# Toxiproxy, for the failures that matter most.
#
# The platform's hardest guarantee is that a lost confirmation is reported as AMBIGUOUS rather than
# guessed. A healthy broker will not lose one on request, so the chaos suite puts a proxy in front of
# it and severs the connection after the record was accepted but before the acknowledgement arrives.
services:
  toxiproxy:
    image: ghcr.io/shopify/toxiproxy:2.12.0
    container_name: messaging-toxiproxy
    ports:
      - "8474:8474"   # control API
      - "19092:19092" # proxied Kafka
      - "15673:15673" # proxied RabbitMQ
      - "15433:15433" # proxied PostgreSQL
    healthcheck:
      test: ["CMD", "/toxiproxy-cli", "list"]
      interval: 5s
      timeout: 5s
      retries: 20