intercept/docker-compose.yml

# INTERCEPT - Signal Intelligence Platform
# Docker Compose configuration for easy deployment
#
# Uses gunicorn + gevent production server via start.sh (handles concurrent SSE/WebSocket)
#
# Basic usage (build locally):
#   docker compose --profile basic up -d --build
#
# With ADS-B history (Postgres):
#   docker compose --profile history up -d

services:
  intercept:
    # Always build and use the local image
    image: intercept:latest
    build: .
    pull_policy: never
    container_name: intercept
    profiles:
      - basic
    ports:
      - "5050:5050"
      # Uncomment for HTTPS support (set INTERCEPT_HTTPS=true below)
      # - "5443:5443"
    # Privileged mode required for USB SDR device access
    privileged: true
    # USB device mapping for all USB devices
    devices:
      - /dev/bus/usb:/dev/bus/usb
    volumes:
      # Persist runtime output directories across container rebuilds.
      # Mount subdirectories individually so Python modules in /app/data are not shadowed.
      - ./data/weather_sat:/app/data/weather_sat
      - ./data/radiosonde:/app/data/radiosonde
      - ./data/subghz:/app/data/subghz
      - ./data/adsb:/app/data/adsb
      # Optional: mount logs directory
      # - ./logs:/app/logs
    environment:
      - TZ=${TZ:-UTC}
      - INTERCEPT_HOST=0.0.0.0
      - INTERCEPT_PORT=5050
      - INTERCEPT_LOG_LEVEL=INFO
      # HTTPS support (auto-generates self-signed cert)
      # - INTERCEPT_HTTPS=true
      # - INTERCEPT_PORT=5443
      # ADS-B history is disabled by default
      # To enable, use: docker compose --profile history up -d
      # - INTERCEPT_ADSB_HISTORY_ENABLED=true
      # - INTERCEPT_ADSB_DB_HOST=adsb_db
      # - INTERCEPT_ADSB_DB_PORT=5432
      # - INTERCEPT_ADSB_DB_NAME=intercept_adsb
      # - INTERCEPT_ADSB_DB_USER=intercept
      # - INTERCEPT_ADSB_DB_PASSWORD=intercept
      # ADS-B auto-start on dashboard load (default false)
      - INTERCEPT_ADSB_AUTO_START=${INTERCEPT_ADSB_AUTO_START:-false}
      # Shared observer location across modules
      - INTERCEPT_SHARED_OBSERVER_LOCATION=${INTERCEPT_SHARED_OBSERVER_LOCATION:-true}
      # Default observer coordinates (set to your location to skip the GPS prompt)
      # - INTERCEPT_DEFAULT_LAT=${INTERCEPT_DEFAULT_LAT:-0}
      # - INTERCEPT_DEFAULT_LON=${INTERCEPT_DEFAULT_LON:-0}
    # Network mode for WiFi scanning (requires host network)
    # network_mode: host
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "curl", "-sf", "http://localhost:5050/health"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 10s

  # ADS-B history with Postgres persistence
  # Enable with: docker compose --profile history up -d
  intercept-history:
    # Always build and use the local image
    image: intercept:latest
    build: .
    pull_policy: never
    container_name: intercept-history
    profiles:
      - history
    depends_on:
      - adsb_db
    ports:
      - "5050:5050"
      # Uncomment for HTTPS support (set INTERCEPT_HTTPS=true below)
      # - "5443:5443"
    # Privileged mode required for USB SDR device access
    privileged: true
    # USB device mapping for all USB devices
    devices:
      - /dev/bus/usb:/dev/bus/usb
    volumes:
      - ./data/weather_sat:/app/data/weather_sat
      - ./data/radiosonde:/app/data/radiosonde
      - ./data/subghz:/app/data/subghz
      - ./data/adsb:/app/data/adsb
    environment:
      - TZ=${TZ:-UTC}
      - INTERCEPT_HOST=0.0.0.0
      - INTERCEPT_PORT=5050
      - INTERCEPT_LOG_LEVEL=INFO
      # HTTPS support (auto-generates self-signed cert)
      # - INTERCEPT_HTTPS=true
      # - INTERCEPT_PORT=5443
      - INTERCEPT_ADSB_HISTORY_ENABLED=true
      - INTERCEPT_ADSB_DB_HOST=adsb_db
      - INTERCEPT_ADSB_DB_PORT=5432
      - INTERCEPT_ADSB_DB_NAME=intercept_adsb
      - INTERCEPT_ADSB_DB_USER=intercept
      - INTERCEPT_ADSB_DB_PASSWORD=intercept
      # ADS-B auto-start on dashboard load (default false)
      - INTERCEPT_ADSB_AUTO_START=${INTERCEPT_ADSB_AUTO_START:-false}
      # Shared observer location across modules
      - INTERCEPT_SHARED_OBSERVER_LOCATION=${INTERCEPT_SHARED_OBSERVER_LOCATION:-true}
      # Disable login auth (set to true for local/dev use)
      - INTERCEPT_DISABLE_AUTH=${INTERCEPT_DISABLE_AUTH:-false}
      # Default observer coordinates (set to your location to skip the GPS prompt)
      # - INTERCEPT_DEFAULT_LAT=${INTERCEPT_DEFAULT_LAT:-0}
      # - INTERCEPT_DEFAULT_LON=${INTERCEPT_DEFAULT_LON:-0}
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "curl", "-sf", "http://localhost:5050/health"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 10s

  adsb_db:
    image: postgres:16-alpine
    container_name: intercept-adsb-db
    profiles:
      - history
    environment:
      - TZ=${TZ:-UTC}
      - POSTGRES_DB=intercept_adsb
      - POSTGRES_USER=intercept
      - POSTGRES_PASSWORD=intercept
    volumes:
      # Default local path (override with PGDATA_PATH for external storage)
      - ${PGDATA_PATH:-./pgdata}:/var/lib/postgresql/data
    restart: unless-stopped
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U intercept -d intercept_adsb"]
      interval: 10s
      timeout: 5s
      retries: 5