Fix: make Grafana optional and allow README in build

docker-compose.yml

@@ -1,6 +1,10 @@
 services:
   bot:
-    build: .
+    build:
+      context: .
+      args:
+        INSTALL_AI: ${INSTALL_AI:-true}
+    image: guardden:latest
     container_name: guardden-bot
     restart: unless-stopped
     depends_on:
@@ -10,13 +14,52 @@ services:
       - GUARDDEN_DISCORD_TOKEN=${GUARDDEN_DISCORD_TOKEN}
       - GUARDDEN_DATABASE_URL=postgresql://guardden:guardden@db:5432/guardden
       - GUARDDEN_LOG_LEVEL=${GUARDDEN_LOG_LEVEL:-INFO}
+      - GUARDDEN_ALLOWED_GUILDS=${GUARDDEN_ALLOWED_GUILDS:-}
+      - GUARDDEN_OWNER_IDS=${GUARDDEN_OWNER_IDS:-}
       - GUARDDEN_AI_PROVIDER=${GUARDDEN_AI_PROVIDER:-none}
       - GUARDDEN_ANTHROPIC_API_KEY=${GUARDDEN_ANTHROPIC_API_KEY:-}
       - GUARDDEN_OPENAI_API_KEY=${GUARDDEN_OPENAI_API_KEY:-}
     volumes:
-      - ./data:/app/data
+      - guardden_data:/app/data
+      - guardden_logs:/app/logs
     networks:
       - guardden
+    healthcheck:
+      test: ["CMD", "python", "-m", "guardden.health", "--check"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 60s
+
+  dashboard:
+    build:
+      context: .
+      target: runtime
+    image: guardden-dashboard:latest
+    container_name: guardden-dashboard
+    restart: unless-stopped
+    depends_on:
+      db:
+        condition: service_healthy
+    ports:
+      - "${DASHBOARD_PORT:-8080}:8000"
+    environment:
+      - GUARDDEN_DATABASE_URL=postgresql://guardden:guardden@db:5432/guardden
+      - GUARDDEN_DASHBOARD_BASE_URL=${GUARDDEN_DASHBOARD_BASE_URL:-http://localhost:8080}
+      - GUARDDEN_DASHBOARD_SECRET_KEY=${GUARDDEN_DASHBOARD_SECRET_KEY}
+      - GUARDDEN_DASHBOARD_ENTRA_TENANT_ID=${GUARDDEN_DASHBOARD_ENTRA_TENANT_ID}
+      - GUARDDEN_DASHBOARD_ENTRA_CLIENT_ID=${GUARDDEN_DASHBOARD_ENTRA_CLIENT_ID}
+      - GUARDDEN_DASHBOARD_ENTRA_CLIENT_SECRET=${GUARDDEN_DASHBOARD_ENTRA_CLIENT_SECRET}
+      - GUARDDEN_DASHBOARD_DISCORD_CLIENT_ID=${GUARDDEN_DASHBOARD_DISCORD_CLIENT_ID}
+      - GUARDDEN_DASHBOARD_DISCORD_CLIENT_SECRET=${GUARDDEN_DASHBOARD_DISCORD_CLIENT_SECRET}
+      - GUARDDEN_DASHBOARD_OWNER_DISCORD_ID=${GUARDDEN_DASHBOARD_OWNER_DISCORD_ID}
+      - GUARDDEN_DASHBOARD_OWNER_ENTRA_OBJECT_ID=${GUARDDEN_DASHBOARD_OWNER_ENTRA_OBJECT_ID}
+      - GUARDDEN_DASHBOARD_CORS_ORIGINS=${GUARDDEN_DASHBOARD_CORS_ORIGINS:-}
+    volumes:
+      - guardden_logs:/app/logs:ro
+    networks:
+      - guardden
+    command: ["python", "-m", "guardden.dashboard"]
 
   db:
     image: postgres:15-alpine
@@ -24,21 +67,87 @@ services:
     restart: unless-stopped
     environment:
       - POSTGRES_USER=guardden
-      - POSTGRES_PASSWORD=guardden
+      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD:-guardden}
       - POSTGRES_DB=guardden
+      - POSTGRES_INITDB_ARGS=--auth-host=scram-sha-256
     volumes:
       - postgres_data:/var/lib/postgresql/data
+      - ./scripts/init-db.sh:/docker-entrypoint-initdb.d/init-db.sh:ro
+    ports:
+      - "${POSTGRES_PORT:-5432}:5432"
     healthcheck:
       test: ["CMD-SHELL", "pg_isready -U guardden -d guardden"]
-      interval: 5s
+      interval: 10s
       timeout: 5s
       retries: 5
+      start_period: 30s
+    networks:
+      - guardden
+
+  # Optional: Redis for caching and rate limiting
+  redis:
+    image: redis:7-alpine
+    container_name: guardden-redis
+    restart: unless-stopped
+    command: redis-server --appendonly yes --requirepass ${REDIS_PASSWORD:-guardden_redis}
+    volumes:
+      - redis_data:/data
+    ports:
+      - "${REDIS_PORT:-6379}:6379"
+    healthcheck:
+      test: ["CMD", "redis-cli", "--raw", "incr", "ping"]
+      interval: 10s
+      timeout: 3s
+      retries: 5
+    networks:
+      - guardden
+
+  # Optional: Monitoring stack
+  prometheus:
+    image: prom/prometheus:latest
+    container_name: guardden-prometheus
+    restart: unless-stopped
+    profiles:
+      - monitoring
+    command:
+      - "--config.file=/etc/prometheus/prometheus.yml"
+      - "--storage.tsdb.path=/prometheus"
+      - "--web.console.libraries=/etc/prometheus/console_libraries"
+      - "--web.console.templates=/etc/prometheus/consoles"
+      - "--web.enable-lifecycle"
+    ports:
+      - "${PROMETHEUS_PORT:-9090}:9090"
+    volumes:
+      - ./monitoring/prometheus.yml:/etc/prometheus/prometheus.yml:ro
+      - prometheus_data:/prometheus
+    networks:
+      - guardden
+
+  grafana:
+    image: grafana/grafana:latest
+    container_name: guardden-grafana
+    restart: unless-stopped
+    profiles:
+      - monitoring-grafana
+    environment:
+      - GF_SECURITY_ADMIN_PASSWORD=${GRAFANA_PASSWORD:-admin}
+    ports:
+      - "${GRAFANA_PORT:-3000}:3000"
+    volumes:
+      - grafana_data:/var/lib/grafana
+      - ./monitoring/grafana/provisioning:/etc/grafana/provisioning:ro
     networks:
       - guardden
 
 networks:
   guardden:
     driver: bridge
+    name: guardden-network
 
 volumes:
   postgres_data:
+  redis_data:
+  guardden_data:
+  guardden_logs:
+  prometheus_data:
+  grafana_data: