docker-compose.yml

services:
  convex:
    image: ghcr.io/get-convex/convex-backend:latest
    stop_grace_period: 10s
    stop_signal: SIGINT
    ports:
      - "3210:3210"
      - "3211:3211"
    volumes:
      - convex-data:/convex/data
    environment:
      - CONVEX_CLOUD_ORIGIN=${CONVEX_CLOUD_ORIGIN:-http://127.0.0.1:3210}
      - CONVEX_SITE_ORIGIN=${CONVEX_SITE_ORIGIN:-http://127.0.0.1:3211}
      - INSTANCE_NAME=${INSTANCE_NAME:-openclaw-convex}
      - INSTANCE_SECRET=${INSTANCE_SECRET:-}
      - DATABASE_URL=${DATABASE_URL:-}
      - RUST_LOG=${RUST_LOG:-info}
      - DISABLE_BEACON=${DISABLE_BEACON:-}
      - DO_NOT_REQUIRE_SSL=true
    healthcheck:
      test: curl -f http://localhost:3210/version
      interval: 5s
      timeout: 5s
      retries: 5
      start_period: 10s
    restart: unless-stopped
    networks:
      - openclaw-network

  convex-dashboard:
    image: ghcr.io/get-convex/convex-dashboard:latest
    stop_grace_period: 10s
    stop_signal: SIGINT
    ports:
      - "6791:6791"
    environment:
      - NEXT_PUBLIC_DEPLOYMENT_URL=${NEXT_PUBLIC_DEPLOYMENT_URL:-http://convex:3210}
    depends_on:
      convex:
        condition: service_healthy
    restart: unless-stopped
    networks:
      - openclaw-network

  api:
    build:
      context: .
      dockerfile: packages/api/Dockerfile
    ports:
      - "3456:3456"
    environment:
      - NODE_ENV=production
      - PORT=3456
    restart: unless-stopped
    networks:
      - openclaw-network

  web:
    build:
      context: .
      dockerfile: packages/web/Dockerfile
    ports:
      - "3654:3654"
    environment:
      - NODE_ENV=production
      - PORT=3654
    restart: unless-stopped
    networks:
      - openclaw-network

  mission-control:
    build:
      context: packages/mission-control
      dockerfile: Dockerfile
      args:
        # VITE_CONVEX_URL is embedded into the JS bundle at build time by Vite.
        # For Docker networking, the browser reaches Convex via the host, not the
        # internal Docker network, so this should be the host-accessible URL.
        VITE_CONVEX_URL: ${VITE_CONVEX_URL:-http://127.0.0.1:3210}
        # URL the build container uses to push Convex functions.
        CONVEX_SELF_HOSTED_URL: ${CONVEX_SELF_HOSTED_URL:-http://convex:3210}
      secrets:
        - convex_admin_key
    ports:
      - "3660:3660"
    depends_on:
      convex:
        condition: service_healthy
    restart: unless-stopped
    networks:
      - openclaw-network

secrets:
  convex_admin_key:
    environment: CONVEX_SELF_HOSTED_ADMIN_KEY

volumes:
  convex-data:

networks:
  openclaw-network:
    driver: bridge