skills/nacl-init/resources/bootstrap/graph-docker-compose.yml

name: ${COMPOSE_PROJECT_NAME:-${CONTAINER_PREFIX:-graph}-graph}

services:
  neo4j:
    # Docker Hub official image, registry manifest verified 2026-07-20.
    image: neo4j:5.24.2-community@sha256:2e7e4eea5bc1eec581a3097c018dfeb3747f3638e67a963c10554825c31c1425
    container_name: ${CONTAINER_PREFIX:-graph}-neo4j
    restart: unless-stopped
    ports:
      - "127.0.0.1:${NEO4J_HTTP_PORT:-3574}:7474"
      - "127.0.0.1:${NEO4J_BOLT_PORT:-3587}:7687"
    environment:
      NEO4J_AUTH: neo4j/${NEO4J_PASSWORD:?set NEO4J_PASSWORD through the package secret provider}
      # This exact image embeds apoc-5.24.2-core.jar; the entrypoint copies it
      # from /var/lib/neo4j/labs and does not download a plugin artifact.
      NEO4J_PLUGINS: '["apoc"]'
      NEO4J_server_memory_heap_initial__size: 1G
      NEO4J_server_memory_heap_max__size: 2G
      NEO4J_server_memory_pagecache_size: 512m
    volumes:
      - neo4j-data:/data
      - neo4j-logs:/logs
    networks:
      - graph-net
    healthcheck:
      test: ["CMD-SHELL", "wget --no-verbose --tries=1 --spider http://localhost:7474 || exit 1"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 30s

volumes:
  neo4j-data:
    name: ${CONTAINER_PREFIX:-graph}-neo4j-data
  neo4j-logs:
    name: ${CONTAINER_PREFIX:-graph}-neo4j-logs

networks:
  graph-net:
    name: ${CONTAINER_PREFIX:-graph}-net
    driver: bridge