85 lines
2.7 KiB
YAML
85 lines
2.7 KiB
YAML
# =============================================================================
|
|
# ObsiGate — Déploiement PRODUCTION (serveur Linux)
|
|
# =============================================================================
|
|
# Utilisé par : build.sh --prod (défaut)
|
|
# Ports : 2020 (app), 11434 (Ollama)
|
|
# Vaults : chemins absolus Linux (/NFS/..., /DOCKER_CONFIG/...)
|
|
# Auth : activé, mot de passe admin dans .env
|
|
# =============================================================================
|
|
|
|
services:
|
|
obsigate:
|
|
build:
|
|
context: .
|
|
image: obsigate:latest
|
|
container_name: obsigate
|
|
user: "1000:1000"
|
|
restart: unless-stopped
|
|
ports:
|
|
- "2020:8080"
|
|
healthcheck:
|
|
test:
|
|
[
|
|
"CMD",
|
|
"python",
|
|
"-c",
|
|
"import urllib.request; urllib.request.urlopen('http://localhost:8080/api/health')",
|
|
]
|
|
interval: 30s
|
|
timeout: 5s
|
|
retries: 3
|
|
start_period: 10s
|
|
volumes:
|
|
- /NFS/OBSIDIAN_DOC/Obsidian-RECETTES:/vaults/Obsidian-RECETTES
|
|
- /NFS/OBSIDIAN_DOC/Obsidian_IT:/vaults/Obsidian_IT
|
|
- /NFS/OBSIDIAN_DOC/Obsidian_MAIN:/vaults/Obsidian_MAIN
|
|
- /NFS/OBSIDIAN_DOC/Obsidian_WORKOUT:/vaults/Obsidian_WORKOUT
|
|
- /NFS/OBSIDIAN_DOC/SessionsManager:/vaults/SessionsManager
|
|
- /home/bruno:/vaults/bruno
|
|
- /DOCKER_CONFIG/ObsiGate/data:/app/data
|
|
environment:
|
|
- VAULT_1_NAME=Recettes
|
|
- VAULT_1_PATH=/vaults/Obsidian-RECETTES
|
|
- VAULT_2_NAME=IT
|
|
- VAULT_2_PATH=/vaults/Obsidian_IT
|
|
- VAULT_3_NAME=Main
|
|
- VAULT_3_PATH=/vaults/Obsidian_MAIN
|
|
- VAULT_4_NAME=Workout
|
|
- VAULT_4_PATH=/vaults/Obsidian_WORKOUT
|
|
- VAULT_5_NAME=Sessions
|
|
- VAULT_5_PATH=/vaults/SessionsManager
|
|
- DIR_1_NAME=Bruno
|
|
- DIR_1_PATH=/vaults/bruno
|
|
- OBSIGATE_AUTH_ENABLED=true
|
|
- OBSIGATE_ADMIN_USER=admin
|
|
# OBSIGATE_ADMIN_PASSWORD → .env
|
|
# OBSIGATE_SECURE_COOKIES : auto par défaut (Secure si https, sinon
|
|
# pas de flag) — forcer à true uniquement si le proxy termine TLS
|
|
# sans X-Forwarded-Proto (avec TRUST_PROXY, l'auto suffit).
|
|
# Reverse proxy devant l'app : IPs d'audit réelles (BUG-030) et
|
|
# X-Forwarded-Proto honoré pour les cookies Secure (auto).
|
|
- OBSIGATE_TRUST_PROXY=true
|
|
- OLLAMA_BASE_URL=http://ollama:11434/v1
|
|
- OLLAMA_MODEL=qwen2.5-coder:1.5b
|
|
env_file:
|
|
- .env
|
|
|
|
ollama:
|
|
image: ollama/ollama:latest
|
|
container_name: obsigate-ollama
|
|
restart: unless-stopped
|
|
ports:
|
|
- "11434:11434"
|
|
volumes:
|
|
- ollama_data:/root/.ollama
|
|
entrypoint: ["/bin/sh", "-c"]
|
|
command:
|
|
- |
|
|
ollama serve &
|
|
sleep 5
|
|
ollama pull qwen2.5-coder:1.5b
|
|
wait
|
|
|
|
volumes:
|
|
ollama_data:
|