8b4e1753d1
- Add Redis secure configuration - Update worker configurations for homelab and Docker - Add Forgejo workflow configurations - Update docker-compose files with improved networking - Add Caddy configurations for different environments
90 lines
2.9 KiB
YAML
90 lines
2.9 KiB
YAML
# Full Production Docker Environment with Podman and SQLite
|
|
services:
|
|
redis:
|
|
image: redis:7-alpine
|
|
container_name: ml-prod-redis
|
|
user: "999:999"
|
|
expose:
|
|
- "6379"
|
|
volumes:
|
|
- ${FETCHML_REPO_ROOT:-..}/data/prod/redis:/data
|
|
restart: unless-stopped
|
|
command: redis-server --appendonly yes
|
|
healthcheck:
|
|
test: [ "CMD", "redis-cli", "ping" ]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
|
|
api-server:
|
|
build:
|
|
context: ${FETCHML_REPO_ROOT:-..}
|
|
dockerfile: ${FETCHML_REPO_ROOT:-..}/build/docker/secure-prod.Dockerfile
|
|
container_name: ml-prod-api
|
|
expose:
|
|
- "9101"
|
|
- "2222"
|
|
volumes:
|
|
- ${FETCHML_REPO_ROOT:-..}/data/prod/experiments:/app/data/experiments
|
|
- ${FETCHML_REPO_ROOT:-..}/data/prod/active:/data/active
|
|
- ${FETCHML_REPO_ROOT:-..}/data/prod/logs:/logs
|
|
- ${FETCHML_REPO_ROOT:-..}/configs/api/multi-user.yaml:/app/configs/api/prod.yaml
|
|
depends_on:
|
|
redis:
|
|
condition: service_healthy
|
|
restart: unless-stopped
|
|
environment:
|
|
- LOG_LEVEL=info
|
|
- FETCHML_NATIVE_LIBS=1
|
|
healthcheck:
|
|
test: [ "CMD", "curl", "-f", "http://localhost:9101/health" ]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 40s
|
|
command: ["/bin/sh", "-c", "mkdir -p /data/active/datasets /data/active/snapshots && exec /usr/local/bin/api-server -config /app/configs/api/prod.yaml"]
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.docker.network=${TRAEFIK_NETWORK:-traefik}"
|
|
- "traefik.http.services.fetchml.loadbalancer.server.port=9101"
|
|
- "traefik.http.routers.fetchml.rule=Host(`${FETCHML_DOMAIN}`) && (PathPrefix(`/api`) || PathPrefix(`/ws`) || Path(`/health`))"
|
|
- "traefik.http.routers.fetchml.entrypoints=${TRAEFIK_ENTRYPOINT:-websecure}"
|
|
- "traefik.http.routers.fetchml.tls=true"
|
|
networks:
|
|
- default
|
|
- traefik
|
|
|
|
worker:
|
|
build:
|
|
context: ${FETCHML_REPO_ROOT:-..}
|
|
dockerfile: ${FETCHML_REPO_ROOT:-..}/build/docker/simple.Dockerfile
|
|
container_name: ml-prod-worker
|
|
volumes:
|
|
- ${FETCHML_REPO_ROOT:-..}/data/prod/experiments:/app/data/experiments
|
|
- ${FETCHML_REPO_ROOT:-..}/data/prod/active:/data/active
|
|
- ${FETCHML_REPO_ROOT:-..}/data/prod/logs:/logs
|
|
- ${FETCHML_REPO_ROOT:-..}/configs/workers/docker-prod.yaml:/app/configs/worker.yaml
|
|
depends_on:
|
|
redis:
|
|
condition: service_healthy
|
|
api-server:
|
|
condition: service_healthy
|
|
restart: unless-stopped
|
|
environment:
|
|
- LOG_LEVEL=info
|
|
- FETCHML_NATIVE_LIBS=1
|
|
- AWS_ACCESS_KEY_ID=${AWS_ACCESS_KEY_ID}
|
|
- AWS_SECRET_ACCESS_KEY=${AWS_SECRET_ACCESS_KEY}
|
|
- AWS_SESSION_TOKEN=${AWS_SESSION_TOKEN}
|
|
- AWS_REGION=${AWS_REGION}
|
|
privileged: true
|
|
command: ["/usr/local/bin/worker", "-config", "/app/configs/worker.yaml"]
|
|
|
|
volumes: {}
|
|
|
|
networks:
|
|
default:
|
|
name: ml-prod-network
|
|
traefik:
|
|
external: true
|
|
name: ${TRAEFIK_NETWORK:-traefik}
|