docker-compose.minio-weaviate-python.ts.yaml

version: '3.7'
services:
  tailscale-minio:
    image: tailscale/tailscale:latest
    hostname: minio-ts
    init: true
    volumes:
      - /dev/net/tun:/dev/net/tun
      - ./tailscale-minio/state:/var/lib/tailscale
      - ./config/MINIO_SERVE_CONFIG.json:/config/TS_SERVE_CONFIG.json:ro
    environment:
      - TS_AUTHKEY=${TS_AUTHKEY}
      - TS_STATE_DIR=/var/lib/tailscale
      - TS_SERVE_CONFIG=/config/TS_SERVE_CONFIG.json
      - TS_EXTRA_ARGS=--advertise-routes=192.168.0.0/24 --advertise-tags=tag:infra --accept-routes --advertise-exit-node --ssh
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    restart: unless-stopped

  minio:
    image: minio/minio:latest
    init: true
    environment:
      MINIO_ROOT_USER: ${MINIO_ROOT_USER}
      MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD}
      MINIO_DOMAIN: ${TS_CERT_DOMAIN}
      MINIO_BROWSER_REDIRECT_URL: https://${MINIO_DOMAIN}
    command: server /data --address ":9000" --console-address ":9001"
    volumes:
      - minio_data:/data
    depends_on:
      - tailscale-minio
    network_mode: service:tailscale-minio

  tailscale-weaviate:
    image: tailscale/tailscale:latest
    hostname: weaviate-ts
    init: true
    volumes:
      - /dev/net/tun:/dev/net/tun
      - ./tailscale-weaviate/state:/var/lib/tailscale
      - ./config/WEAVIATE_SERVE_CONFIG.json:/config/TS_SERVE_CONFIG.json:ro
    environment:
      - TS_AUTHKEY=${TS_AUTHKEY}
      - TS_STATE_DIR=/var/lib/tailscale
      - TS_SERVE_CONFIG=/config/TS_SERVE_CONFIG.json
      - TS_EXTRA_ARGS=--advertise-routes=192.168.0.0/24 --advertise-tags=tag:infra --accept-routes --advertise-exit-node --ssh
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    restart: unless-stopped

  weaviate:
    image: semitechnologies/weaviate:latest
    init: true
    command:
      - --host
      - 0.0.0.0
      - --port
      - '8080'
      - --scheme
      - http
    environment:
      QUERY_DEFAULTS_LIMIT: 20
      AUTHENTICATION_ANONYMOUS_ACCESS_ENABLED: 'true'
      WEAVIATE_ORIGIN: ${WEAVIATE_ORIGIN}
      PERSISTENCE_DATA_PATH: '/var/lib/weaviate'
      ENABLE_MODULES: 'backup-s3,text2vec-cohere,text2vec-huggingface,text2vec-palm,text2vec-openai,generative-openai,generative-cohere,generative-palm,ref2vec-centroid,reranker-cohere,qna-openai'
      BACKUP_S3_BUCKET: 'weaviate-backups'
      BACKUP_S3_ENDPOINT: '${MINIO_DOMAIN}:9000'
      BACKUP_S3_ACCESS_KEY_ID: ${MINIO_ROOT_USER}
      BACKUP_S3_SECRET_ACCESS_KEY: ${MINIO_ROOT_PASSWORD}
      BACKUP_S3_USE_SSL: 'true'
    depends_on:
      - tailscale-weaviate
      - minio
    network_mode: service:tailscale-weaviate
    volumes:
      - weaviate_data:/var/lib/weaviate

  tailscale-python:
    image: tailscale/tailscale:latest
    hostname: python-ts
    init: true
    volumes:
      - /dev/net/tun:/dev/net/tun
      - ./tailscale-python/state:/var/lib/tailscale
      - ./config/PYTHON_SERVE_CONFIG.json:/config/TS_SERVE_CONFIG.json:ro
    environment:
      - TS_AUTHKEY=${TS_AUTHKEY}
      - TS_STATE_DIR=/var/lib/tailscale
      - TS_SERVE_CONFIG=/config/TS_SERVE_CONFIG.json
      - TS_EXTRA_ARGS=--advertise-routes=192.168.0.0/24 --advertise-tags=tag:infra --accept-routes --advertise-exit-node --ssh
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    restart: unless-stopped

  python-app:
    image: cdaprod/python-app
    init: true
    build:
      context: ./app
      dockerfile: Dockerfile
    depends_on:
      - weaviate
      - minio
    environment:
      - KEEP_CONTAINER_ALIVE=true
    network_mode: service:tailscale-python

volumes:
  minio_data:
    driver: local
  weaviate_data:
    driver: local
  tailscale-minio-state:
    driver: local
  tailscale-weaviate-state:
    driver: local
  tailscale-python-state:
    driver: local