docker-compose.yml

services:
  redpanda:
    image: redpandadata/redpanda:v24.3.5
    container_name: fraud-redpanda
    command:
      - redpanda
      - start
      - --smp=1
      - --memory=512M
      - --overprovisioned
      - --node-id=0
      - --kafka-addr=PLAINTEXT://0.0.0.0:29092,OUTSIDE://0.0.0.0:9092
      - --advertise-kafka-addr=PLAINTEXT://redpanda:29092,OUTSIDE://localhost:9092
      - --pandaproxy-addr=0.0.0.0:8082
      - --advertise-pandaproxy-addr=localhost:8082
      - --schema-registry-addr=0.0.0.0:8081
      - --rpc-addr=0.0.0.0:33145
      - --advertise-rpc-addr=redpanda:33145
    ports:
      - "9092:9092"
      - "9644:9644"
      - "8081:8081"
      - "8082:8082"
    volumes:
      - redpanda_data:/var/lib/redpanda/data
    networks:
      - fraud-net
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "rpk", "cluster", "health"]
      interval: 10s
      timeout: 10s
      retries: 10
      start_period: 30s

  redpanda-console:
    image: redpandadata/console:v2.8.8
    container_name: fraud-console
    environment:
      CONFIG_FILEPATH: /etc/redpanda/redpanda-console-config.yaml
    volumes:
      - ./scripts/redpanda-console-config.yaml:/etc/redpanda/redpanda-console-config.yaml:ro
    ports:
      - "8080:8080"
    networks:
      - fraud-net
    restart: unless-stopped
    depends_on:
      redpanda:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "wget", "-q", "--spider", "http://localhost:8080"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 15s

  risingwave:
    image: risingwavelabs/risingwave:v2.4.0
    container_name: fraud-risingwave
    command: playground
    ports:
      - "4566:4566"
      - "5691:5691"
    volumes:
      - risingwave_data:/root/.risingwave
    networks:
      - fraud-net
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "sh", "-c", "timeout 1 bash -c '</dev/tcp/localhost/4566'"]
      interval: 10s
      timeout: 10s
      retries: 15
      start_period: 30s

  dbt-run:
    image: python:3.11-slim
    container_name: fraud-dbt-run
    entrypoint: ["sh", "-c"]
    command:
      - |
        pip install dbt-risingwave==1.9.7 --quiet &&
        cd /dbt &&
        dbt run --profiles-dir /dbt
    volumes:
      - ./fraud_detection:/dbt
    networks:
      - fraud-net
    depends_on:
      redpanda:
        condition: service_healthy
      risingwave:
        condition: service_healthy
    environment:
      RISINGWAVE_HOST: risingwave
      RISINGWAVE_PORT: "4566"
      RISINGWAVE_USER: root
      RISINGWAVE_PASSWORD: ""
      RISINGWAVE_DB: dev
      REDPANDA_BROKERS: ${REDPANDA_BROKERS:-redpanda:29092}
    restart: on-failure

  seed-topics:
    image: redpandadata/redpanda:v24.3.5
    container_name: fraud-seed
    networks:
      - fraud-net
    depends_on:
      redpanda:
        condition: service_healthy
    entrypoint: ["/bin/bash", "-c"]
    command:
      - |
        rpk topic create transactions --brokers redpanda:29092 --partitions 6 --replicas 1 || true
        rpk topic create login_events --brokers redpanda:29092 --partitions 3 --replicas 1 || true
        rpk topic create card_events --brokers redpanda:29092 --partitions 3 --replicas 1 || true
        rpk topic create alert_events --brokers redpanda:29092 --partitions 6 --replicas 1 || true
        rpk topic create kyc_profile_events --brokers redpanda:29092 --partitions 2 --replicas 1 || true
        rpk topic create fraud_dlq --brokers redpanda:29092 --partitions 2 --replicas 1 || true
        echo "Topics created."

  producer:
    build:
      context: ./producers
      dockerfile: Dockerfile
    container_name: fraud-producer
    environment:
      REDPANDA_BROKERS: ${REDPANDA_BROKERS:-redpanda:29092}
      REDPANDA_SECURITY_PROTOCOL: ${REDPANDA_SECURITY_PROTOCOL:-PLAINTEXT}
      REDPANDA_SASL_MECHANISM: ${REDPANDA_SASL_MECHANISM:-}
      REDPANDA_SASL_USERNAME: ${REDPANDA_SASL_USERNAME:-}
      REDPANDA_SASL_PASSWORD: ${REDPANDA_SASL_PASSWORD:-}
      FRAUD_RATE: ${FRAUD_RATE:-0.10}
      TRANSACTION_RATE: ${TRANSACTION_RATE:-20}
      LOGIN_RATE: ${LOGIN_RATE:-5}
      CARD_RATE: ${CARD_RATE:-1}
      ALERT_RATE: ${ALERT_RATE:-8}
      KYC_RATE: ${KYC_RATE:-0.5}
      CUSTOMER_POOL_SIZE: ${CUSTOMER_POOL_SIZE:-500}
      STRUCTURING_THRESHOLD: ${STRUCTURING_THRESHOLD:-10000}
      MINUTE_TICK_ENABLED: ${MINUTE_TICK_ENABLED:-true}
      MINUTE_TICK_TRANSACTIONS: ${MINUTE_TICK_TRANSACTIONS:-30}
      MINUTE_TICK_LOGINS: ${MINUTE_TICK_LOGINS:-10}
      HEALTH_PORT: "8000"
      ALERT_WORKERS: ${ALERT_WORKERS:-4}
      ALERT_QUEUE_SIZE: ${ALERT_QUEUE_SIZE:-2000}
    ports:
      - "8001:8000"
    networks:
      - fraud-net
    depends_on:
      redpanda:
        condition: service_healthy
      dbt-run:
        condition: service_completed_successfully
      seed-topics:
        condition: service_completed_successfully
    restart: unless-stopped
    healthcheck:
      test:
        - "CMD-SHELL"
        - "python -c \"import urllib.request,sys; r=urllib.request.urlopen('http://localhost:8000/health',timeout=3); sys.exit(0 if r.status==200 else 1)\""
      interval: 15s
      timeout: 5s
      retries: 6
      start_period: 45s

  grafana:
    image: grafana/grafana:11.5.2
    container_name: fraud-grafana
    environment:
      GF_SECURITY_ADMIN_USER: ${GRAFANA_ADMIN_USER:-admin}
      GF_SECURITY_ADMIN_PASSWORD: ${GRAFANA_ADMIN_PASSWORD:-admin}
      GF_AUTH_ANONYMOUS_ENABLED: "false"
      GF_DASHBOARDS_DEFAULT_HOME_DASHBOARD_PATH: /var/lib/grafana/dashboards/fraud_ops_centre.json
      GF_INSTALL_PLUGINS: ""
    ports:
      - "3000:3000"
    volumes:
      - ./grafana/provisioning:/etc/grafana/provisioning:ro
      - ./grafana/dashboards:/var/lib/grafana/dashboards:ro
      - grafana_data:/var/lib/grafana
    networks:
      - fraud-net
    restart: unless-stopped
    depends_on:
      risingwave:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "wget", "-q", "--spider", "http://localhost:3000/api/health"]
      interval: 10s
      timeout: 5s
      retries: 10
      start_period: 30s

networks:
  fraud-net:
    driver: bridge

volumes:
  redpanda_data:
  risingwave_data:
  grafana_data: