wehub-resource-sync
161ef94b4f
Sirius CI/CD Pipeline / Merge API Manifest (push) Blocked by required conditions
Sirius CI/CD Pipeline / Build API (${{ matrix.platform }}) (push) Blocked by required conditions
Sirius CI/CD Pipeline / Build UI (${{ matrix.platform }}) (push) Blocked by required conditions
Sirius CI/CD Pipeline / Merge UI Manifest (push) Blocked by required conditions
Sirius CI/CD Pipeline / Build Engine (${{ matrix.platform }}) (push) Blocked by required conditions
Sirius CI/CD Pipeline / Merge Engine Manifest (push) Blocked by required conditions
Sirius CI/CD Pipeline / Build Infra (${{ matrix.service }}, ${{ matrix.platform }}) (push) Blocked by required conditions
Sirius CI/CD Pipeline / Merge Infra Manifest (sirius-postgres) (push) Blocked by required conditions
Sirius CI/CD Pipeline / Merge Infra Manifest (sirius-rabbitmq) (push) Blocked by required conditions
Sirius CI/CD Pipeline / Merge Infra Manifest (sirius-valkey) (push) Blocked by required conditions
Sirius CI/CD Pipeline / Integration Test (push) Blocked by required conditions
Sirius CI/CD Pipeline / Public Stack Contract (push) Blocked by required conditions
Sirius CI/CD Pipeline / Dispatch Demo Deployment (sirius-demo branch) (push) Blocked by required conditions
Sirius CI/CD Pipeline / Dispatch Demo Canary (main branch) (push) Blocked by required conditions
Check engine pin consistency / Dockerfile / CI pin consistency (push) Successful in 8s
Sirius CI/CD Pipeline / Detect Changes (push) Successful in 23s
Sirius CI/CD Pipeline / Guard Registry Namespace (push) Waiting to run
Validate Docker Configuration / Validate Docker Compose Configuration (push) Successful in 47s
60 lines
2.3 KiB
Bash
60 lines
2.3 KiB
Bash
# Sirius production/local-prod compose environment template
|
|
# Copy to .env (or export these vars in your shell) before:
|
|
# docker compose -f docker-compose.yaml -f docker-compose.prod.yaml up -d
|
|
|
|
# Optional image tag override.
|
|
# Leave blank to use docker-compose.yaml's default public tag (`latest`).
|
|
# Pin a release tag only after the release publish workflow confirms all six
|
|
# Sirius images exist for that tag.
|
|
IMAGE_TAG=
|
|
|
|
# Internal service API key for sirius-ui (server), sirius-api, and sirius-engine.
|
|
# The installer writes ./secrets/sirius_api_key.txt and compose mounts it at this path.
|
|
SIRIUS_API_KEY_FILE=/run/secrets/sirius_api_key
|
|
|
|
# Required database credentials
|
|
POSTGRES_USER=postgres
|
|
POSTGRES_PASSWORD=change-me-strong-db-password
|
|
POSTGRES_DB=sirius
|
|
POSTGRES_HOST=sirius-postgres
|
|
POSTGRES_PORT=5432
|
|
|
|
# Database connection URL (auto-generated by the installer from POSTGRES_* above)
|
|
# Override manually only if you need a custom connection string.
|
|
DATABASE_URL=
|
|
|
|
# UI auth settings (required secret)
|
|
NEXTAUTH_SECRET=change-me-long-random-nextauth-secret
|
|
NEXTAUTH_URL=http://localhost:3000
|
|
INITIAL_ADMIN_PASSWORD=change-me-strong-admin-password
|
|
|
|
# API URLs (runtime contract)
|
|
# - SIRIUS_API_URL: canonical server-side base URL for Docker services (sirius-ui server, engine, scanner).
|
|
# - NEXT_PUBLIC_SIRIUS_API_URL: browser-only; must reach the published API port on the host.
|
|
# - API_BASE_URL: optional legacy alias for agent tooling; if unset, compose sets it from SIRIUS_API_URL.
|
|
# Do not set API_BASE_URL to a different host than SIRIUS_API_URL.
|
|
SIRIUS_API_URL=http://sirius-api:9001
|
|
NEXT_PUBLIC_SIRIUS_API_URL=http://localhost:9001
|
|
|
|
# API service settings
|
|
GO_ENV=production
|
|
API_PORT=9001
|
|
CORS_ALLOWED_ORIGINS=http://localhost:3000,https://sirius.local
|
|
|
|
# Engine settings
|
|
ENGINE_MAIN_PORT=5174
|
|
GRPC_AGENT_PORT=50051
|
|
# API_BASE_URL=http://sirius-api:9001
|
|
# Host discovery in prod overlay requires NET_RAW on sirius-engine
|
|
# (configured in docker-compose.prod.yaml)
|
|
|
|
# Infrastructure endpoints
|
|
VALKEY_HOST=sirius-valkey
|
|
VALKEY_PORT=6379
|
|
RABBITMQ_URL=amqp://guest:guest@sirius-rabbitmq:5672/
|
|
|
|
# Validation quick checks after startup:
|
|
# - valkey-cli GET template:quick (must include "fingerprint" in scan_types)
|
|
# - rabbitmqctl list_queues name consumers messages_ready messages_unacknowledged
|
|
# - valkey-cli GET currentScan
|