- core.Dockerfile: python:3.12-slim + node 22 copied (same bookworm glibc), non-root, tht+pi
- frontend.Dockerfile: vite build (env-driven base/assetsDir) + nginx-unprivileged
- compose.yaml (embedded, omics_network ext, zero host ports) + docker-compose.dev.yml (standalone)
- deploy/sql: thoth_dwh_reader (ro) + thoth_vector_rw (rw) roles
- deploy/thothii.env.example + harness/workspaces/local.yaml (direct DWH+vector, 5438)
- scripts/docker-smoke.sh; .dockerignore; gitignore deploy secrets
- verified: both images build, core health {ok}, config check validates local.yaml
49 lines
1.5 KiB
YAML
49 lines
1.5 KiB
YAML
# ThothII — deploy embedded nel portale omics_portal (PRODUZIONE).
|
|
# core + frontend sulla rete esterna omics_network (creata dal compose del portale).
|
|
# NESSUNA porta host esposta: il backend è invisibile dall'esterno; il portale proxya via service name.
|
|
#
|
|
# Prereq: il portale deve essere up (crea omics_network):
|
|
# cd /home/chirone/omics_portal && docker compose up -d
|
|
# Poi: docker compose up -d --build
|
|
name: thothii
|
|
|
|
services:
|
|
core:
|
|
build:
|
|
context: .
|
|
dockerfile: docker/core.Dockerfile
|
|
image: thothii-core:local
|
|
env_file: [deploy/thothii.env]
|
|
environment:
|
|
HOST: 0.0.0.0
|
|
PORT: "8787"
|
|
THT_HARNESS_DIR: /app/harness
|
|
THT_BIN: /opt/venv/bin/tht
|
|
PI_BIN: pi
|
|
AUTH_MODE: ${AUTH_MODE:-none}
|
|
SETTINGS_FILE: /data/settings/settings.json
|
|
MAX_PI_PROCESSES: ${MAX_PI_PROCESSES:-4}
|
|
extra_hosts:
|
|
- "host.docker.internal:host-gateway" # Supabase :5438 + Ollama :11434 sull'host
|
|
volumes:
|
|
- /home/chirone/thothii-data:/data
|
|
- /home/chirone/thothii-data/pi-config:/home/thoth/.pi
|
|
- /home/chirone/chirone/etl/docs/evidence:/data/evidence:ro
|
|
restart: unless-stopped
|
|
networks: [omics_network]
|
|
|
|
frontend:
|
|
build:
|
|
context: .
|
|
dockerfile: docker/frontend.Dockerfile
|
|
args:
|
|
VITE_BASE: /datamart-builder/assets/
|
|
VITE_BACKEND_URL: /datamart-builder/api
|
|
image: thothii-frontend:local
|
|
restart: unless-stopped
|
|
networks: [omics_network]
|
|
|
|
networks:
|
|
omics_network:
|
|
external: true
|