docker-compose.yml

services:
  db:
    image: pgvector/pgvector:pg16
    environment:
      POSTGRES_USER: gbrain
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-gbrain}
      POSTGRES_DB: gbrain
    ports:
      - "5432:5432"
    volumes:
      - pgdata:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U gbrain -d gbrain"]
      interval: 2s
      timeout: 3s
      retries: 10
    restart: unless-stopped

  # MCP Server — 提供 HTTP MCP 访问（仅内网）
  mcp:
    image: ghcr.io/javader/gbrain:latest
    depends_on:
      db:
        condition: service_healthy
    environment:
      DATABASE_URL: postgres://gbrain:${POSTGRES_PASSWORD:-gbrain}@db:5432/gbrain
      GBRAIN_HOME: /data
      # MCP OAuth 2.1 认证 Token（32+ 字符，不设置则自动生成）
      GBRAIN_ADMIN_BOOTSTRAP_TOKEN: ${GBRAIN_ADMIN_BOOTSTRAP_TOKEN:-}
      # API Keys（从 .env 文件注入）
      ANTHROPIC_API_KEY: ${ANTHROPIC_API_KEY:-}
      OPENAI_API_KEY: ${OPENAI_API_KEY:-}
      OPENAI_BASE_URL: ${OPENAI_BASE_URL:-}
      ZEROENTROPY_API_KEY: ${ZEROENTROPY_API_KEY:-}
    volumes:
      - gbrain_data:/data
      - ./docs:/docs:ro
    ports:
      # MCP HTTP 端口，对内网开放
      # 如需限制仅宿主机访问，改为 "127.0.0.1:3131:3131"
      - "3131:3131"
    command: serve --http --port 3131 --bind 0.0.0.0
    restart: unless-stopped

  # CLI — 一次性命令工具
  cli:
    image: ghcr.io/javader/gbrain:latest
    profiles: ["cli"]
    depends_on:
      db:
        condition: service_healthy
    environment:
      DATABASE_URL: postgres://gbrain:${POSTGRES_PASSWORD:-gbrain}@db:5432/gbrain
      GBRAIN_HOME: /data
      ANTHROPIC_API_KEY: ${ANTHROPIC_API_KEY:-}
      OPENAI_API_KEY: ${OPENAI_API_KEY:-}
      OPENAI_BASE_URL: ${OPENAI_BASE_URL:-}
      ZEROENTROPY_API_KEY: ${ZEROENTROPY_API_KEY:-}
    volumes:
      - gbrain_data:/data
      - ./docs:/docs:ro
      - .:/workspace
    working_dir: /workspace
    command: --help

volumes:
  pgdata:
  gbrain_data: