chore: establish local platform baseline
This commit is contained in:
Codex Local
+316
@@ -0,0 +1,316 @@
|
||||
name: data-terminal-cloud
|
||||
|
||||
x-backend-environment: &backend-environment
|
||||
APP_ENV: local
|
||||
LOG_LEVEL: debug
|
||||
DATABASE_URL: postgres://voice:voice_dev_only@postgres:5432/voice_platform?sslmode=disable
|
||||
REDIS_ADDR: redis:6379
|
||||
REDIS_PASSWORD: ""
|
||||
REDIS_DB: "0"
|
||||
DEPENDENCY_TIMEOUT: 2s
|
||||
EXTERNAL_PROBE_INTERVAL: 30s
|
||||
SHUTDOWN_TIMEOUT: 10s
|
||||
AUTH_ISSUER_URL: http://localhost:58180/realms/voice-local
|
||||
AUTH_JWKS_URL: http://keycloak:8080/realms/voice-local/protocol/openid-connect/certs
|
||||
AUTH_AUDIENCE: voice-platform-web
|
||||
OTEL_EXPORTER_OTLP_ENDPOINT: otel-collector:4317
|
||||
RATE_LIMIT_RPS: "50"
|
||||
RATE_LIMIT_BURST: "100"
|
||||
RATE_LIMIT_USER_RPS: "20"
|
||||
RATE_LIMIT_USER_BURST: "40"
|
||||
RATE_LIMIT_TENANT_RPS: "200"
|
||||
RATE_LIMIT_TENANT_BURST: "400"
|
||||
RATE_LIMIT_DEVICE_RPS: "10"
|
||||
RATE_LIMIT_DEVICE_BURST: "20"
|
||||
PROVIDER_START_RPS: "20"
|
||||
PROVIDER_START_BURST: "40"
|
||||
PROVIDER_MAX_ACTIVE_TASKS: "100"
|
||||
DEVICE_CLOCK_SKEW: 5m
|
||||
DEVICE_SECRET_DIRECTORY: ${DEVICE_SECRET_DIRECTORY:-}
|
||||
RTC_APP_ID: local-public-rtc-app
|
||||
RTC_APP_KEY: ${RTC_APP_KEY:-}
|
||||
RTC_TOKEN_ISSUER: ${RTC_TOKEN_ISSUER:-local}
|
||||
RTC_TOKEN_TTL: 5m
|
||||
CURSOR_SIGNING_SECRET: local-signed-pagination-cursor-secret-32-bytes-minimum
|
||||
SHARE_TOKEN_SIGNING_SECRET: local-share-token-signing-secret-32-bytes-minimum
|
||||
CONVERSATION_ALLOCATION_TTL: 30s
|
||||
HEARTBEAT_INTERVAL_SECONDS: "15"
|
||||
PROVIDER_CALLBACK_CLOCK_SKEW: 5m
|
||||
PROVIDER_REQUEST_TIMEOUT: 5s
|
||||
VOICE_PROVIDER: ${VOICE_PROVIDER:-mock}
|
||||
VOLC_RTC_BASE_URL: ${VOLC_RTC_BASE_URL:-https://rtc.volcengineapi.com}
|
||||
VOLC_ACCESS_KEY_ID: ${VOLC_ACCESS_KEY_ID:-}
|
||||
VOLC_SECRET_ACCESS_KEY: ${VOLC_SECRET_ACCESS_KEY:-}
|
||||
VOLC_SESSION_TOKEN: ${VOLC_SESSION_TOKEN:-}
|
||||
VOLC_RTC_REGION: ${VOLC_RTC_REGION:-cn-north-1}
|
||||
VOLC_RTC_API_VERSION: ${VOLC_RTC_API_VERSION:-2024-12-01}
|
||||
VOLC_VOICE_CHAT_TEMPLATE_FILE: ${VOLC_VOICE_CHAT_TEMPLATE_FILE:-}
|
||||
PROVIDER_FAILURE_THRESHOLD: "3"
|
||||
PROVIDER_CIRCUIT_COOLDOWN: 1m
|
||||
RECOVERY_SCAN_INTERVAL: 5s
|
||||
RECOVERY_STARTING_AFTER: 20s
|
||||
RECOVERY_STOPPING_AFTER: 20s
|
||||
OBJECT_STORE_ENDPOINT: minio:9000
|
||||
OBJECT_STORE_PUBLIC_ENDPOINT: localhost:59000
|
||||
OBJECT_STORE_ACCESS_KEY: local_minio
|
||||
OBJECT_STORE_SECRET_KEY: local_minio_password
|
||||
OBJECT_STORE_EXPORT_BUCKET: private-exports
|
||||
OBJECT_STORE_REGION: us-east-1
|
||||
