pediatric-ai-scribe-v3/docker-compose.yml

services:
  pediatric-scribe:
    build:
      context: .
      args:
        GIT_REVISION: ${GIT_REVISION:-unknown}
    # A deploy sets PED_AI_IMAGE to an immutable, revision-tagged image from the
    # registry; a local build leaves it unset and uses the tag build-image.sh
    # writes. Either way the running container can be asked what it is:
    # /api/build returns the revision baked into it at build time.
    image: ${PED_AI_IMAGE:-ped-ai-local:latest}
    ports:
      - "127.0.0.1:3552:3000"
    env_file:
      - .env
    environment:
      CLINICAL_ASSISTANT_MCP_URL: http://mcp:8000/mcp
      REDIS_URL: redis://ped-ai-redis:6379
      LOKI_URL: http://monitoring-loki:3100
      # Deliberate: ped-ai talks to LiteLLM over the container network, not the
      # public hostname. Clinical traffic then never leaves the host and does
      # not depend on Caddy, public DNS or edge TLS being up. The latency
      # difference is ~19ms on calls that take hundreds of ms, so speed is not
      # the reason — not leaving the box is.
      #
      # OpenBao still stores https://llm.danvics.com for this key and Compose
      # env wins, so the vault value is dead. Change it in the vault to match,
      # or this line will keep looking like the accidental override it used to
      # be. The app's AppRole is read-only, so that has to be done by hand.
      LITELLM_API_BASE: http://litellm:4000
      TTS_PROVIDER: litellm
      LITELLM_TTS_MODEL: local-kokoro-tts
      LITELLM_TTS_VOICE: sherpa/kokoro:am_adam
      LITELLM_TTS_VOICES: sherpa/kokoro:am_adam,sherpa/kokoro:am_michael,sherpa/kokoro:af_bella,sherpa/kokoro:af_nicole,sherpa/kokoro:bf_emma,sherpa/kokoro:bm_lewis
      CLINICAL_ASSISTANT_PROMPT_POOL_TARGET: 1000
      LIBRETRANSLATE_URL: ${LIBRETRANSLATE_URL:-http://libretranslate:5000}
      DEEPL_API_BASE: ${DEEPL_API_BASE:-https://api.deepl.com/v2}
      GENERATED_IMAGES_S3_ENDPOINT: http://assets:9000
      GENERATED_IMAGES_S3_REGION: us-east-1
      GENERATED_IMAGES_S3_BUCKET: generated-images
      GENERATED_IMAGES_S3_ACCESS_KEY_FILE: /run/secrets/generated-images-access-key
      GENERATED_IMAGES_S3_SECRET_KEY_FILE: /run/secrets/generated-images-secret-key
      # Recordings are kept for 24 hours; the same MinIO, its own bucket. The
      # app key carries a second policy covering only audio-backups, so these
      # can reuse the mounted credentials (see scripts/enable-audio-backup-bucket.js).
      AUDIO_BACKUPS_S3_ENDPOINT: http://assets:9000
      AUDIO_BACKUPS_S3_REGION: us-east-1
      AUDIO_BACKUPS_S3_BUCKET: audio-backups
      AUDIO_BACKUPS_S3_ACCESS_KEY_FILE: /run/secrets/generated-images-access-key
      AUDIO_BACKUPS_S3_SECRET_KEY_FILE: /run/secrets/generated-images-secret-key
    volumes:
      - scribe-logs:/app/data/logs
      - clinical-assistant-mcp-data:/app/mcp-data:ro
      - /home/danvics/docker/personal-assistant-storage-milvus/secrets/images-access-key:/run/secrets/generated-images-access-key:ro
      - /home/danvics/docker/personal-assistant-storage-milvus/secrets/images-secret-key:/run/secrets/generated-images-secret-key:ro
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
    restart: unless-stopped
    container_name: pediatric-ai-scribe
    networks:
      - default
      - danvics_mcp
      - danvics_monitoring
      - ped-ai-storage-assets
      - danvics_translate
    healthcheck:
      test: ["CMD", "wget", "--spider", "-q", "http://localhost:3000/api/health"]
      interval: 30s
      timeout: 10s
      retries: 5
      start_period: 20s

  postgres:
    # Digest-pinned, so a rebuilt environment gets this exact Postgres. If a
    # newer pg16 image ships a different ICU library, the startup drift check in
    # src/db/database.js auto-REINDEXes and refreshes the collation version;
    # pinning means that only happens when this line is deliberately changed.
    image: pgvector/pgvector:pg16@sha256:00ba258a66dac104fd5171074a0084462a64a1369d8513f3d0a634e2f24d15bc
    environment:
      POSTGRES_DB: pedscribe
      POSTGRES_USER: pedscribe
      POSTGRES_PASSWORD: ${DB_PASSWORD:-pedscribe}
    volumes:
      - pgdata:/var/lib/postgresql/data
    restart: unless-stopped
    container_name: pedscribe-db
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U pedscribe"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 10s

  redis:
    image: redis:8-alpine@sha256:d146f83b1e0f02fc27c26a50cee39338c736674c5959db84363e6ae3cd9e02d2
    command: redis-server --appendonly yes
    restart: unless-stopped
    container_name: ped-ai-redis
    volumes:
      - redis-data:/data
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 5s
      retries: 5
    networks:
      - default
      - danvics_mcp

volumes:
  pgdata:
  scribe-logs:
  redis-data:
  clinical-assistant-mcp-data:
    external: true
    name: mcp-server_mcp-data

networks:
  danvics_mcp:
    external: true
  danvics_monitoring:
    external: true
  ped-ai-storage-assets:
    external: true
    name: personal-assistant-storage-milvus_assets
  # LibreTranslate's own service network, owned by the libretranslate project.
  # ped-ai used to join open-webui's stack network purely to resolve this one
  # hostname, which coupled a clinical app to an unrelated stack's lifecycle.
  danvics_translate:
    external: true