docker-compose.yml

networks:
  flow-ai-network:
    driver: bridge

volumes:
  postgres_data:
    driver: local

services:
  # 1. Postgres - Main database
  postgres:
    image: docker.io/postgres:${POSTGRES_VERSION:-latest}
    container_name: flowtech-ai-postgres-1
    restart: always
    networks: [flow-ai-network]
    environment:
      POSTGRES_USER: ${POSTGRES_USER:-n8n}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
      POSTGRES_DB: ${POSTGRES_DB:-n8n}
      POSTGRES_INITDB_ARGS: "--encoding=UTF-8 --lc-collate=C --lc-ctype=C"
    volumes:
      - postgres_data:/var/lib/postgresql/data
      - ./.AI_Data/postgres-init:/docker-entrypoint-initdb.d
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-n8n} -d ${POSTGRES_DB:-n8n}"]
      interval: 5s
      timeout: 5s
      retries: 5

  # 2. Redis - Cache et files d'attente
  redis:
    image: docker.io/redis:7
    container_name: redis
    restart: always
    networks: [flow-ai-network]
    command: --requirepass ${REDIS_AUTH}
    ports:
      - "127.0.0.1:6379:6379"
    volumes:
      - ./.AI_Data/redis:/data
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 3s
      timeout: 10s
      retries: 10

  # 3. MinIO - Stockage S3-compatible
  minio:
    image: docker.io/minio/minio
    container_name: minio
    restart: always
    networks: [flow-ai-network]
    entrypoint: sh
    # create the 'langfuse' bucket before starting the service
    command: -c 'mkdir -p /data/langfuse && minio server --address ":9000" --console-address ":9001" /data'
    environment:
      MINIO_ROOT_USER: minio
      MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD:-miniosecret}
    ports:
      - "9092:9000"
      - "127.0.0.1:9093:9001"
    volumes:
      - ./.AI_Data/minio:/data
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:9000/minio/health/live"]
      interval: 5s
      timeout: 5s
      retries: 5
      start_period: 10s

  # 4. ClickHouse - Analytics database
  clickhouse:
    image: docker.io/clickhouse/clickhouse-server
    container_name: clickhouse
    restart: always
    networks: [flow-ai-network]
    environment:
      CLICKHOUSE_DB: langfuse
      CLICKHOUSE_USER: langfuse
      CLICKHOUSE_PASSWORD: ${CLICKHOUSE_PASSWORD:-clickhousepassword}
      CLICKHOUSE_DEFAULT_ACCESS_MANAGEMENT: 1
      CLICKHOUSE_CLUSTER_ENABLED: false
    ports:
      - "127.0.0.1:8123:8123"
      - "127.0.0.1:9000:9000"
    volumes:
      - ./.AI_Data/clickhouse:/var/lib/clickhouse
      - ./.AI_Data/clickhouse-logs:/var/log/clickhouse-server
    healthcheck:
      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:8123/ping"]
      interval: 5s
      timeout: 5s
      retries: 5

  # 5. Qdrant - Vector memory
  qdrant:
    image: qdrant/qdrant:latest
    container_name: qdrant
    hostname: qdrant
    restart: unless-stopped
    networks:
      - flow-ai-network
    ports:
      - "6333:6333"
      - "6334:6334"
    volumes:
      - ./.AI_Data/qdrant:/qdrant/storage
    environment:
      - QDRANT__SERVICE__HTTP_PORT=6333
      - QDRANT__SERVICE__GRPC_PORT=6334

