEM_MCP_URL: "http://orion-memory-orchestration:7310"
      ORION_PSK: "${ORION_PSK:-dev-test-psk}"
    networks:
      - orion-memory
      - orion-bridge
    depends_on:
      - orion-memory-orchestration
    security_opt:
      - no-new-privileges:true

  orion-management-portal:
    build:
      context: ./src/orion-management-core
      dockerfile: portal/Dockerfile
    image: orion/management-portal:dev
    container_name: orion-management-portal-dev
    ports:
      - "127.0.0.1:7320:7320"
    environment:
      PORTAL_PORT: "7320"
      PORTAL_BIND: "0.0.0.0"
      MGMT_API_URL: "http://orion-management-core:7321"
      MGMT_API_KEY: "${MGMT_API_KEY:?Set MGMT_API_KEY in your local .env file}"
      SYSTEM_MCP_URL: "http://orion-memory-orchestration:7310"
      PORTAL_ADMIN_USER: "${PORTAL_ADMIN_USER:-admin}"
      PORTAL_ADMIN_PASS: "${PORTAL_ADMIN_PASS:?Set PORTAL_ADMIN_PASS in your local .env file}"
      PORTAL_SESSION_KEY: "${PORTAL_SESSION_KEY:?Set PORTAL_SESSION_KEY in your local .env file}"
    networks:
      - orion-memory
      - orion-bridge
    depends_on:
      - orion-management-core
    security_opt:
      - no-new-privileges:true

  # --- Infrastructure Control Panel ---

  orion-infra-control:
    build: ./src/orion-infra-control
    image: orion/infra-control:dev
    container_name: orion-infra-control-dev
    ports:
      - "127.0.0.1:7330:7330"
    volumes:
      - infra-control-data:/data
    environment:
      INFRA_PORT: "7330"
      INFRA_BIND: "0.0.0.0"
      INFRA_ADMIN_USER: "admin"
      INFRA_ADMIN_PASS: "${INFRA_ADMIN_PASS:?Set INFRA_ADMIN_PASS in your local .env file}"
      INFRA_SESSION_KEY: "${INFRA_SESSION_KEY:?Set INFRA_SESSION_KEY in your local .env file}"
      INFRA_COOKIE_SECURE: "${INFRA_COOKIE_SECURE:-false}"
      INFRA_API_KEY: "${INFRA_API_KEY:-}"
      TAILSCALE_API_KEY: "${TAILSCALE_API_KEY:-}"
      TAILSCALE_TAILNET: "${TAILSCALE_TAILNET:--}"
      GITHUB_TOKEN: "${GITHUB_TOKEN:-}"
      SSH_KEY_PATH: ""
      METRICS_INTERVAL_S: "15"
      LOG_LEVEL: "DEBUG"
    networks:
      - orion-memory
      - orion-bridge
    depends_on:
      - orion-management-core
    security_opt:
      - no-new-privileges:true
    read_only: true
    tmpfs:
      - /tmp

  # --- ASL01 stack (Analytics) ---

  orion-analytics-ingestion:
    build: ./src/orion-ingestion
    image: orion/analytics-ingestion:dev
    container_name: orion-analytics-ingestion-dev
    ports:
      - "127.0.0.1:7400:7400"
      - "127.0.0.1:7401:7401"
      - "127.0.0.1:9091:9091"
    volumes:
      - analytics-data:/data
      - analytics-sockets:/sockets
    environment:
      NODE_ID: SOMBRERO
      CTRL01_HOST: "orion-router"
      ANALYTICS_DB_PATH: /data/orion_analytics.db
      ANALYTICS_DATA_PORT: "7400"
      ANALYTICS_HEALTH_PORT: "7401"
      METRICS_PORT: "9091"
      LOG_LEVEL: DEBUG
      ORION_PSK: "${ORION_PSK:-dev-test-psk}"
    networks:
      - orion-analytics
      - orion-bridge
    security_opt:
      - no-new-privileges:true

networks:
  orion-router:
    name: orion-router
    driver: bridge
  orion-memory:
    name: orion-memory
    driver: bridge
  orion-analytics:
    name: orion-analytics
    driver: bridge
  # Bridge network allows cross-stack communication (dev only)
  # In production, nodes communicate over Tailscale IPs instead
  orion-bridge:
    name: orion-bridge
    driver: bridge

volumes:
  memory-db:
  memory-sockets:
  analytics-data:
  analytics-sockets:
  infra-control-data: