docker-compose.yml

version: '3.8'

# -------- airflow common setup ---------
x-airflow-common:
  &airflow-common
  # In order to add custom dependencies or upgrade provider packages you can use your extended image.
  # Comment the image line, place your Dockerfile in the directory where you placed the docker-compose.yaml
  # and uncomment the "build" line below, Then run `docker-compose build` to build the images.

  image: airflow #${AIRFLOW_IMAGE_NAME:-apache/airflow:2.7.0}
  build: 
    context: ./
    dockerfile:  ./docker/airflow/Dockerfile
  environment:
    &airflow-common-env
    AIRFLOW__CORE__EXECUTOR: CeleryExecutor
    AIRFLOW__DATABASE__SQL_ALCHEMY_CONN: postgresql+psycopg2://${POSTGRES_USER}:${POSTGRES_PASSWORD}@postgres:${POSTGRES_PORT}/${POSTGRES_AIRFLOW_DATABASE}
    # For backward compatibility, with Airflow <2.3
    AIRFLOW__CORE__SQL_ALCHEMY_CONN: postgresql+psycopg2://${POSTGRES_USER}:${POSTGRES_PASSWORD}@postgres:${POSTGRES_PORT}/${POSTGRES_AIRFLOW_DATABASE}
    AIRFLOW__CELERY__RESULT_BACKEND: db+postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@postgres:${POSTGRES_PORT}/${POSTGRES_AIRFLOW_DATABASE}
    AIRFLOW__CELERY__BROKER_URL: redis://:@redis:6379/0
    AIRFLOW__CORE__FERNET_KEY: ''
    AIRFLOW__CORE__DAGS_ARE_PAUSED_AT_CREATION: 'true'
    AIRFLOW__CORE__LOAD_EXAMPLES: 'true'
    AIRFLOW__API__AUTH_BACKENDS: 'airflow.api.auth.backend.basic_auth,airflow.api.auth.backend.session'
    # yamllint disable rule:line-length
    # Use simple http server on scheduler for health checks
    # See https://airflow.apache.org/docs/apache-airflow/stable/administration-and-deployment/logging-monitoring/check-health.html#scheduler-health-check-server
    # yamllint enable rule:line-length
    AIRFLOW__SCHEDULER__ENABLE_HEALTH_CHECK: 'true'
    # WARNING: Use _PIP_ADDITIONAL_REQUIREMENTS option ONLY for a quick checks
    # for other purpose (development, test and especially production usage) build/extend Airflow image.
    _PIP_ADDITIONAL_REQUIREMENTS: ${_PIP_ADDITIONAL_REQUIREMENTS:-}
  networks:
    - nwnet
  volumes:
    - ${AIRFLOW_PROJ_DIR:-.}/dags:/opt/airflow/dags
    - ${AIRFLOW_PROJ_DIR:-.}/logs:/opt/airflow/logs
    - ${AIRFLOW_PROJ_DIR:-.}/config:/opt/airflow/config
    - ${AIRFLOW_PROJ_DIR:-.}/plugins:/opt/airflow/plugins
    - ./:/app
    - ./src:/usr/local/lib/python3.9/site-packages
    - ./docker/sparktmp:/app/docker/sparktmp
  user: "${AIRFLOW_UID:-50000}:0"
  depends_on:
    &airflow-common-depends-on
    redis:
      condition: service_healthy
    postgres:
      condition: service_healthy


# ------------ services ------------
services:

  postgres:
    restart: always
    image: postgres:15
    container_name: postgres
    ports:
      - "${POSTGRES_PORT}:${POSTGRES_PORT}"
    networks:
      - nwnet
    environment:
      - PGUSER=${POSTGRES_USER}
      - PGPASSWORD=${POSTGRES_PASSWORD}
      - POSTGRES_USER=${POSTGRES_USER}
      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
      - POSTGRES_MULTIPLE_DATABASES=${POSTGRES_MLFLOW_DATABASE},${POSTGRES_AIRFLOW_DATABASE}
    volumes:
      - ./docker/postgres/postgres-data:/var/lib/postgresql/data/
    healthcheck:
      test: ["CMD-SHELL", "pg_isready", "-p", "${POSTGRES_PORT}", "-U", "${POSTGRES_USER}"]
      interval: 5s
      timeout: 60s
      retries: 5
      start_period: 5s
  
  create-databases:
    image: postgres:15
    depends_on:
      - postgres
    networks:
      - nwnet
    environment:
      - PGPASSWORD=${POSTGRES_PASSWORD}
      - PGUSER=${POSTGRES_USER}
      - PGHOST=postgres
    command: >
      bash -c '
      until psql -h postgres -U ${POSTGRES_USER} -c "SELECT 1" > /dev/null 2>&1; do
        sleep 1;
      done;

      psql -h postgres -U ${POSTGRES_USER} -c "ALTER DATABASE template1 REFRESH COLLATION VERSION"; 
      psql -h postgres -U ${POSTGRES_USER} -c "CREATE DATABASE ${POSTGRES_MLFLOW_DATABASE}"; 
      psql -h postgres -U ${POSTGRES_USER} -c "CREATE DATABASE ${POSTGRES_AIRFLOW_DATABASE}"; 
      psql -h postgres -U ${POSTGRES_USER} -c "ALTER DATABASE ${POSTGRES_AIRFLOW_DATABASE} REFRESH COLLATION VERSION"; 
      psql -h postgres -U ${POSTGRES_USER} -c "CREATE DATABASE ${POSTGRES_APP_DATABASE}"; 
      psql -h postgres -U ${POSTGRES_USER} -d ${POSTGRES_APP_DATABASE} -c "CREATE TABLE ${POSTGRES_USERS_TABLE} (userId INTEGER PRIMARY KEY)"; 
      psql -h postgres -U ${POSTGRES_USER} -d ${POSTGRES_APP_DATABASE} -c "DROP TABLE ${POSTGRES_RECOMMENDATIONS_TABLE}";      
      psql -h postgres -U ${POSTGRES_USER} -d ${POSTGRES_APP_DATABASE} -c "CREATE TABLE ${POSTGRES_RECOMMENDATIONS_TABLE} (id INTEGER, userid INTEGER, movieid INTEGER, prediction FLOAT, rank INTEGER, datetime TIMESTAMP, CONSTRAINT unique_rank UNIQUE(userid,rank))";'

  minio:
    image: minio/minio:RELEASE.2023-09-16T01-01-47Z.fips
    ports:
      - "${MINIO_PORT_SERVER}:${MINIO_PORT_SERVER}"
      - "${MINIO_PORT_CONSOLE}:${MINIO_PORT_CONSOLE}"
    networks:
      - nwnet
    command: >
      server /data 
      --console-address :${MINIO_PORT_CONSOLE} 
      --address :${MINIO_PORT_SERVER}
    environment:  
      - MINIO_ROOT_USER=${MINIO_ACCESS_KEY}
      - MINIO_ROOT_PASSWORD=${MINIO_SECRET_ACCESS_KEY}
      - MINIO_ACCESS_KEY=${MINIO_ACCESS_KEY}
      - MINIO_SECRET_KEY=${MINIO_SECRET_ACCESS_KEY}
      - MINIO_DOMAIN=minio
    volumes:
      - ./docker/minio/minio-data:/data
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:9000/minio/health/live"]
      interval: 30s
      timeout: 20s
      retries: 3

  create-buckets:
    image: minio/mc:RELEASE.2023-09-13T23-08-58Z
    container_name: minio-create-buckets
    depends_on:
      - minio
    networks:
      - nwnet
    entrypoint: >
      /bin/sh -c '
      sleep 5;
      /usr/bin/mc config host add s3 http://minio:${MINIO_PORT_SERVER} ${MINIO_ACCESS_KEY} ${MINIO_SECRET_ACCESS_KEY} --api S3v4;
      [[ ! -z "`/usr/bin/mc ls s3 | grep ${MLFLOW_BUCKET_NAME}`" ]] || /usr/bin/mc mb s3/${MLFLOW_BUCKET_NAME};
      /usr/bin/mc policy download s3/${MLFLOW_BUCKET_NAME};
      [[ ! -z "`/usr/bin/mc ls s3 | grep ${DATA_BUCKET_NAME}`" ]] || /usr/bin/mc mb s3/${DATA_BUCKET_NAME};
      /usr/bin/mc policy download s3/${DATA_BUCKET_NAME};
      exit 0;
      '

  mlflow:
    restart: always
    build: 
      context: ./
      dockerfile:  ./docker/mlflow/Dockerfile
    image: mlflow-server
    container_name: mlflow-server
    ports:
      - "${MLFLOW_PORT}:${MLFLOW_PORT}" # exposed port : target port:
    networks:
      - nwnet
    environment: 
      - MLFLOW_S3_ENDPOINT_URL=http://minio:${MINIO_PORT_SERVER}
      - AWS_ACCESS_KEY_ID=${MINIO_ACCESS_KEY}
      - AWS_SECRET_ACCESS_KEY=${MINIO_SECRET_ACCESS_KEY}
      #- MLFLOW_DFS_TMP=/sparktmp
    command: >
      mlflow server
      --backend-store-uri postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@postgres:${POSTGRES_PORT}/${POSTGRES_MLFLOW_DATABASE}
      --host 0.0.0.0
      --default-artifact-root s3a://${MLFLOW_BUCKET_NAME}
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:5000/"]
      interval: 30s
      timeout: 10s
      retries: 3

  spark-master:
    image: bitnami/spark:3.4.0
    user: root
    hostname: spark
    container_name: spark
    networks:
      - nwnet
    environment:
      - SPARK_MODE=master
      - SPARK_RPC_AUTHENTICATION_ENABLED=no
      - SPARK_RPC_ENCRYPTION_ENABLED=no
      - SPARK_LOCAL_STORAGE_ENCRYPTION_ENABLED=no
      - SPARK_SSL_ENABLED=no
      - DOCKER_RUNNING=true
      - MLFLOW_TRACKING_URI=${MLFLOW_TRACKING_URI}
      #- MLFLOW_DFS_TMP=/sparktmp
      - SPARK_HOME=/opt/bitnami/spark
    volumes:
      - ./src:/app/src
      - ./data:/app/data:rw
      - ./assets:/app/assets
      - ./:/app
      - ./docker/sparktmp:/app/docker/sparktmp
      #- ./docker/spark/spark-defaults.conf:/opt/bitnami/spark/conf/spark-defaults.conf
    ports: # host port : container port (accessible via localhost : acessible via container IP ip)
      - "8081:8080"
      - "7077:7077"
    deploy:
      resources:
        limits:
          memory: 1GB

  spark-worker:
    image: bitnami/spark:3.4.0
    user: root
    hostname: spark-worker
    container_name: spark-worker
    networks:
        - nwnet
    environment:
        - SPARK_MODE=worker
        - SPARK_MASTER_URL=spark://spark:7077
        - SPARK_WORKER_MEMORY=12G
        - SPARK_WORKER_CORES=2
        - SPARK_RPC_AUTHENTICATION_ENABLED=no
        - SPARK_RPC_ENCRYPTION_ENABLED=no
        - SPARK_LOCAL_STORAGE_ENCRYPTION_ENABLED=no
        - SPARK_SSL_ENABLED=no
        - DOCKER_RUNNING=true
        - MLFLOW_TRACKING_URI=${MLFLOW_TRACKING_URI}
        #- MLFLOW_DFS_TMP=/app/sparktmp
        - SPARK_HOME=/opt/bitnami/spark
    volumes:
      - ./src:/app/src
      - ./data:/app/data:rw
      - ./assets:/app/assets
      - ./:/app
      - ./docker/sparktmp:/app/docker/sparktmp
    depends_on:
        - spark-master
    deploy:
      resources:
        limits:
          memory: 14GB

# Dev env with jupyter
  dev-spark:
    build: 
      context: ./
      dockerfile:  ./docker/dev-spark/Dockerfile
    image: dev-spark
    container_name: dev-spark
    networks:
      - nwnet
    environment:
      - JUPYTER_ENABLE_LAB=yes
      - DOCKER_RUNNING=true
      - MLFLOW_TRACKING_URI=${MLFLOW_TRACKING_URI}
      #- MLFLOW_DFS_TMP=/app/sparktmp
    ports:
      - "8888:8888"
      - "4040-4080:4040-4080"
    volumes:
      - ./:/app:rw
      - ./src:/usr/local/lib/python3.9/site-packages
      - ./src:/usr/local/lib/python3.8/site-packages
      - ./docker/sparktmp:/app/docker/sparktmp

  fastapi:
    build: 
      context: ./
      dockerfile:  ./docker/frontend/Dockerfile.fastapi
    image: fastapi
    container_name: fastapi
    networks:
      - nwnet
    ports:
      - "${FASTAPI_PORT}:${FASTAPI_PORT}"
    volumes:
      - ./:/app:r
      - ./data:/app/data:rw

  streamlit:
    build: 
      context: ./
      dockerfile:  ./docker/frontend/Dockerfile.streamlit
    image: streamlit
    container_name: streamlit
    networks:
      - nwnet
    ports:
      - "${STREAMLIT_PORT}:${STREAMLIT_PORT}"
    volumes:
      - ./:/app:r

  pushgateway:
    image: prom/pushgateway
    container_name: pushgateway
    restart: unless-stopped
    expose:
      - ${PUSHGATEWAY_PORT}
    ports:
      - "${PUSHGATEWAY_PORT}:${PUSHGATEWAY_PORT}"
    networks:
      - nwnet

  prometheus:
    image: prom/prometheus:latest
    ports:
      - "${PROMETHEUS_PORT}:${PROMETHEUS_PORT}"
    environment:
      - PUSHGATEWAY_PORT=${PUSHGATEWAY_PORT}
      - FASTAPI_PORT=${FASTAPI_PORT}
    volumes:
      - ./docker/prometheus/prometheus.yml:/etc/prometheus/prometheus.yml
      - ./docker/prometheus/alert_rules.yml:/etc/prometheus/alert_rules.yml
    command:
      - "--config.file=/etc/prometheus/prometheus.yml"
    networks:
      - nwnet 

  grafana:
    image: grafana/grafana:latest
    user: "472"
    depends_on:
      - prometheus
    ports:
      - "${GRAFANA_PORT}:${GRAFANA_PORT}"
    volumes:
      - ./docker/grafana/datasource.yml:/etc/grafana/provisioning/datasources/datasource.yml
      - ./docker/grafana/drift_dashboard.json:/etc/grafana/provisioning/dashboards/drift_dashboard.json
      - ./docker/grafana/fastapi_dashboard.json:/etc/grafana/provisioning/dashboards/fastapi_dashboard.json
      - ./docker/grafana/dashboards.yml:/etc/grafana/provisioning/dashboards/default.yml
    networks:
      - nwnet

  redis:
    image: redis:latest
    expose:
      - 6379
    networks:
      - nwnet
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 30s
      retries: 50
      start_period: 30s
    restart: always


  airflow-webserver:
    <<: *airflow-common
    command: webserver
    ports:
      - "8080:8080"
    healthcheck:
      test: ["CMD", "curl", "--fail", "http://localhost:8080/health"]
      interval: 30s
      timeout: 10s
      retries: 5
      start_period: 30s
    restart: always
    depends_on:
      <<: *airflow-common-depends-on
      airflow-init:
        condition: service_completed_successfully


  airflow-scheduler:
    <<: *airflow-common
    command: scheduler
    healthcheck:
      test: ["CMD", "curl", "--fail", "http://localhost:8974/health"]
      interval: 30s
      timeout: 10s
      retries: 5
      start_period: 30s
    restart: always
    depends_on:
      <<: *airflow-common-depends-on
      airflow-init:
        condition: service_completed_successfully


  airflow-worker:
    <<: *airflow-common
    command: celery worker
    healthcheck:
      # yamllint disable rule:line-length
      test:
        - "CMD-SHELL"
        - 'celery --app airflow.providers.celery.executors.celery_executor.app inspect ping -d "celery@$${HOSTNAME}" || celery --app airflow.executors.celery_executor.app inspect ping -d "celery@$${HOSTNAME}"'
      interval: 30s
      timeout: 10s
      retries: 5
      start_period: 30s
    environment:
      <<: *airflow-common-env
      # Required to handle warm shutdown of the celery workers properly
      # See https://airflow.apache.org/docs/docker-stack/entrypoint.html#signal-propagation
      DUMB_INIT_SETSID: "0"
    restart: always
    depends_on:
      <<: *airflow-common-depends-on
      airflow-init:
        condition: service_completed_successfully


  airflow-triggerer:
    <<: *airflow-common
    command: triggerer
    healthcheck:
      test: ["CMD-SHELL", 'airflow jobs check --job-type TriggererJob --hostname "$${HOSTNAME}"']
      interval: 30s
      timeout: 10s
      retries: 5
      start_period: 30s
    restart: always
    depends_on:
      <<: *airflow-common-depends-on
      airflow-init:
        condition: service_completed_successfully


  airflow-init:
    <<: *airflow-common
    entrypoint: /bin/bash
    # yamllint disable rule:line-length
    command:
      - -c
      - |
        function ver() {
          printf "%04d%04d%04d%04d" $${1//./ }
        }
        airflow_version=$$(AIRFLOW__LOGGING__LOGGING_LEVEL=INFO && gosu airflow airflow version)
        airflow_version_comparable=$$(ver $${airflow_version})
        min_airflow_version=2.2.0
        min_airflow_version_comparable=$$(ver $${min_airflow_version})
        if (( airflow_version_comparable < min_airflow_version_comparable )); then
          echo
          echo -e "\033[1;31mERROR!!!: Too old Airflow version $${airflow_version}!\e[0m"
          echo "The minimum Airflow version supported: $${min_airflow_version}. Only use this or higher!"
          echo
          exit 1
        fi
        if [[ -z "${AIRFLOW_UID}" ]]; then
          echo
          echo -e "\033[1;33mWARNING!!!: AIRFLOW_UID not set!\e[0m"
          echo "If you are on Linux, you SHOULD follow the instructions below to set "
          echo "AIRFLOW_UID environment variable, otherwise files will be owned by root."
          echo "For other operating systems you can get rid of the warning with manually created .env file:"
          echo "    See: https://airflow.apache.org/docs/apache-airflow/stable/howto/docker-compose/index.html#setting-the-right-airflow-user"
          echo
        fi
        one_meg=1048576
        mem_available=$$(($$(getconf _PHYS_PAGES) * $$(getconf PAGE_SIZE) / one_meg))
        cpus_available=$$(grep -cE 'cpu[0-9]+' /proc/stat)
        disk_available=$$(df / | tail -1 | awk '{print $$4}')
        warning_resources="false"
        if (( mem_available < 4000 )) ; then
          echo
          echo -e "\033[1;33mWARNING!!!: Not enough memory available for Docker.\e[0m"
          echo "At least 4GB of memory required. You have $$(numfmt --to iec $$((mem_available * one_meg)))"
          echo
          warning_resources="true"
        fi
        if (( cpus_available < 2 )); then
          echo
          echo -e "\033[1;33mWARNING!!!: Not enough CPUS available for Docker.\e[0m"
          echo "At least 2 CPUs recommended. You have $${cpus_available}"
          echo
          warning_resources="true"
        fi
        if (( disk_available < one_meg * 10 )); then
          echo
          echo -e "\033[1;33mWARNING!!!: Not enough Disk space available for Docker.\e[0m"
          echo "At least 10 GBs recommended. You have $$(numfmt --to iec $$((disk_available * 1024 )))"
          echo
          warning_resources="true"
        fi
        if [[ $${warning_resources} == "true" ]]; then
          echo
          echo -e "\033[1;33mWARNING!!!: You have not enough resources to run Airflow (see above)!\e[0m"
          echo "Please follow the instructions to increase amount of resources available:"
          echo "   https://airflow.apache.org/docs/apache-airflow/stable/howto/docker-compose/index.html#before-you-begin"
          echo
        fi
        mkdir -p /sources/logs /sources/dags /sources/plugins
        chown -R "${AIRFLOW_UID}:0" /sources/{logs,dags,plugins}
        exec /entrypoint airflow version
    # yamllint enable rule:line-length
    environment:
      <<: *airflow-common-env
      _AIRFLOW_DB_MIGRATE: 'true'
      _AIRFLOW_WWW_USER_CREATE: 'true'
      _AIRFLOW_WWW_USER_USERNAME: ${_AIRFLOW_WWW_USER_USERNAME:-airflow}
      _AIRFLOW_WWW_USER_PASSWORD: ${_AIRFLOW_WWW_USER_PASSWORD:-airflow}
      _PIP_ADDITIONAL_REQUIREMENTS: ''
    user: "0:0"
    volumes:
      - ${AIRFLOW_PROJ_DIR:-.}:/sources

  airflow-cli:
    <<: *airflow-common
    profiles:
      - debug
    environment:
      <<: *airflow-common-env
      CONNECTION_CHECK_MAX_COUNT: "0"
    # Workaround for entrypoint issue. See: https://github.com/apache/airflow/issues/16252
    command:
      - bash
      - -c
      - airflow


  # You can enable flower by adding "--profile flower" option e.g. docker-compose --profile flower up
  # or by explicitly targeted on the command line e.g. docker-compose up flower.
  # See: https://docs.docker.com/compose/profiles/
  flower:
    <<: *airflow-common
    command: celery flower
    profiles:
      - flower
    ports:
      - "5555:5555"
    healthcheck:
      test: ["CMD", "curl", "--fail", "http://localhost:5555/"]
      interval: 30s
      timeout: 10s
      retries: 5
      start_period: 30s
    restart: always
    depends_on:
      <<: *airflow-common-depends-on
      airflow-init:
        condition: service_completed_successfully

# ----------- storage volumes -------------
volumes:
  mlflow-data:
    driver: local
  minio-data:
    driver: local
  postgres-data:
    driver: local
  kafka-data:
    driver: local
  alertmanager-data:
    driver: local
  sparktmp:


# -------------- networks --------------
networks:
  nwnet:
    name: nwnet
    driver: bridge