docker-compose.dev.yml

services:
  app:
    build:
      context: .
      target: dev-base
      cache_from:
        - ghcr.io/superplanehq/superplane-dev-base:app-latest
    tty: true
    # Idle by default so `make dev.up` does not run installs or the API/UI stack.
    # Run `make dev.server` to start air + Vite inside this container.
    command: ["sleep", "infinity"]
    environment:
      DB_HOST: "db"
      DB_PORT: "5432"
      DB_NAME: "superplane_dev"
      DB_USERNAME: "postgres"
      DB_POOL_SIZE: "20"
      DB_STATEMENT_TIMEOUT: ${DB_STATEMENT_TIMEOUT:-60s}
      DB_IDLE_IN_TRANSACTION_SESSION_TIMEOUT: ${DB_IDLE_IN_TRANSACTION_SESSION_TIMEOUT:-30s}
      POSTGRES_DB_SSL: "false"
      APP_ENV: development
      APPLICATION_NAME: "superplane"
      DB_PASSWORD: "the-cake-is-a-lie"
      RABBITMQ_URL: "amqp://guest:guest@rabbitmq:5672"
      SWAGGER_BASE_PATH: "/app/api/swagger"
      RBAC_MODEL_PATH: "/app/rbac/rbac_model.conf"
      RBAC_ORG_POLICY_PATH: "/app/rbac/rbac_org_policy.csv"
      # Keep module + build caches on the named Docker volume `go-pkg-cache:/go`, not under /app/tmp.
      # With GOMODCACHE under the bind-mounted repo, two concurrent `go build` processes (e.g. two Air
      # instances after interrupted `make dev.server.fg`) corrupt the same module download temp files
      # (`rename ... .tmp: no such file or directory`), and Air reports `failed to build, error: exit status 1`.
      GOMODCACHE: "/go/pkg/mod"
      GOCACHE: "/go/go-build-cache"
      XDG_CACHE_HOME: "/go/xdg-cache"
      # Lock Playwright browsers location so install and runtime match
      PLAYWRIGHT_BROWSERS_PATH: "/ms-playwright"
      START_PUBLIC_API: "yes"
      START_INTERNAL_API: "yes"
      START_GRPC_GATEWAY: "yes"
      START_CONSUMERS: "yes"
      PUBLIC_API_BASE_PATH: /api/v1
      START_WEB_SERVER: "yes"
      PUBLIC_API_PORT: ${PUBLIC_API_PORT:-8000}
      INTERNAL_API_PORT: ${INTERNAL_API_PORT:-50051}
      GRPC_SERVER_ADDR: ${GRPC_SERVER_ADDR:-127.0.0.1:${INTERNAL_API_PORT:-50051}}
      PORT: ${PORT:-${PUBLIC_API_PORT:-8000}}
      API_PORT: ${API_PORT:-${PUBLIC_API_PORT:-8000}}
      VITE_DEV_PORT: ${VITE_DEV_PORT:-5173}
      START_EVENT_DISTRIBUTER: "yes"
      START_EVENT_ROUTER: "yes"
      START_NODE_EXECUTOR: "yes"
      START_NODE_QUEUE_WORKER: "yes"
      START_NODE_REQUEST_WORKER: "yes"
      START_INTEGRATION_REQUEST_WORKER: "yes"
      START_WEBHOOK_PROVISIONER: "yes"
      START_WEBHOOK_CLEANUP_WORKER: "yes"
      START_INTEGRATION_CLEANUP_WORKER: "yes"
      START_CANVAS_CLEANUP_WORKER: "yes"
      START_ORGANIZATION_CLEANUP_WORKER: "yes"
      START_EVENT_RETENTION_WORKER: "yes"
      START_USAGE_SYNC_WORKER: "yes"
      WEB_BASE_PATH: ""
      SENTRY_DSN: ""
      SENTRY_ENVIRONMENT: ${SENTRY_ENVIRONMENT:-development}
      POSTHOG_KEY: ${POSTHOG_KEY:-}
      ENCRYPTION_KEY: 1234567890abcdefghijklmnopqrstuv
      JWT_SECRET: 1234567890abcdefghijklmnopqrstuv
      OIDC_KEYS_PATH: /app/test/fixtures/oidc-keys
      NO_ENCRYPTION: "yes"
      SESSION_SECRET: 1234567890abcdefghijklmnopqrstuv
      GITHUB_CLIENT_ID: 1234567890abcdefghijklmnopqrstuv
      GITHUB_CLIENT_SECRET: 1234567890abcdefghijklmnopqrstuv
      GOOGLE_CLIENT_ID: 1234567890abcdefghijklmnopqrstuv
      GOOGLE_CLIENT_SECRET: 1234567890abcdefghijklmnopqrstuv
      # Browser / links. For tunnels: match your public UI URL if you load the app through it.
      BASE_URL: ${BASE_URL:-http://localhost:8000}
      # Runner + node webhooks: URLs sent to externals use this origin (must reach this process on PUBLIC_API_PORT).
      # Tunnel example: ngrok http 8000 then set WEBHOOKS_BASE_URL=https://<subdomain>.ngrok-free.app (no trailing slash).
      WEBHOOKS_BASE_URL: ${WEBHOOKS_BASE_URL:-http://localhost:8000}
      # Task broker /v1 (Runner component). Base URL has no trailing slash.
      TASK_BROKER_BASE_URL: ${TASK_BROKER_BASE_URL:-}
      TASK_BROKER_FLEET_ID: ${TASK_BROKER_FLEET_ID:-}
      # Bearer; must match broker AUTH_TOKEN when auth is enabled
      TASK_BROKER_AUTH_TOKEN: ${TASK_BROKER_AUTH_TOKEN:-}
      ALLOWED_WS_ORIGINS: ${ALLOWED_WS_ORIGINS:-http://localhost:8000}
      AGENT_ENABLED: ${AGENT_ENABLED:-no}
      AGENT_HTTP_URL: ${AGENT_HTTP_URL:-}
      AGENT_GRPC_URL: ${AGENT_GRPC_URL:-}
      ANTHROPIC_API_KEY: ${ANTHROPIC_API_KEY:-}
      ANTHROPIC_AGENT_ID: ${ANTHROPIC_AGENT_ID:-}
      ANTHROPIC_ENVIRONMENT_ID: ${ANTHROPIC_ENVIRONMENT_ID:-}
      TEMPLATE_DIR: "/app/templates"
      RESEND_API_KEY: ${RESEND_API_KEY:-}
      EMAIL_FROM_NAME: ${EMAIL_FROM_NAME:-SuperPlane}
      EMAIL_FROM_ADDRESS: ${EMAIL_FROM_ADDRESS:-noreply@notifications.superplane.com}
      BLOCK_SIGNUP: ${BLOCK_SIGNUP:-yes}
      ENABLE_PASSWORD_LOGIN: "yes"
      OTEL_ENABLED: "yes"
      OTEL_EXPORTER_OTLP_PROTOCOL: "grpc"
      OTEL_EXPORTER_OTLP_ENDPOINT: "http://otel:4317"
      OTEL_SERVICE_NAME: "superplane-dev"
      OWNER_SETUP_ENABLED: "yes"
      USAGE_GRPC_URL: ${USAGE_GRPC_URL:-}
      VITE_FORCE_USAGE_PAGE: ${VITE_FORCE_USAGE_PAGE:-true}
      VITE_CHANGE_MANAGEMENT_SETTINGS: ${VITE_CHANGE_MANAGEMENT_SETTINGS:-true}

    ports:
      - ${VITE_DEV_PORT:-5173}:${VITE_DEV_PORT:-5173}
      - ${VITE_PREVIEW_PORT:-4173}:${VITE_PREVIEW_PORT:-4173}
      - ${STORYBOOK_PORT:-6006}:${STORYBOOK_PORT:-6006}
      - ${PUBLIC_API_PORT:-8000}:${PUBLIC_API_PORT:-8000}
      - ${INTERNAL_API_PORT:-50051}:${INTERNAL_API_PORT:-50051}

    links:
      - db:db
      - rabbitmq:rabbitmq

    depends_on:
      db:
        condition: service_healthy
      rabbitmq:
        condition: service_healthy

    volumes:
      - go-pkg-cache:/go
      - .:/app
      - /tmp:/tmp

  otel:
    image: otel/opentelemetry-collector-contrib:0.110.0
    profiles: [dev]
    command: [ "--config=/etc/otel-collector-config.yaml" ]
    volumes:
      - ./otel-collector-config.dev.yaml:/etc/otel-collector-config.yaml:ro
    ports:
      - ${OTEL_GRPC_PORT:-4317}:${OTEL_GRPC_PORT:-4317}
      - ${OTEL_HTTP_PORT:-4318}:${OTEL_HTTP_PORT:-4318}

  db:
    image: postgres:17.5
    volumes:
      - postgres-data:/var/lib/postgresql/data
    environment:
      POSTGRES_PASSWORD: "the-cake-is-a-lie"
    restart: "on-failure"
    healthcheck:
      test: [ "CMD-SHELL", "pg_isready -U postgres" ]
      interval: 3s
      timeout: 3s
      retries: 5

  pgweb:
    image: sosedoff/pgweb
    profiles: [dev]
    environment:
      DATABASE_URL: "postgres://postgres:the-cake-is-a-lie@db:5432/superplane_dev?sslmode=disable"
    ports:
      - ${PGWEB_PORT:-8081}:${PGWEB_PORT:-8081}
    links:
      - db:db
    depends_on:
      db:
        condition: service_healthy

  rabbitmq:
    image: rabbitmq:3.8.17-management-alpine
    volumes:
      - ./scripts/docker/rabbitmq.conf:/etc/rabbitmq/rabbitmq.conf:ro
      - ./scripts/docker/rabbitmq-definitions.json:/etc/rabbitmq/definitions.json:ro
    ports:
      - ${RABBITMQ_PORT:-5672}:${RABBITMQ_PORT:-5672}
      - ${RABBITMQ_MANAGEMENT_PORT:-15672}:${RABBITMQ_MANAGEMENT_PORT:-15672}
    restart: "on-failure"
    healthcheck:
      test: rabbitmq-diagnostics -q ping
      interval: 3s
      timeout: 3s
      retries: 5

volumes:
  repo-data:
    driver: local

  go-pkg-cache:
    driver: local

  postgres-data:
    driver: local