  # 5.1. MCP-Qdrant - Model Context Protocol Server for Cursor
  # MCP-Qdrant : Collection cursor-context (read/write) for code
  # Uses BAAI/bge-large-en-v1.5 (1024 dims, 1.2GB) via FastEmbed (Production-ready)
  mcp-qdrant:
    build:
      context: ./mcp-qdrant
      dockerfile: Dockerfile
    image: flowtech/mcp-qdrant:latest
    container_name: mcp-qdrant
    restart: unless-stopped
    networks:
      - flow-ai-network
    depends_on:
      qdrant:
        condition: service_started
    ports:
      - "${MCP_QDRANT_PORT:-8000}:8000"
    environment:
      - QDRANT_URL=http://qdrant:6333
      - COLLECTION_NAME=${MCP_QDRANT_COLLECTION:-cursor-context}
      - EMBEDDING_MODEL=BAAI/bge-large-en-v1.5
      - EMBEDDING_PROVIDER=fastembed
      - FASTMCP_PORT=8000
      - FASTMCP_HOST=0.0.0.0
    volumes:
      - ./.AI_Data/mcp-qdrant:/app/data
    deploy:
      resources:
        limits:
          cpus: '2.0'
          memory: 4G
        reservations:
          cpus: '0.5'
          memory: 512M

  # MCP-Qdrant-Knowledge : Collection cursor-knowledge (read/write) for notes
  # Synchronise automatiquement les notes du dossier Notes/ avec FastEmbed
  mcp-qdrant-knowledge:
    build:
      context: ./mcp-qdrant
      dockerfile: Dockerfile
    image: flowtech/mcp-qdrant:latest
    container_name: mcp-qdrant-knowledge
    restart: unless-stopped
    networks:
      - flow-ai-network
    depends_on:
      qdrant:
        condition: service_started
    ports:
      - "${MCP_QDRANT_KNOWLEDGE_PORT:-8001}:8000"
    environment:
      - QDRANT_URL=http://qdrant:6333
      - COLLECTION_NAME=cursor-knowledge
      - EMBEDDING_MODEL=BAAI/bge-large-en-v1.5
      - EMBEDDING_PROVIDER=fastembed
      - FASTMCP_PORT=8000
      - FASTMCP_HOST=0.0.0.0
    volumes:
      - ./.AI_Data/mcp-qdrant-knowledge:/app/data
    deploy:
      resources:
        limits:
          cpus: '1.0'
          memory: 2G
        reservations:
          cpus: '0.25'
          memory: 256M


  # 6. Langfuse-worker - Migrations et traitement
  langfuse-worker:
    image: docker.io/langfuse/langfuse-worker:3
    container_name: langfuse-worker
    restart: always
    networks: [flow-ai-network]
    environment:
      # Base
      NEXTAUTH_URL: http://localhost:3000
      # Database
      DATABASE_URL: ${LANGFUSE_DATABASE_URL}
      # ClickHouse
      CLICKHOUSE_MIGRATION_URL: ${CLICKHOUSE_MIGRATION_URL:-clickhouse://clickhouse:9000}
      CLICKHOUSE_URL: ${CLICKHOUSE_URL:-http://clickhouse:8123}
      CLICKHOUSE_USER: ${CLICKHOUSE_USER:-clickhouse}
      CLICKHOUSE_PASSWORD: ${CLICKHOUSE_PASSWORD:-clickhouse}
      CLICKHOUSE_CLUSTER_ENABLED: ${CLICKHOUSE_CLUSTER_ENABLED:-false}
      # Redis
      REDIS_HOST: redis
      REDIS_PORT: 6379
      REDIS_AUTH: ${REDIS_AUTH}
      REDIS_URL: redis://:${REDIS_AUTH}@redis:6379
      # S3
      LANGFUSE_S3_EVENT_UPLOAD_BUCKET: ${LANGFUSE_S3_EVENT_UPLOAD_BUCKET:-langfuse}
      LANGFUSE_S3_EVENT_UPLOAD_REGION: ${LANGFUSE_S3_EVENT_UPLOAD_REGION:-auto}
      LANGFUSE_S3_EVENT_UPLOAD_ACCESS_KEY_ID: ${LANGFUSE_S3_EVENT_UPLOAD_ACCESS_KEY_ID:-minio}
      LANGFUSE_S3_EVENT_UPLOAD_SECRET_ACCESS_KEY: ${LANGFUSE_S3_EVENT_UPLOAD_SECRET_ACCESS_KEY:-miniosecret}
      LANGFUSE_S3_EVENT_UPLOAD_ENDPOINT: ${LANGFUSE_S3_EVENT_UPLOAD_ENDPOINT:-http://minio:9000}
      LANGFUSE_S3_EVENT_UPLOAD_FORCE_PATH_STYLE: ${LANGFUSE_S3_EVENT_UPLOAD_FORCE_PATH_STYLE:-true}
      LANGFUSE_S3_EVENT_UPLOAD_PREFIX: ${LANGFUSE_S3_EVENT_UPLOAD_PREFIX:-events/}
      LANGFUSE_S3_MEDIA_UPLOAD_BUCKET: ${LANGFUSE_S3_MEDIA_UPLOAD_BUCKET:-langfuse}
      LANGFUSE_S3_MEDIA_UPLOAD_REGION: ${LANGFUSE_S3_MEDIA_UPLOAD_REGION:-auto}
      LANGFUSE_S3_MEDIA_UPLOAD_ACCESS_KEY_ID: ${LANGFUSE_S3_MEDIA_UPLOAD_ACCESS_KEY_ID:-minio}
      LANGFUSE_S3_MEDIA_UPLOAD_SECRET_ACCESS_KEY: ${LANGFUSE_S3_MEDIA_UPLOAD_SECRET_ACCESS_KEY:-miniosecret}
      LANGFUSE_S3_MEDIA_UPLOAD_ENDPOINT: ${LANGFUSE_S3_MEDIA_UPLOAD_ENDPOINT:-http://localhost:9092}
      LANGFUSE_S3_MEDIA_UPLOAD_FORCE_PATH_STYLE: ${LANGFUSE_S3_MEDIA_UPLOAD_FORCE_PATH_STYLE:-true}
      LANGFUSE_S3_MEDIA_UPLOAD_PREFIX: ${LANGFUSE_S3_MEDIA_UPLOAD_PREFIX:-media/}
      # Langfuse
      LANGFUSE_HOST: ${LANGFUSE_HOST:-http://langfuse:3000}
      LANGFUSE_SECRET_KEY: ${LANGFUSE_SECRET_KEY}
      LANGFUSE_PUBLIC_KEY: ${LANGFUSE_PUBLIC_KEY}
      LANGFUSE_ENCRYPTION_KEY: ${LANGFUSE_ENCRYPTION_KEY}
      SALT: ${LANGFUSE_SALT}
      NEXTAUTH_SECRET: ${LANGFUSE_NEXTAUTH_SECRET}
      LANGFUSE_TRACING_ENVIRONMENT: ${LANGFUSE_TRACING_ENVIRONMENT:-dev}
      LANGFUSE_INIT_PROJECT_RETENTION: ${LANGFUSE_INIT_PROJECT_RETENTION:-30}
      LANGFUSE_INIT_ORG_ID: ${LANGFUSE_INIT_ORG_ID:-FlowTech-LAB}
      LANGFUSE_INIT_PROJECT_ID: ${LANGFUSE_INIT_PROJECT_ID:-default}
      LANGFUSE_INIT_USER_EMAIL: ${LANGFUSE_INIT_USER_EMAIL:-admin@flowtech.local}
      LANGFUSE_INIT_USER_NAME: ${LANGFUSE_INIT_USER_NAME:-Admin}
      LANGFUSE_INIT_USER_PASSWORD: ${LANGFUSE_INIT_USER_PASSWORD}
      LANGFUSE_INIT_PROJECT_PUBLIC_KEY: ${LANGFUSE_INIT_PROJECT_PUBLIC_KEY}
      LANGFUSE_INIT_PROJECT_SECRET_KEY: ${LANGFUSE_INIT_PROJECT_SECRET_KEY}
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
      minio:
        condition: service_healthy
      clickhouse:
        condition: service_healthy

  # 7. Langfuse-web - Interface utilisateur
  langfuse-web:
    image: docker.io/langfuse/langfuse:3
    container_name: langfuse-web
    restart: always
    networks: [flow-ai-network]
    ports:
      - "${LANGFUSE_PORT:-3300}:3000"
    environment:
      # Base
      NEXTAUTH_URL: http://localhost:3000
      # Database
      DATABASE_URL: ${LANGFUSE_DATABASE_URL}
      # ClickHouse
      CLICKHOUSE_MIGRATION_URL: ${CLICKHOUSE_MIGRATION_URL:-clickhouse://clickhouse:9000}
      CLICKHOUSE_URL: ${CLICKHOUSE_URL:-http://clickhouse:8123}
      CLICKHOUSE_USER: ${CLICKHOUSE_USER:-clickhouse}
      CLICKHOUSE_PASSWORD: ${CLICKHOUSE_PASSWORD:-clickhouse}
      CLICKHOUSE_CLUSTER_ENABLED: ${CLICKHOUSE_CLUSTER_ENABLED:-false}
      # Redis
      REDIS_HOST: redis
      REDIS_PORT: 6379
      REDIS_AUTH: ${REDIS_AUTH}
      REDIS_URL: redis://:${REDIS_AUTH}@redis:6379
      # S3
      LANGFUSE_S3_EVENT_UPLOAD_BUCKET: ${LANGFUSE_S3_EVENT_UPLOAD_BUCKET:-langfuse}
      LANGFUSE_S3_EVENT_UPLOAD_REGION: ${LANGFUSE_S3_EVENT_UPLOAD_REGION:-auto}
      LANGFUSE_S3_EVENT_UPLOAD_ACCESS_KEY_ID: ${LANGFUSE_S3_EVENT_UPLOAD_ACCESS_KEY_ID:-minio}
      LANGFUSE_S3_EVENT_UPLOAD_SECRET_ACCESS_KEY: ${LANGFUSE_S3_EVENT_UPLOAD_SECRET_ACCESS_KEY:-miniosecret}
      LANGFUSE_S3_EVENT_UPLOAD_ENDPOINT: ${LANGFUSE_S3_EVENT_UPLOAD_ENDPOINT:-http://minio:9000}
      LANGFUSE_S3_EVENT_UPLOAD_FORCE_PATH_STYLE: ${LANGFUSE_S3_EVENT_UPLOAD_FORCE_PATH_STYLE:-true}
      LANGFUSE_S3_EVENT_UPLOAD_PREFIX: ${LANGFUSE_S3_EVENT_UPLOAD_PREFIX:-events/}
      LANGFUSE_S3_MEDIA_UPLOAD_BUCKET: ${LANGFUSE_S3_MEDIA_UPLOAD_BUCKET:-langfuse}
      LANGFUSE_S3_MEDIA_UPLOAD_REGION: ${LANGFUSE_S3_MEDIA_UPLOAD_REGION:-auto}
      LANGFUSE_S3_MEDIA_UPLOAD_ACCESS_KEY_ID: ${LANGFUSE_S3_MEDIA_UPLOAD_ACCESS_KEY_ID:-minio}
      LANGFUSE_S3_MEDIA_UPLOAD_SECRET_ACCESS_KEY: ${LANGFUSE_S3_MEDIA_UPLOAD_SECRET_ACCESS_KEY:-miniosecret}
      LANGFUSE_S3_MEDIA_UPLOAD_ENDPOINT: ${LANGFUSE_S3_MEDIA_UPLOAD_ENDPOINT:-http://localhost:9092}
      LANGFUSE_S3_MEDIA_UPLOAD_FORCE_PATH_STYLE: ${LANGFUSE_S3_MEDIA_UPLOAD_FORCE_PATH_STYLE:-true}
      LANGFUSE_S3_MEDIA_UPLOAD_PREFIX: ${LANGFUSE_S3_MEDIA_UPLOAD_PREFIX:-media/}
      # Langfuse
      LANGFUSE_HOST: ${LANGFUSE_HOST:-http://langfuse:3000}
      LANGFUSE_SECRET_KEY: ${LANGFUSE_SECRET_KEY}
      LANGFUSE_PUBLIC_KEY: ${LANGFUSE_PUBLIC_KEY}
      LANGFUSE_ENCRYPTION_KEY: ${LANGFUSE_ENCRYPTION_KEY}
      SALT: ${LANGFUSE_SALT}
      NEXTAUTH_SECRET: ${LANGFUSE_NEXTAUTH_SECRET}
      LANGFUSE_TRACING_ENVIRONMENT: ${LANGFUSE_TRACING_ENVIRONMENT:-dev}
      LANGFUSE_INIT_PROJECT_RETENTION: ${LANGFUSE_INIT_PROJECT_RETENTION:-30}
      LANGFUSE_INIT_ORG_ID: ${LANGFUSE_INIT_ORG_ID:-FlowTech-LAB}
      LANGFUSE_INIT_PROJECT_ID: ${LANGFUSE_INIT_PROJECT_ID:-default}
      LANGFUSE_INIT_USER_EMAIL: ${LANGFUSE_INIT_USER_EMAIL:-admin@flowtech.local}
      LANGFUSE_INIT_USER_NAME: ${LANGFUSE_INIT_USER_NAME:-Admin}
      LANGFUSE_INIT_USER_PASSWORD: ${LANGFUSE_INIT_USER_PASSWORD}
      LANGFUSE_INIT_PROJECT_PUBLIC_KEY: ${LANGFUSE_INIT_PROJECT_PUBLIC_KEY}
      LANGFUSE_INIT_PROJECT_SECRET_KEY: ${LANGFUSE_INIT_PROJECT_SECRET_KEY}
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
      clickhouse:
        condition: service_healthy
      langfuse-worker:
        condition: service_started