OBJECT_STORE_SECURE: "false"
|
||||
EXPORT_DOWNLOAD_TTL: 10m
|
||||
EXPORT_OBJECT_TTL: 24h
|
||||
MEDIA_LOCAL_DELETE_GRACE: ${MEDIA_LOCAL_DELETE_GRACE:-1s}
|
||||
EMBEDDING_PROVIDER: ${EMBEDDING_PROVIDER:-local}
|
||||
ARK_BASE_URL: ${ARK_BASE_URL:-https://ark.cn-beijing.volces.com/api/v3}
|
||||
ARK_API_KEY: ${ARK_API_KEY:-}
|
||||
ARK_EMBEDDING_MODEL: ${ARK_EMBEDDING_MODEL:-}
|
||||
ARK_REQUEST_TIMEOUT: ${ARK_REQUEST_TIMEOUT:-30s}
|
||||
|
||||
x-backend-dependencies: &backend-dependencies
|
||||
postgres:
|
||||
condition: service_healthy
|
||||
redis:
|
||||
condition: service_healthy
|
||||
minio:
|
||||
condition: service_healthy
|
||||
migrate:
|
||||
condition: service_completed_successfully
|
||||
seed:
|
||||
condition: service_completed_successfully
|
||||
|
||||
services:
|
||||
postgres:
|
||||
image: pgvector/pgvector:pg16
|
||||
environment:
|
||||
POSTGRES_DB: voice_platform
|
||||
POSTGRES_USER: voice
|
||||
POSTGRES_PASSWORD: voice_dev_only
|
||||
ports:
|
||||
- "${POSTGRES_PORT:-55432}:5432"
|
||||
volumes:
|
||||
- postgres-data:/var/lib/postgresql/data
|
||||
healthcheck:
|
||||
test: ["CMD-SHELL", "pg_isready -U voice -d voice_platform"]
|
||||
interval: 5s
|
||||
timeout: 3s
|
||||
retries: 20
|
||||
|
||||
redis:
|
||||
image: redis:7-alpine
|
||||
command: ["redis-server", "--appendonly", "yes"]
|
||||
ports:
|
||||
- "${REDIS_PORT:-56379}:6379"
|
||||
volumes:
|
||||
- redis-data:/data
|
||||
healthcheck:
|
||||
test: ["CMD", "redis-cli", "ping"]
|
||||
interval: 5s
|
||||
timeout: 3s
|
||||
retries: 20
|
||||
|
||||
minio:
|
||||
image: quay.io/minio/minio:latest
|
||||
command: ["server", "/data", "--console-address", ":9001"]
|
||||
environment:
|
||||
MINIO_ROOT_USER: local_minio
|
||||
MINIO_ROOT_PASSWORD: local_minio_password
|
||||
ports:
|
||||
- "${MINIO_API_PORT:-59000}:9000"
|
||||
- "${MINIO_CONSOLE_PORT:-59001}:9001"
|
||||
volumes:
|
||||
- minio-data:/data
|
||||
healthcheck:
|
||||
test: ["CMD-SHELL", "curl -fsS http://localhost:9000/minio/health/ready >/dev/null"]
|
||||
interval: 5s
|
||||
timeout: 3s
|
||||
retries: 20
|
||||
|
||||
keycloak:
|
||||
image: quay.io/keycloak/keycloak:26.2
|
||||
command: ["start-dev", "--import-realm"]
|
||||
environment:
|
||||
KC_BOOTSTRAP_ADMIN_USERNAME: admin
|
||||
KC_BOOTSTRAP_ADMIN_PASSWORD: local_admin_only
|
||||
KC_HOSTNAME: http://localhost:58180
|
||||
ports:
|
||||
- "${KEYCLOAK_PORT:-58180}:8080"
|
||||
volumes:
|
||||
- ./deploy/keycloak:/opt/keycloak/data/import:ro
|
||||
|
||||
otel-collector:
|
||||
image: otel/opentelemetry-collector-contrib:latest
|
||||
command: ["--config=/etc/otelcol-contrib/config.yaml"]
|
||||
volumes:
|
||||
- ./deploy/otel/collector.yaml:/etc/otelcol-contrib/config.yaml:ro
|
||||
ports:
|
||||
- "${OTEL_GRPC_PORT:-54317}:4317"
|
||||
|
||||
prometheus:
|
||||
image: prom/prometheus:latest
|
||||
command: ["--config.file=/etc/prometheus/prometheus.yml"]
|
||||
volumes:
|
||||
- ./deploy/prometheus/prometheus.yml:/etc/prometheus/prometheus.yml:ro
|
||||
- ./deploy/prometheus/rules:/etc/prometheus/rules:ro
|
||||
ports:
|
||||
- "${PROMETHEUS_PORT:-59190}:9090"
|
||||
|
||||
grafana:
|
||||
image: grafana/grafana:12.2.0
|
||||
environment:
|
||||
GF_AUTH_ANONYMOUS_ENABLED: "true"
|
||||
GF_AUTH_ANONYMOUS_ORG_ROLE: Viewer
|
||||
GF_USERS_DEFAULT_THEME: light
|
||||
volumes:
|
||||
- ./deploy/grafana/provisioning:/etc/grafana/provisioning:ro
|
||||
- ./deploy/grafana/dashboards:/var/lib/grafana/dashboards:ro
|
||||
ports:
|
||||
- "${GRAFANA_PORT:-59300}:3000"
|
||||
depends_on:
|
||||
- prometheus
|
||||
|
||||
migrate:
|
||||
image: migrate/migrate:v4.18.3
|
||||
volumes:
|
||||
- ./migrations:/migrations:ro
|
||||
command:
|
||||
- -path=/migrations
|
||||
- -database=postgres://voice:voice_dev_only@postgres:5432/voice_platform?sslmode=disable
|
||||
- up
|
||||
depends_on:
|
||||
postgres:
|
||||
condition: service_healthy
|
||||
restart: "no"
|
||||
|
||||
seed:
|
||||
image: pgvector/pgvector:pg16
|
||||
environment:
|
||||
PGPASSWORD: voice_dev_only
|
||||
volumes:
|
||||
- ./test/fixtures:/fixtures:ro
|
||||
command: ["psql", "-h", "postgres", "-U", "voice", "-d", "voice_platform", "-v", "ON_ERROR_STOP=1", "-f", "/fixtures/local_seed.sql"]
|
||||
depends_on:
|
||||
migrate:
|
||||
condition: service_completed_successfully
|
||||
restart: "no"
|
||||
|
||||
api:
|
||||
build:
|
||||
context: .
|
||||
dockerfile: deploy/backend.Dockerfile
|
||||
entrypoint: ["/app/api"]
|
||||
environment:
|
||||
<<: *backend-environment
|
||||
HTTP_ADDR: 0.0.0.0:8080
|
||||
DEVICE_LOCAL_SECRET: local-simulated-device-secret-32-bytes-minimum
|
||||
RTC_TOKEN_SIGNING_SECRET: local-simulated-rtc-token-secret-32-bytes-minimum
|
||||
ports:
|
||||
- "${API_PORT:-58080}:8080"
|
||||
depends_on: *backend-dependencies
|
||||
|
||||
callbacks:
|
||||
build:
|
||||
context: .
|
||||
dockerfile: deploy/backend.Dockerfile
|
||||
entrypoint: ["/app/callbacks"]
|
||||
environment:
|
||||
<<: *backend-environment
|
||||
HTTP_ADDR: 0.0.0.0:8081
|
||||
PROVIDER_CALLBACK_SECRET: local-provider-callback-secret-32-bytes-minimum
|
||||
RATE_LIMIT_RPS: "1000"
|
||||
RATE_LIMIT_BURST: "1500"
|
||||
ports:
|
||||
- "${CALLBACKS_PORT:-58081}:8081"
|
||||
depends_on: *backend-dependencies
|
||||
|
||||
worker:
|
||||
build:
|
||||
context: .
|
||||
dockerfile: deploy/backend.Dockerfile
|
||||
entrypoint: ["/app/worker"]
|
||||
environment:
|
||||
<<: *backend-environment
|
||||
HTTP_ADDR: 0.0.0.0:8082
|
||||
MOCK_PROVIDER_BASE_URL: http://mock-provider:8083
|
||||
MOCK_PROVIDER_API_KEY: local-mock-provider-key
|
||||
ALERT_WEBHOOK_URL: ${ALERT_WEBHOOK_URL:-http://mock-alert-receiver:8084/webhooks/alerts}
|
||||
ALERT_WEBHOOK_SECRET: ${ALERT_WEBHOOK_SECRET:-local-alert-webhook-secret-32-bytes-minimum}
|
||||
ALERT_WEBHOOK_TIMEOUT: ${ALERT_WEBHOOK_TIMEOUT:-5s}
|
||||
CONTENT_GENERATOR: ${CONTENT_GENERATOR:-local}
|
||||
CONTENT_SAFETY_PROVIDER: ${CONTENT_SAFETY_PROVIDER:-local}
|
||||
CONTENT_SAFETY_ENDPOINT: ${CONTENT_SAFETY_ENDPOINT:-}
|
||||
CONTENT_SAFETY_API_KEY: ${CONTENT_SAFETY_API_KEY:-}
|
||||
CONTENT_SAFETY_POLICY_REF: ${CONTENT_SAFETY_POLICY_REF:-}
|
||||
CONTENT_SAFETY_TIMEOUT: ${CONTENT_SAFETY_TIMEOUT:-5s}
|
||||
ARK_BASE_URL: ${ARK_BASE_URL:-https://ark.cn-beijing.volces.com/api/v3}
|
||||
ARK_API_KEY: ${ARK_API_KEY:-}
|
||||
ARK_CONTENT_MODEL: ${ARK_CONTENT_MODEL:-}
|
||||
ARK_REQUEST_TIMEOUT: ${ARK_REQUEST_TIMEOUT:-30s}
|
||||
ports:
|
||||
- "${WORKER_PORT:-58082}:8082"
|
||||
depends_on:
|
||||
<<: *backend-dependencies
|
||||
mock-provider:
|
||||
condition: service_started
|
||||
mock-alert-receiver:
|
||||
condition: service_started
|
||||
|
||||
mock-provider:
|
||||
build:
|
||||
context: .
|
||||
dockerfile: deploy/backend.Dockerfile
|
||||
entrypoint: ["/app/mock-provider"]
|
||||
environment:
|
||||
HTTP_ADDR: 0.0.0.0:8083
|
||||
MOCK_PROVIDER_API_KEY: local-mock-provider-key
|
||||
MOCK_PROVIDER_CALLBACK_URL: http://callbacks:8081/callbacks/v1/vertc/voice-chat
|
||||
PROVIDER_CALLBACK_SECRET: local-provider-callback-secret-32-bytes-minimum
|
||||
MOCK_PROVIDER_START_DELAY: 100ms
|
||||
MOCK_PROVIDER_DUPLICATE_CALLBACKS: "2"
|
||||
ports:
|
||||
- "${MOCK_PROVIDER_PORT:-59200}:8083"
|
||||
depends_on:
|
||||
callbacks:
|
||||
condition: service_started
|
||||
|
||||
mock-alert-receiver:
|
||||
build:
|
||||
context: .
|
||||
dockerfile: deploy/backend.Dockerfile
|
||||
entrypoint: ["/app/mock-alert-receiver"]
|
||||
environment:
|
||||
HTTP_ADDR: 0.0.0.0:8084
|
||||
ALERT_WEBHOOK_SECRET: ${ALERT_WEBHOOK_SECRET:-local-alert-webhook-secret-32-bytes-minimum}
|
||||
ports:
|
||||
- "${MOCK_ALERT_RECEIVER_PORT:-59210}:8084"
|
||||
|
||||
sim-device:
|
||||
profiles: [simulation]
|
||||
build:
|
||||
context: .
|
||||
dockerfile: deploy/backend.Dockerfile
|
||||
entrypoint: ["/app/sim-device"]
|
||||
environment:
|
||||
SIM_API_URL: http://api:8080
|
||||
SIM_DEVICE_ID: 10000000-0000-0000-0000-000000000511
|
||||
SIM_DEVICE_SECRET: local-simulated-device-secret-32-bytes-minimum
|
||||
depends_on:
|
||||
api:
|
||||
condition: service_started
|
||||
|
||||
web:
|
||||
build:
|
||||
context: .
|
||||
dockerfile: deploy/web.Dockerfile
|
||||
environment:
|
||||
WEB_OIDC_AUTHORITY: ${WEB_OIDC_AUTHORITY:-http://localhost:58180/realms/voice-local}
|
||||
WEB_OIDC_CLIENT_ID: ${WEB_OIDC_CLIENT_ID:-voice-platform-web}
|
||||
ports:
|
||||
- "${WEB_PORT:-3100}:8080"
|
||||
depends_on:
|
||||
api:
|
||||
condition: service_started
|
||||
|
||||
volumes:
|
||||
postgres-data:
|
||||
redis-data:
|
||||
minio-data:
|
||||
Reference in New Issue
Block a user