Introduction

version: '3.8'
name: testhide

services:
  # ==========================================
  # FRONTEND (Nginx + Angular)
  # ==========================================
  frontend:
    container_name: testhide_frontend
    image: thuesdays/testhide-frontend:latest
    restart: always
    ports:
      - "80:80"
      - "443:443"
      - "7771:7771"
    env_file:
      - .env
    environment:
      - CERT_FILE=${CERT_FILE}
      - CERT_KEY=${CERT_KEY}
    volumes:
      - ./ssl:/etc/ssl:ro
      - ./nginx/api.conf:/etc/nginx/conf.d/api.conf:ro
      - testhide_static_data:/usr/share/nginx/html/static:ro
    depends_on:
      - backend
      - ai-api
    networks:
      - testhide-net
    deploy:
      resources:
        limits:
          cpus: "0.25"
          memory: 256m

  # ==========================================
  # BACKEND (Python API)
  # ==========================================
  backend:
    image: thuesdays/testhide-backend:latest
    restart: unless-stopped
    env_file:
      - .env
    environment:
      - LOAD_AI_MODELS=false
      - RUN_AI_WORKER=false
      - GUNICORN_WORKERS=2
      - COMPOSE_PROJECT_NAME=testhide
    volumes:
      - testhide_static_data:/app/static
      - ./releases:/app/releases
      - ./monitoring_scripts:/app/monitoring_scripts
      - ./gunicorn.conf.py:/app/gunicorn.conf.py:ro
      - ./ssl:/etc/ssl:ro
      - ./sandbox_data:/app/sandbox_data
      - /var/run/docker.sock:/var/run/docker.sock
      - ./docker-compose.prod.yaml:/app/docker-compose.yaml:ro
    depends_on:
      mongo:
        condition: service_healthy
      redis:
        condition: service_healthy
    networks:
      - testhide-net
    healthcheck:
      disable: true
    mem_limit: 1.5g
    memswap_limit: 1.5g
    deploy:
      replicas: 2
      resources:
        limits:
          cpus: "2.0"
          memory: 1.5g
        reservations:
          cpus: "0.5"
          memory: 768m

  # ==========================================
  # AI API (HTTP only — serves /api/v3/ai/)
  # ==========================================
  ai-api:
    container_name: testhide_ai_api
    image: thuesdays/testhide-backend:latest
    restart: unless-stopped
    env_file:
      - .env
    environment:
      - LOAD_AI_MODELS=true
      - RUN_AI_WORKER=false
      - GUNICORN_WORKERS=2
    volumes:
      - testhide_static_data:/app/static
      - ./sandbox_data:/app/sandbox_data
      - ./releases:/app/releases
      - ./monitoring_scripts:/app/monitoring_scripts
      - ./gunicorn.conf.py:/app/gunicorn.conf.py:ro
      - ./ssl:/etc/ssl:ro
    depends_on:
      mongo:
        condition: service_healthy
      redis:
        condition: service_healthy
    networks:
      - testhide-net
    healthcheck:
      disable: true
    mem_limit: 5g
    memswap_limit: 5g
    deploy:
      resources:
        limits:
          cpus: "2.0"
          memory: 5g
        reservations:
          cpus: "0.5"
          memory: 3g

  # ==========================================
  # AI WORKER (Background: training, vectorization)
  # ==========================================
  ai-worker:
    container_name: testhide_ai_worker
    image: thuesdays/testhide-backend:latest
    restart: unless-stopped
    env_file:
      - .env
    environment:
      - LOAD_AI_MODELS=true
      - RUN_AI_WORKER=true
      - GUNICORN_WORKERS=1
    volumes:
      - testhide_static_data:/app/static
      - ./sandbox_data:/app/sandbox_data
      - ./releases:/app/releases
      - ./monitoring_scripts:/app/monitoring_scripts
      - ./gunicorn.conf.py:/app/gunicorn.conf.py:ro
      - ./ssl:/etc/ssl:ro
    depends_on:
      mongo:
        condition: service_healthy
      redis:
        condition: service_healthy
    networks:
      testhide-net:
        aliases:
          - ai-worker
    healthcheck:
      disable: true
    mem_limit: 7g
    memswap_limit: 7g
    deploy:
      resources:
        limits:
          cpus: "2.0"
          memory: 7g
        reservations:
          cpus: "0.5"
          memory: 4g

