compose.yaml

services:
  redis:
    image: redis:7-bookworm
    restart: unless-stopped
    command:
      - redis-server
      - --appendonly
      - "yes"
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 2s
      timeout: 5s
      retries: 30
      start_period: 10s
    volumes:
      - oz-redis-data:/data

  anvil:
    image: ghcr.io/foundry-rs/foundry:latest
    entrypoint:
      - anvil
    command:
      - --host
      - 0.0.0.0
      - --port
      - "8545"
      - --chain-id
      - "31337"
      - --block-time
      - "2"
    ports:
      - "${ANVIL_HOST_PORT:-8545}:8545"

  oz-relayer:
    image: openzeppelin/openzeppelin-relayer:${OZ_RELAYER_VERSION:-v1.4.0}
    restart: unless-stopped
    # Match ownership of bind-mounted ./config/oz-relayer/keys (defaults suit many Linux desktops).
    user: "${OZ_RELAYER_UID:-1000}:${OZ_RELAYER_GID:-1000}"
    depends_on:
      redis:
        condition: service_healthy
      anvil:
        condition: service_started
    environment:
      APP_PORT: 8080
      METRICS_PORT: 8081
      METRICS_ENABLED: "true"
      REDIS_URL: redis://redis:6379
      REPOSITORY_STORAGE_TYPE: redis
      RESET_STORAGE_ON_START: "false"
      STORAGE_ENCRYPTION_KEY: ${OZ_STORAGE_ENCRYPTION_KEY:-MDEyMzQ1Njc4OWFiY2RlZjAxMjM0NTY3ODlhYmNkZWY=}
      API_KEY: ${OZ_RELAYER_API_KEY:-local-oz-relayer-api-key-32chars}
      WEBHOOK_SIGNING_KEY: ${OZ_WEBHOOK_SIGNING_KEY:-local-webhook-signing-key}
      KEYSTORE_PASSPHRASE: ${OZ_KEYSTORE_PASSPHRASE:-change-me}
      LOG_LEVEL: ${OZ_LOG_LEVEL:-info}
      IN_DOCKER: "true"
      RPC_BLOCK_PRIVATE_IPS: "false"
      # Single HTTP client (clearmacro-provider) in dev; stock defaults can 429 under burst /readyz + worker.
      RATE_LIMIT_REQUESTS_PER_SECOND: "500"
      RATE_LIMIT_BURST_SIZE: "600"
      RELAYER_CONCURRENCY_LIMIT: "200"
    ports:
      - "${OZ_RELAYER_HOST_PORT:-8080}:8080"
      - "${OZ_RELAYER_METRICS_HOST_PORT:-8081}:8081"
    volumes:
      - ./config/oz-relayer:/app/config:ro

volumes:
  oz-redis-data: