Livrare LOT 1 - Didi

ai_platform/modules/dashboard/deploy/docker-compose.yml

@@ -0,0 +1,102 @@
+# Dashboard Module - Docker Compose
+#
+# Port Allocation (Dev: 51300):
+#   51300 - Dashboard API + Web UI
+#   15432 - PostgreSQL (optional host exposure for debugging)
+#
+# Naming Convention: didiAI-{module}-{service}
+
+networks:
+  didi-network:
+    external: true   # single shared network for all DIDI + AI platform stacks
+
+volumes:
+  dashboard_db_data:
+    driver: local
+
+services:
+  # ==========================================================================
+  # PostgreSQL
+  # ==========================================================================
+  dashboard-db:
+    container_name: didiAI-dashboard-db
+    image: postgres:16-alpine
+    networks:
+      - didi-network
+    environment:
+      - POSTGRES_USER=${DASHBOARD_DB_USER}
+      - POSTGRES_PASSWORD=${DASHBOARD_DB_PASSWORD}
+      - POSTGRES_DB=${DASHBOARD_DB_NAME}
+    volumes:
+      - dashboard_db_data:/var/lib/postgresql/data
+    ports:
+      - "15432:5432"
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U ${DASHBOARD_DB_USER} -d ${DASHBOARD_DB_NAME}"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+    restart: unless-stopped
+    profiles:
+      - dashboard
+
+  # ==========================================================================
+  # Dashboard API + Web UI
+  # ==========================================================================
+  dashboard-api:
+    container_name: didiAI-dashboard
+    image: didiai-dashboard
+    build:
+      context: ..
+      dockerfile: deploy/Dockerfile
+      args:
+        # SPA build-time config — Keycloak settings get baked into the JS bundle.
+        # Default: local Keycloak proxied through admin nginx at /auth/.
+        VITE_KEYCLOAK_URL: ${VITE_KEYCLOAK_URL:-https://10.11.10.11:3001/auth}
+        VITE_KEYCLOAK_REALM: ${VITE_KEYCLOAK_REALM:-didi-admins}
+        VITE_KEYCLOAK_CLIENT_ID: ${VITE_KEYCLOAK_CLIENT_ID:-ai-platform-dashboard}
+        VITE_KEYCLOAK_REQUIRED_ROLE: ${VITE_KEYCLOAK_REQUIRED_ROLE:-admin}
+        VITE_STAGING_MODE: ${VITE_STAGING_MODE:-false}
+    ports:
+      - "51300:51300"
+    networks:
+      - didi-network
+    depends_on:
+      dashboard-db:
+        condition: service_healthy
+    env_file:
+      - .env
+    environment:
+      - DASHBOARD_HOST=0.0.0.0
+      - DASHBOARD_PORT=51300
+      - DASHBOARD_DATABASE_URL=postgresql+asyncpg://${DASHBOARD_DB_USER}:${DASHBOARD_DB_PASSWORD}@didiAI-dashboard-db:5432/${DASHBOARD_DB_NAME}
+      - DASHBOARD_BRAIN_URL=${DASHBOARD_BRAIN_URL:-http://didibrain-api:8090}
+      # Keycloak SSO (leave empty to disable JWT auth)
+      - DASHBOARD_KEYCLOAK_URL=${DASHBOARD_KEYCLOAK_URL:-}
+      - DASHBOARD_KEYCLOAK_REALM=${DASHBOARD_KEYCLOAK_REALM:-didi-clients}
+      - DASHBOARD_KEYCLOAK_CLIENT_ID=${DASHBOARD_KEYCLOAK_CLIENT_ID:-ai-platform-dashboard}
+      - DASHBOARD_KEYCLOAK_REQUIRED_ROLE=${DASHBOARD_KEYCLOAK_REQUIRED_ROLE:-admin}
+      - DASHBOARD_STAGING_MODE=${DASHBOARD_STAGING_MODE:-false}
+      # OTel — traces to Jaeger via OTel Collector
+      - OTEL_EXPORTER_OTLP_ENDPOINT=${OTEL_EXPORTER_OTLP_ENDPOINT:-http://didi-otel-collector:4317}
+      - OTEL_SERVICE_NAME=didiAI-dashboard
+      # Module health endpoint overrides — point at real upstreams
+      # (raw vLLM at 10.11.10.15 instead of the unbuilt FastAPI wrapper at 10.11.10.17:14100/14200)
+      - DASHBOARD_EMBEDDINGS_HEALTH_URL=${DASHBOARD_EMBEDDINGS_HEALTH_URL:-http://10.11.10.15:8200/v1/models}
+      - DASHBOARD_RERANK_HEALTH_URL=${DASHBOARD_RERANK_HEALTH_URL:-http://10.11.10.15:8100/v1/models}
+      # Catalog runs locally on Docker DNS; /v1/status is the aggregated reachability probe
+      # (catalog does not expose /v1/info — it consumes it from other modules)
+      - DASHBOARD_CATALOG_HEALTH_URL=${DASHBOARD_CATALOG_HEALTH_URL:-http://didiAI-catalog-api:11000/v1/status}
+      # Gateway is nginx — only /health is auth-free and inline
+      - DASHBOARD_GATEWAY_HEALTH_URL=${DASHBOARD_GATEWAY_HEALTH_URL:-http://didiAI-gateway:11000/health}
+      # Brain doesn't expose /v1/info — point at /health (matches catalog rationale)
+      - DASHBOARD_BRAIN_HEALTH_URL=${DASHBOARD_BRAIN_HEALTH_URL:-http://didibrain-api:8090/health}
+    healthcheck:
+      test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:51300/health')"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 30s
+    restart: unless-stopped
+    profiles:
+      - dashboard