  # ==========================================
  # DATABASES
  # ==========================================
  mongo:
    container_name: testhide_mongo
    image: 'mongo:8.2.3'
    restart: always
    command: [ "mongod", "--auth", "--wiredTigerCacheSizeGB", "2" ]
    environment:
      - MONGO_INITDB_ROOT_USERNAME=${MONGO_USER}
      - MONGO_INITDB_ROOT_PASSWORD=${MONGO_PASS}
    ports:
      - "27017:27017"
    volumes:
      - ${MONGO_DATA_PATH}:/data/db
    networks:
      - testhide-net
    healthcheck:
      test: [ "CMD", "mongosh", "--norc", "--quiet", "-u", "${MONGO_USER}", "-p", "${MONGO_PASS}", "--authenticationDatabase", "admin", "--eval", "db.adminCommand('ping')" ]
      interval: 30s
      timeout: 5s
      retries: 5
    deploy:
      resources:
        limits:
          cpus: "1.5"
          memory: 3g
        reservations:
          cpus: "0.5"
          memory: 1.5g

  redis:
    container_name: testhide_redis
    image: redis:7-alpine
    restart: always
    command: [ "redis-server", "--maxmemory", "512mb", "--maxmemory-policy", "allkeys-lru", "--appendonly", "no", "--requirepass", "${REDIS_PASSWORD}" ]
    networks:
      - testhide-net
    healthcheck:
      test: [ "CMD", "redis-cli", "-a", "${REDIS_PASSWORD}", "ping" ]
      interval: 10s
      timeout: 3s
      retries: 5
    deploy:
      resources:
        limits:
          cpus: "0.5"
          memory: 768m

  redisinsight:
    container_name: testhide_redisinsight
    image: redis/redisinsight:latest
    restart: always
    depends_on:
      redis:
        condition: service_healthy
    networks:
      - testhide-net
    deploy:
      resources:
        limits:
          cpus: "0.25"
          memory: 256m

# ==========================================
# VOLUMES & NETWORKS
# ==========================================
volumes:
  testhide_static_data:
    name: testhide_static_data

networks:
  testhide-net:
    name: testhide-net

job_parameters:
  # Custom Axis: OS versions
  - type: matrix
    matrix_type: custom_axis
    parameter_name: OS
    values:
      - windows-2022
      - ubuntu-22.04
      - macos-14
  
  # Nodes Axis: Run on specific agents
  - type: matrix
    matrix_type: nodes
    parameter_name: AGENT_LABEL
    values:
      - gpu-runner
      - standard-runner

# Result: 6 child builds (3 OS × 2 Agents)
# Child keys: "windows-2022-gpu-runner", "ubuntu-22.04-standard-runner", etc.

{
  "windows-2022-gpu-runner": {
    "envs": [
      { "env_name": "OS", "env_value": "windows-2022" },
      { "env_name": "AGENT_LABEL", "env_value": "gpu-runner" }
    ],
    "job_parameters": [
      { "parameter_name": "OS", "defaultValue": "windows-2022" },
      { "parameter_name": "AGENT_LABEL", "defaultValue": "gpu-runner" }
    ],
    "label_expr": ["gpu-runner"]  // For agent routing
  },
  // ... more combinations
}

# Environment variables are automatically set
echo "Running on OS: $OS"
echo "Agent Label: $AGENT_LABEL"

# Or use substitution syntax
echo "Testing on %OS% with %AGENT_LABEL%"

post_steps:
  # Capture JUnit reports for analytics
  - type: test_provider
    provider: pytest
    path: "**/reports/*.xml"
  
  # Upload logs and screenshots
  - type: copy_artifacts
    source: "logs/**/*.log"
    target: "build_logs"
  
  - type: copy_artifacts
    source: "screenshots/*.png"
    target: "failures"

source_management:
  type: git
  url: "git@github.com:company/repo.git"
  branch: "main"
  credentials_id: "github-ssh-key"
  poll_interval: "5m"

post_steps:
  - type: msteams_notification
    webhook_url: "https://outlook.office.com/webhook/..."
    events: [failed, flaky]
    template: "Build #{build_number} failed on {branch}"

curl -X POST https://testhide.com/api/v3/job/{job_id}/trigger \
     -H "Authorization: Bearer <TOKEN>" \
     -d '{"branch": "feature/ui-fix", "parameters": {"DEBUG": "true"}}'