  # 8. n8n - Orchestrateur
  n8n:
    image: n8nio/n8n:latest
    container_name: flowtech-ai-n8n-1
    restart: unless-stopped
    networks:
      - flow-ai-network
    environment:
      - N8N_BASIC_AUTH_ACTIVE=true
      - N8N_BASIC_AUTH_USER=${N8N_BASIC_AUTH_USER:-admin}
      - N8N_BASIC_AUTH_PASSWORD=${N8N_BASIC_AUTH_PASSWORD:-admin}
      - N8N_SECURITY_API_BEARER_AUTH=${N8N_SECURITY_API_BEARER_AUTH}
      - N8N_HOST=${N8N_HOST:-localhost}
      - N8N_PORT=${N8N_PORT:-5678}
      - N8N_PROTOCOL=${N8N_PROTOCOL:-http}
      - WEBHOOK_URL=${WEBHOOK_URL:-http://localhost:5678/}
      - GENERIC_TIMEZONE=${TZ:-Europe/Paris}
      - N8N_METRICS=true
      - N8N_LOG_LEVEL=info
      - N8N_LOG_OUTPUT=console
      - DB_TYPE=postgresdb
      - DB_POSTGRESDB_HOST=postgres
      - DB_POSTGRESDB_PORT=5432
      - DB_POSTGRESDB_DATABASE=${POSTGRES_DB:-n8n}
      - DB_POSTGRESDB_USER=${POSTGRES_USER:-n8n}
      - DB_POSTGRESDB_PASSWORD=${POSTGRES_PASSWORD}
      - N8N_SECURE_COOKIE=false
      - N8N_USER_MANAGEMENT_DISABLED=false
      - N8N_DIAGNOSTICS_ENABLED=false
      - N8N_VERSION_NOTIFICATIONS_ENABLED=false
      - N8N_TEMPLATES_ENABLED=false
      - N8N_ONBOARDING_FLOW_DISABLED=true
      - N8N_PERSONALIZATION_ENABLED=false
      - N8N_DEFAULT_BINARY_DATA_MODE=filesystem
      - N8N_BINARY_DATA_TTL=24
      - N8N_BINARY_DATA_MAX_SIZE=16777216
      - EXECUTIONS_PROCESS=main
      - EXECUTIONS_MODE=regular
      - QUEUE_BULL_REDIS_HOST=redis
      - QUEUE_BULL_REDIS_PORT=6379
      - QUEUE_BULL_REDIS_PASSWORD=${REDIS_AUTH}
      - QUEUE_BULL_REDIS_DB=0
    volumes:
      - ./.AI_Data/n8n:/home/node/.n8n
    ports:
      - "${N8N_PORT:-5678}:5678"
    depends_on:
      postgres:
        condition: service_healthy
      qdrant:
        condition: service_started

  # 9. OpenWebUI - Interface principale
  openwebui:
    image: ghcr.io/open-webui/open-webui:main
    restart: unless-stopped
    networks:
      - flow-ai-network
    environment:
      # Base LLM (Ollama default)
      - OLLAMA_BASE_URL=${OLLAMA_BASE_URL:-http://localhost:11434}
      # Vector memory activation
      - VECTOR_DB=qdrant
      - QDRANT_URI=http://qdrant:6333
      - RAG_VECTOR_DB=qdrant
      # Configuration RAG
      - RAG_EMBEDDING_MODEL=bge-m3:567m
      - RAG_EMBEDDING_ENGINE=ollama
      - RAG_EMBEDDING_OPENAI_BATCH_SIZE=1
      - RAG_TOP_K=5
      - CHUNK_SIZE=800
      - CHUNK_OVERLAP=100
      - RAG_TEMPLATE=Use the following context as your learned knowledge, inside <context></context> XML tags.\n<context>\n[context]\n</context>\n\nWhen answer to user:\n- If you don't know, just say that you don't know.\n- If you are not sure, ask for clarification.\nAvoid mentioning that you obtained the information from the context.\nAnd answer according to the language of the user's question.
    volumes:
      - ./.AI_Data/openwebui:/app/backend/data
    ports:
      - "${OPENWEBUI_PORT:-8081}:8080"
    depends_on:
      qdrant:
        condition: service_started

  # 10. SearxNG - Web search engine (optional)
  searxng:
    image: searxng/searxng:latest
    restart: unless-stopped
    networks:
      - flow-ai-network
    environment:
      - SEARXNG_SETTINGS_PATH=/etc/searxng/settings.yml
    volumes:
      #- ./searxng/settings.yml:/etc/searxng/settings.yml:rw
      - ./.AI_Data/searxng:/etc/searxng:rw
    ports:
      - "${SEARXNG_PORT:-8082}:8080"

  # 11. Samba - Network share for Notes (Windows/Mac access)
  samba:
    image: ghcr.io/servercontainers/samba:latest
    container_name: samba-notes
    restart: unless-stopped
    profiles:
      - samba
    network_mode: host
    cap_add:
      - CAP_NET_ADMIN
    environment:
      # Configuration de base
      - TZ=Europe/Paris
      - SAMBA_CONF_WORKGROUP=${SAMBA_WORKGROUP:-WORKGROUP}
      - SAMBA_CONF_SERVER_STRING=FlowTech Server
      - SAMBA_CONF_LOG_LEVEL=3
      - AVAHI_NAME=DEV-FLOWTECH-LAB
      
      # Utilisateur
      - ACCOUNT_admin=${SAMBA_PASSWORD}
      - UID_admin=${SAMBA_UID:-1000}
      
      # Configuration du partage (depuis .env)
      - SAMBA_VOLUME_CONFIG_notes=${CONFIG_NOTES}
    volumes:
      - ./Notes:/shares/notes:rw
      - ./samba/volumes.conf:/container/config/samba/volumes.conf:ro
      - /etc/avahi/services:/external/avahi