penpot/docker/devenv/docker-compose.yaml

networks:
  default:
    driver: bridge
    ipam:
      config:
        - subnet: 172.177.9.0/24

volumes:
  postgres_data_pg16:
  user_data:
  minio_data:
  valkey_data:

services:
  main:
    privileged: true
    image: "penpotapp/devenv:latest"
    build:
      context: "."
    container_name: "penpot-devenv-main"
    stop_signal: SIGINT

    depends_on:
      - postgres
      - redis
      # - keycloak

    volumes:
      - "user_data:/home/penpot/"
      - "${PWD}:/home/penpot/penpot:z"

    ports:
      - 3447:3447
      - 3448:3448
      - 3449:3449
      - 3449:3449/udp
      - 3450:3450
      - 6006:6006
      - 6060:6060
      - 6061:6061
      - 6062:6062
      - 6063:6063
      - 6064:6064
      - 9000:9000
      - 9001:9001
      - 9090:9090
      - 9091:9091

      # MCP
      - 4400:4400
      - 4401:4401
      - 4402:4402
      - 4403:4403

      # Plugins
      - 4200:4200
      - 4201:4201
      - 4202:4202

      # Serena MCP server (agentic mode only)
      - ${SERENA_EXTERNAL_PORT:-14281}:14281
      - ${SERENA_DASHBOARD_EXTERNAL_PORT:-14282}:24282

    environment:
      - EXTERNAL_UID=${CURRENT_USER_ID}
      # SMTP setup
      - PENPOT_SMTP_ENABLED=true
      - PENPOT_SMTP_DEFAULT_FROM=no-reply@example.com
      - PENPOT_SMTP_DEFAULT_REPLY_TO=no-reply@example.com
      - PENPOT_SMTP_HOST=mailer
      - PENPOT_SMTP_PORT=1025
      - PENPOT_SMTP_USERNAME=
      - PENPOT_SMTP_PASSWORD=
      - PENPOT_SMTP_SSL=false
      - PENPOT_SMTP_TLS=false

      # LDAP setup
      - PENPOT_LDAP_HOST=ldap
      - PENPOT_LDAP_PORT=10389
      - PENPOT_LDAP_SSL=false
      - PENPOT_LDAP_STARTTLS=false
      - PENPOT_LDAP_BASE_DN=ou=people,dc=planetexpress,dc=com
      - PENPOT_LDAP_BIND_DN=cn=admin,dc=planetexpress,dc=com
      - PENPOT_LDAP_BIND_PASSWORD=GoodNewsEveryone
      - PENPOT_LDAP_ATTRS_USERNAME=uid
      - PENPOT_LDAP_ATTRS_EMAIL=mail
      - PENPOT_LDAP_ATTRS_FULLNAME=cn
      - PENPOT_LDAP_ATTRS_PHOTO=jpegPhoto

      # agentic devenv
      # Serena update: set to a commit/tag to update Serena on startup, leave empty to skip update and use the version in the image
      - SERENA_UPDATE_VERSION=1.5.0

    networks:
      default:
        aliases:
          - main

  minio:
    image: "minio/minio:RELEASE.2025-04-03T14-56-28Z"
    command: minio server /mnt/data --console-address ":9001"

    volumes:
      - "minio_data:/mnt/data"

    environment:
      - MINIO_ROOT_USER=minioadmin
      - MINIO_ROOT_PASSWORD=minioadmin

    networks:
      default:
        aliases:
          - minio

  postgres:
    image: postgres:16.8
    command: postgres -c config_file=/etc/postgresql.conf
    restart: always
    stop_signal: SIGINT
    environment:
      - POSTGRES_INITDB_ARGS=--data-checksums
      - POSTGRES_DB=penpot
      - POSTGRES_USER=penpot
      - POSTGRES_PASSWORD=penpot
    volumes:
      - ./files/postgresql.conf:/etc/postgresql.conf:z
      - ./files/postgresql_init.sql:/docker-entrypoint-initdb.d/init.sql:z
      - postgres_data_pg16:/var/lib/postgresql/data
    networks:
      default:
        aliases:
          - postgres

  redis:
    image: valkey/valkey:8.1
    hostname: "penpot-devenv-valkey"
    container_name: "penpot-devenv-valkey"
    restart: always
    command: valkey-server --save 120 1 --loglevel warning
    volumes:
      - "valkey_data:/data"

    networks:
      default:
        aliases:
          - redis

  mailer:
    image: sj26/mailcatcher:latest
    restart: always
    expose:
      - '1025'
    ports:
      - "1080:1080"

    networks:
      default:
        aliases:
          - mailer


  # https://github.com/rroemhild/docker-test-openldap
  ldap:
    image: rroemhild/test-openldap:2.1
    expose:
      - '10389'
      - '10636'
    ports:
      - "10389:10389"
      - "10636:10636"
    ulimits:
      nofile:
        soft: 1024
        hard: 1024

    networks:
      default:
        aliases:
          - ldap