Medgraph/compose.yml at main · devanshif8/Medgraph · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
# Local development stack for MedGraph-Multimodal.
#   - neo4j : property graph (literature ⇄ cases ⇄ imaging), APOC enabled
#   - qdrant: multimodal vector store (OpenCLIP image + text embeddings)
#
# Secrets are read from a local .env file (see .env.example). Never commit .env.
# Bring up:  docker compose up -d
name: medgraph

services:
  neo4j:
    image: neo4j:5.26-community
    container_name: medgraph-neo4j
    restart: unless-stopped
    ports:
      - "7474:7474"   # HTTP Browser
      - "7687:7687"   # Bolt driver
    environment:
      # Auth: neo4j/<password from .env>. Fails fast if unset.
      NEO4J_AUTH: "neo4j/${NEO4J_PASSWORD:?set NEO4J_PASSWORD in .env}"

      # --- APOC plugin ----------------------------------------------------
      NEO4J_PLUGINS: '["apoc"]'
      # Whitelist only the procedures we need. Keep apoc.import/export off and
      # file access disabled so untrusted graph data can't trigger I/O.
      NEO4J_apoc_import_file_enabled: "false"
      NEO4J_apoc_export_file_enabled: "false"
      NEO4J_dbms_security_procedures_unrestricted: "apoc.meta.*,apoc.coll.*,apoc.map.*"
      NEO4J_dbms_security_procedures_allowlist: "apoc.*"

      # --- Resource limits (tune to host) ---------------------------------
      NEO4J_server_memory_heap_initial__size: "1G"
      NEO4J_server_memory_heap_max__size: "2G"
      NEO4J_server_memory_pagecache_size: "1G"
    volumes:
      - neo4j-data:/data
      - neo4j-logs:/logs
    healthcheck:
      test: ["CMD-SHELL", "wget -qO- http://localhost:7474 || exit 1"]
      interval: 15s
      timeout: 10s
      retries: 10
      start_period: 40s

  qdrant:
    image: qdrant/qdrant:v1.12.5
    container_name: medgraph-qdrant
    restart: unless-stopped
    ports:
      - "6333:6333"   # REST + Web UI
      - "6334:6334"   # gRPC
    environment:
      QDRANT__SERVICE__API_KEY: "${QDRANT_API_KEY:?set QDRANT_API_KEY in .env}"
      QDRANT__LOG_LEVEL: "INFO"
    volumes:
      - qdrant-data:/qdrant/storage
    healthcheck:
      test: ["CMD-SHELL", "bash -c ':> /dev/tcp/localhost/6333' || exit 1"]
      interval: 15s
      timeout: 10s
      retries: 10
      start_period: 20s

volumes:
  neo4j-data:
  neo4j-logs:
  qdrant-data: