docker-compose.yml

# MedAudit Demo – Breast Cancer Screening Audit
# All config from .env only: copy .env.example to .env and set every variable.
# Run from project root:  docker compose up --build
# One Python image (medaudit-app) for backend, worker, and beat – built once by medaudit_backend.
# EHR data service lives in ehr/docker-compose.yml (profile: ehr). To include it:
#   docker compose -f docker-compose.yml -f ehr/docker-compose.yml --profile ehr_data up --build

services:
  # ---------- Redis (Celery) ----------
  redis:
    image: redis:7-alpine
    container_name: medaudit_redis
    ports:
      - "6379:6379"
    volumes:
      - redis_data:/data
    command: redis-server --appendonly yes
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 5s
      retries: 5
    restart: unless-stopped

  # ---------- MedAudit backend (AI + backend logic) ----------
  medaudit_db:
    image: postgres:15-alpine
    container_name: medaudit_db
    env_file: .env
    environment:
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
      POSTGRES_DB: ${POSTGRES_DB}
      POSTGRES_MULTIPLE_DATABASES: ehr
    volumes:
      - medaudit_db_data:/var/lib/postgresql/data
      - ./ehr/init_ehr_db.sql:/docker-entrypoint-initdb.d/init_ehr_db.sql:ro
    ports:
      - "5434:5432"
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER} -d ${POSTGRES_DB}"]
      interval: 10s
      timeout: 5s
      retries: 5
    restart: unless-stopped

  medaudit_backend:
    build:
      context: .
      dockerfile: Dockerfile
    image: medaudit-app
    container_name: medaudit_backend
    env_file: .env
    environment:
      DATABASE_URL: ${DATABASE_URL}
      CHROMA_PERSIST_DIR: ${CHROMA_PERSIST_DIR}
      EHR_SERVICE_URL: ${EHR_SERVICE_URL}
      REDIS_URL: ${REDIS_URL}
      CELERY_BROKER_URL: ${CELERY_BROKER_URL}
      CELERY_RESULT_BACKEND: ${CELERY_RESULT_BACKEND}
      JWT_SECRET_KEY: ${JWT_SECRET_KEY}
      ALLOWED_ORIGINS: ${ALLOWED_ORIGINS}
      MEDICAL_KB_PATH: ${MEDICAL_KB_PATH}
      AUDIT_AI_PROVIDER: ${AUDIT_AI_PROVIDER}
      HF_TOKEN: ${HF_TOKEN}
      HF_MEDGEMMA_ENDPOINT: ${HF_MEDGEMMA_ENDPOINT}
      GOOGLE_API_KEY: ${GOOGLE_API_KEY}
      GEMINI_MODEL: ${GEMINI_MODEL}
      OPENAI_API_KEY: ${OPENAI_API_KEY}
      OPENAI_AUDIT_MODEL: ${OPENAI_AUDIT_MODEL}
      EMBEDDING_PROVIDER: ${EMBEDDING_PROVIDER}
      OPENAI_EMBEDDING_MODEL: ${OPENAI_EMBEDDING_MODEL}
      MEDSIGLIP_MODEL: ${MEDSIGLIP_MODEL:-google/medsiglip-448}
      MEDSIGLIP_DEVICE: ${MEDSIGLIP_DEVICE:-cpu}
      ENVIRONMENT: ${ENVIRONMENT}
      DEBUG: ${DEBUG}
      JWT_ALGORITHM: ${JWT_ALGORITHM}
      JWT_EXPIRE_MINUTES: ${JWT_EXPIRE_MINUTES}
      HOST: ${HOST}
      PORT: ${PORT}
      ASR_PROVIDER: ${ASR_PROVIDER:-medasr}
      MEDASR_HF_ENDPOINT: ${MEDASR_HF_ENDPOINT:-}
      MEDASR_LOCAL_MODEL: ${MEDASR_LOCAL_MODEL:-google/medasr}
      MEDASR_LOCAL_DEVICE: ${MEDASR_LOCAL_DEVICE:-cpu}
      DEEPGRAM_API_KEY: ${DEEPGRAM_API_KEY:-}
    volumes:
      - chroma_data:/app/chroma_data
      - ./docs/Medical_KB:/app/docs/Medical_KB:ro
      # Persist the HuggingFace model cache across rebuilds so google/medasr
      # (~500 MB) is only downloaded once, not on every docker compose --build.
      - hf_cache:/root/.cache/huggingface
    depends_on:
      medaudit_db:
        condition: service_healthy
      redis:
        condition: service_healthy
    restart: unless-stopped

  medaudit_worker:
    image: medaudit-app
    container_name: medaudit_worker
    command: ["celery", "-A", "app.worker.celery_app", "worker", "--loglevel=info"]
    env_file: .env
    environment:
      DATABASE_URL: ${DATABASE_URL}
      CHROMA_PERSIST_DIR: ${CHROMA_PERSIST_DIR}
      EHR_SERVICE_URL: ${EHR_SERVICE_URL}
      REDIS_URL: ${REDIS_URL}
      CELERY_BROKER_URL: ${CELERY_BROKER_URL}
      CELERY_RESULT_BACKEND: ${CELERY_RESULT_BACKEND}
      JWT_SECRET_KEY: ${JWT_SECRET_KEY}
      MEDICAL_KB_PATH: ${MEDICAL_KB_PATH}
      AUDIT_AI_PROVIDER: ${AUDIT_AI_PROVIDER}
      HF_TOKEN: ${HF_TOKEN}
      HF_MEDGEMMA_ENDPOINT: ${HF_MEDGEMMA_ENDPOINT}
      GOOGLE_API_KEY: ${GOOGLE_API_KEY}
      GEMINI_MODEL: ${GEMINI_MODEL}
      OPENAI_API_KEY: ${OPENAI_API_KEY}
      OPENAI_AUDIT_MODEL: ${OPENAI_AUDIT_MODEL}
      EMBEDDING_PROVIDER: ${EMBEDDING_PROVIDER}
      OPENAI_EMBEDDING_MODEL: ${OPENAI_EMBEDDING_MODEL}
      MEDSIGLIP_MODEL: ${MEDSIGLIP_MODEL:-google/medsiglip-448}
      MEDSIGLIP_DEVICE: ${MEDSIGLIP_DEVICE:-cpu}
      ENVIRONMENT: ${ENVIRONMENT}
      DEBUG: ${DEBUG}
      JWT_ALGORITHM: ${JWT_ALGORITHM}
      JWT_EXPIRE_MINUTES: ${JWT_EXPIRE_MINUTES}
      GOOGLE_APPLICATION_CREDENTIALS: /app/vertex-sa-key.json
    volumes:
      - chroma_data:/app/chroma_data
      - ./docs/Medical_KB:/app/docs/Medical_KB:ro
      - ./vertex-sa-key.json:/app/vertex-sa-key.json:ro
    depends_on:
      medaudit_db:
        condition: service_healthy
      redis:
        condition: service_healthy
      medaudit_backend:
        condition: service_started
    restart: unless-stopped

  medaudit_beat:
    image: medaudit-app
    container_name: medaudit_beat
    command: ["celery", "-A", "app.worker.celery_app", "beat", "--loglevel=info"]
    env_file: .env
    environment:
      DATABASE_URL: ${DATABASE_URL}
      CHROMA_PERSIST_DIR: ${CHROMA_PERSIST_DIR}
      EHR_SERVICE_URL: ${EHR_SERVICE_URL}
      REDIS_URL: ${REDIS_URL}
      CELERY_BROKER_URL: ${CELERY_BROKER_URL}
      CELERY_RESULT_BACKEND: ${CELERY_RESULT_BACKEND}
      JWT_SECRET_KEY: ${JWT_SECRET_KEY}
      MEDICAL_KB_PATH: ${MEDICAL_KB_PATH}
      AUDIT_AI_PROVIDER: ${AUDIT_AI_PROVIDER}
      HF_TOKEN: ${HF_TOKEN}
      HF_MEDGEMMA_ENDPOINT: ${HF_MEDGEMMA_ENDPOINT}
      GOOGLE_API_KEY: ${GOOGLE_API_KEY}
      GEMINI_MODEL: ${GEMINI_MODEL}
      OPENAI_API_KEY: ${OPENAI_API_KEY}
      OPENAI_AUDIT_MODEL: ${OPENAI_AUDIT_MODEL}
      EMBEDDING_PROVIDER: ${EMBEDDING_PROVIDER}
      OPENAI_EMBEDDING_MODEL: ${OPENAI_EMBEDDING_MODEL}
      MEDSIGLIP_MODEL: ${MEDSIGLIP_MODEL:-google/medsiglip-448}
      MEDSIGLIP_DEVICE: ${MEDSIGLIP_DEVICE:-cpu}
      ENVIRONMENT: ${ENVIRONMENT}
      DEBUG: ${DEBUG}
      JWT_ALGORITHM: ${JWT_ALGORITHM}
      JWT_EXPIRE_MINUTES: ${JWT_EXPIRE_MINUTES}
      GOOGLE_APPLICATION_CREDENTIALS: /app/vertex-sa-key.json
    volumes:
      - chroma_data:/app/chroma_data
      - ./docs/Medical_KB:/app/docs/Medical_KB:ro
      - ./vertex-sa-key.json:/app/vertex-sa-key.json:ro
    depends_on:
      medaudit_db:
        condition: service_healthy
      redis:
        condition: service_healthy
      medaudit_backend:
        condition: service_started
    restart: unless-stopped

  # ---------- MedAudit frontend (UI) ----------
  medaudit_frontend:
    build:
      context: ./frontend
      dockerfile: Dockerfile
      args:
        VITE_API_URL: ${VITE_API_URL}
    container_name: medaudit_frontend
    restart: unless-stopped

  nginx:
    image: nginx:1.27-alpine
    container_name: medaudit_nginx
    ports:
      - "80:80"
    volumes:
      - ./nginx/nginx.conf:/etc/nginx/conf.d/default.conf:ro
    depends_on:
      - medaudit_backend
      - medaudit_frontend
    restart: unless-stopped

volumes:
  redis_data:
  medaudit_db_data:
  chroma_data:
  hf_cache: