docker-compose.yml

services:
  ollama:
    image: ollama/ollama:latest
    volumes:
      - ollama_data:/root/.ollama
    restart: unless-stopped

  postgres:
    image: postgres:15-alpine
    environment:
      POSTGRES_DB: rag_db
      POSTGRES_USER: rag
      POSTGRES_PASSWORD: "${POSTGRES_PASSWORD:?POSTGRES_PASSWORD must be set}"
    volumes:
      - postgres_data:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U rag"]
      interval: 10s
      timeout: 5s
      retries: 5
    restart: unless-stopped

  qdrant:
    image: qdrant/qdrant:latest
    volumes:
      - qdrant_data:/qdrant/storage
    restart: unless-stopped

  redis:
    image: redis:7-alpine
    volumes:
      - redis_data:/data
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 5s
      retries: 5
    restart: unless-stopped

  rag:
    image: ghcr.io/jemplayer82/rag:latest
    pull_policy: always
    ports:
      - "${RAG_PORT:-8000}:8000"
    environment:
      DATABASE_URL: postgresql://rag:${POSTGRES_PASSWORD}@postgres:5432/rag_db
      QDRANT_HOST: qdrant
      QDRANT_PORT: "6333"
      REDIS_URL: redis://redis:6379/0
      # JWT_SECRET and ENCRYPTION_KEY auto-generate on first boot if unset.
      # Override here to pin specific values; otherwise they persist in the
      # data volume at /app/data/.secrets.env.
      JWT_SECRET: ${JWT_SECRET:-}
      ENCRYPTION_KEY: ${ENCRYPTION_KEY:-}
      ADMIN_USERNAME: ${ADMIN_USERNAME:-}
      LLM_PROVIDER: ${LLM_PROVIDER:-ollama}
      LLM_MODEL: ${LLM_MODEL:-}
      # Ollama is always part of the stack — point at the in-stack container.
      # Hardcoded (not env-overridable) so a stray .env value can't aim it at a
      # dead host. Admins can still override per-provider in the UI if needed.
      LLM_BASE_URL: http://ollama:11434
      OLLAMA_BASE_URL: http://ollama:11434
      LLM_TEMPERATURE: ${LLM_TEMPERATURE:-0.3}
      LLM_TOP_P: ${LLM_TOP_P:-0.9}
      LLM_MAX_TOKENS: ${LLM_MAX_TOKENS:-2048}
      OPENAI_API_KEY: ${OPENAI_API_KEY:-}
      ANTHROPIC_API_KEY: ${ANTHROPIC_API_KEY:-}
      EMBED_MODEL: ${EMBED_MODEL:-BAAI/bge-large-en-v1.5}
      EMBED_DEVICE: ${EMBED_DEVICE:-cpu}
      CHUNK_SIZE: ${CHUNK_SIZE:-600}
      CHUNK_OVERLAP: ${CHUNK_OVERLAP:-100}
      TOP_K: ${TOP_K:-8}
      RERANK_TOP_K: ${RERANK_TOP_K:-5}
      DEBUG: ${DEBUG:-false}
    volumes:
      - uploads_data:/app/data
    depends_on:
      postgres:
        condition: service_healthy
      qdrant:
        condition: service_started
      redis:
        condition: service_healthy
      ollama:
        condition: service_started
    restart: unless-stopped

  rag-worker:
    image: ghcr.io/jemplayer82/rag:latest
    pull_policy: always
    command: ["python", "worker.py"]
    healthcheck:
      test: ["CMD-SHELL", "rq info --url $$REDIS_URL --raw 2>/dev/null | grep -q '^worker ' || exit 1"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s
    environment:
      DATABASE_URL: postgresql://rag:${POSTGRES_PASSWORD}@postgres:5432/rag_db
      QDRANT_HOST: qdrant
      QDRANT_PORT: "6333"
      REDIS_URL: redis://redis:6379/0
      JWT_SECRET: ${JWT_SECRET:-}
      ENCRYPTION_KEY: ${ENCRYPTION_KEY:-}
      EMBED_MODEL: ${EMBED_MODEL:-BAAI/bge-large-en-v1.5}
      EMBED_DEVICE: ${EMBED_DEVICE:-cpu}
      CHUNK_SIZE: ${CHUNK_SIZE:-600}
      CHUNK_OVERLAP: ${CHUNK_OVERLAP:-100}
    volumes:
      - uploads_data:/app/data
    depends_on:
      postgres:
        condition: service_healthy
      qdrant:
        condition: service_started
      redis:
        condition: service_healthy
      ollama:
        condition: service_started
    restart: unless-stopped

# Named volumes with the "local" driver's bind option.
# Portainer lists these under the stack and can create/remove them from its
# UI, but the actual data lives at ${DATA_ROOT}/<name> on the host. Override
# DATA_ROOT in your .env or Portainer env vars if /storage/rag is wrong for
# your host (e.g. DATA_ROOT=/var/lib/rag or DATA_ROOT=/opt/rag/data). The
# directories must exist before the first `docker compose up`:
#
#   sudo mkdir -p "${DATA_ROOT:-/storage/rag}"/{postgres,qdrant,redis,uploads,ollama}
#
# Data survives `docker compose down` and stack removal. `docker compose
# down -v` removes the volume references but will not delete the host files
# (Docker doesn't own the path) — so the data persists until you `rm -rf`
# the host directory manually.
volumes:
  postgres_data:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: ${DATA_ROOT:-/storage/rag}/postgres
  qdrant_data:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: ${DATA_ROOT:-/storage/rag}/qdrant
  redis_data:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: ${DATA_ROOT:-/storage/rag}/redis
  uploads_data:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: ${DATA_ROOT:-/storage/rag}/uploads
  ollama_data:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: ${DATA_ROOT:-/storage/rag}/ollama