fix(preprocess): enforce local vector startup chain

2026-07-12 07:54:09 +02:00
parent e40a9d9a56
commit 72bc50ab2e
6 changed files with 84 additions and 34 deletions
@@ -0,0 +1,21 @@
+services:
+  preprocess-evidence:
+    environment:
+      THT_VECTOR_READER_PASSWORD_FILE: /run/secrets/vector_reader_password
+      THT_VECTOR_WRITER_PASSWORD_FILE: /run/secrets/vector_writer_password
+    secrets: [vector_reader_password, vector_writer_password]
+    depends_on:
+      vector-migrate: {condition: service_completed_successfully}
+
+  preprocess-dwh:
+    environment:
+      THT_VECTOR_READER_PASSWORD_FILE: /run/secrets/vector_reader_password
+    secrets: [vector_reader_password]
+    depends_on:
+      vector-migrate: {condition: service_completed_successfully}
+
+secrets:
+  vector_reader_password:
+    file: ${THT_VECTOR_READER_PASSWORD_SECRET_FILE:?set THT_VECTOR_READER_PASSWORD_SECRET_FILE}
+  vector_writer_password:
+    file: ${THT_VECTOR_WRITER_PASSWORD_SECRET_FILE:?set THT_VECTOR_WRITER_PASSWORD_SECRET_FILE}