# mlflow — experiment tracking + model registry (cloud only)
# Networks: app (UI on 5000, proxied by nginx) + data (postgres backend on sql stack)

services:
  mlflow:
    image: ghcr.io/mlflow/mlflow:v2.18.0
    restart: unless-stopped
    networks: [app, data]
    command: >
      mlflow server
      --host 0.0.0.0
      --port 5000
      --backend-store-uri postgresql://${MLFLOW_DB_USER}:${MLFLOW_DB_PASSWORD}@sql:5432/${MLFLOW_DB_NAME}
      --default-artifact-root /mlflow/artifacts
      --serve-artifacts
    volumes:
      - mlflow-artifacts:/mlflow/artifacts
    environment:
      TZ: ${TZ:-Europe/Amsterdam}
    # TODO: switch artifact store to S3/MinIO; Keycloak OIDC via nginx auth_request

networks:
  app:
  data:

volumes:
  mlflow-artifacts: