feat: harden community production foundation through story 1.5
This commit is contained in:
@@ -34,9 +34,10 @@ services:
|
||||
timeout: 5s
|
||||
retries: 5
|
||||
|
||||
admin-api:
|
||||
migrate:
|
||||
image: ${CRANK_ADMIN_API_IMAGE:-git.itexp.me/bsodfather/crank-community-admin-api:main}
|
||||
restart: unless-stopped
|
||||
command: ["crank-migrate", "apply"]
|
||||
restart: "no"
|
||||
depends_on:
|
||||
postgres:
|
||||
condition: service_healthy
|
||||
@@ -47,6 +48,29 @@ services:
|
||||
POSTGRES_DB: ${POSTGRES_DB:-crank}
|
||||
POSTGRES_USER: ${POSTGRES_USER:-crank}
|
||||
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-crank}
|
||||
CRANK_DATABASE_URL: ${CRANK_DATABASE_URL:-}
|
||||
POSTGRES_MAX_CONNECTIONS: ${POSTGRES_MAX_CONNECTIONS:-20}
|
||||
POSTGRES_MIN_CONNECTIONS: ${POSTGRES_MIN_CONNECTIONS:-2}
|
||||
POSTGRES_ACQUIRE_TIMEOUT_MS: ${POSTGRES_ACQUIRE_TIMEOUT_MS:-5000}
|
||||
POSTGRES_IDLE_TIMEOUT_MS: ${POSTGRES_IDLE_TIMEOUT_MS:-600000}
|
||||
POSTGRES_MAX_LIFETIME_MS: ${POSTGRES_MAX_LIFETIME_MS:-1800000}
|
||||
|
||||
admin-api:
|
||||
image: ${CRANK_ADMIN_API_IMAGE:-git.itexp.me/bsodfather/crank-community-admin-api:main}
|
||||
restart: unless-stopped
|
||||
depends_on:
|
||||
migrate:
|
||||
condition: service_completed_successfully
|
||||
postgres:
|
||||
condition: service_healthy
|
||||
required: false
|
||||
environment:
|
||||
POSTGRES_HOST: ${POSTGRES_HOST:-postgres}
|
||||
POSTGRES_PORT: ${POSTGRES_PORT:-5432}
|
||||
POSTGRES_DB: ${POSTGRES_DB:-crank}
|
||||
POSTGRES_USER: ${POSTGRES_USER:-crank}
|
||||
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-crank}
|
||||
CRANK_DATABASE_URL: ${CRANK_DATABASE_URL:-}
|
||||
POSTGRES_MAX_CONNECTIONS: ${POSTGRES_MAX_CONNECTIONS:-20}
|
||||
POSTGRES_MIN_CONNECTIONS: ${POSTGRES_MIN_CONNECTIONS:-2}
|
||||
POSTGRES_ACQUIRE_TIMEOUT_MS: ${POSTGRES_ACQUIRE_TIMEOUT_MS:-5000}
|
||||
@@ -56,12 +80,11 @@ services:
|
||||
CRANK_ADMIN_BIND: ${CRANK_ADMIN_BIND:-0.0.0.0:3001}
|
||||
CRANK_CACHE_BACKEND: ${CRANK_CACHE_BACKEND:-memory}
|
||||
CRANK_CACHE_URL: ${CRANK_CACHE_URL:-}
|
||||
CRANK_CACHE_DEFAULT_TTL_MS: ${CRANK_CACHE_DEFAULT_TTL_MS:-}
|
||||
CRANK_ADMIN_RATE_LIMIT_RPS: ${CRANK_ADMIN_RATE_LIMIT_RPS:-30}
|
||||
CRANK_ADMIN_RATE_LIMIT_BURST: ${CRANK_ADMIN_RATE_LIMIT_BURST:-60}
|
||||
CRANK_RUNTIME_MAX_CONCURRENT_UNARY: ${CRANK_RUNTIME_MAX_CONCURRENT_UNARY:-64}
|
||||
CRANK_ENVIRONMENT: ${CRANK_ENVIRONMENT:-production}
|
||||
CRANK_LOG_LEVEL: ${CRANK_LOG_LEVEL:-info}
|
||||
CRANK_LOG_LEVEL: ${CRANK_LOG_LEVEL:-}
|
||||
CRANK_SENTRY_DSN: ${CRANK_SENTRY_DSN:-}
|
||||
CRANK_METRICS_ENABLED: ${CRANK_METRICS_ENABLED:-true}
|
||||
CRANK_ADMIN_METRICS_BIND: ${CRANK_ADMIN_METRICS_BIND:-127.0.0.1:9464}
|
||||
@@ -106,6 +129,8 @@ services:
|
||||
image: ${CRANK_MCP_SERVER_IMAGE:-git.itexp.me/bsodfather/crank-community-mcp-server:main}
|
||||
restart: unless-stopped
|
||||
depends_on:
|
||||
migrate:
|
||||
condition: service_completed_successfully
|
||||
postgres:
|
||||
condition: service_healthy
|
||||
required: false
|
||||
@@ -115,23 +140,22 @@ services:
|
||||
POSTGRES_DB: ${POSTGRES_DB:-crank}
|
||||
POSTGRES_USER: ${POSTGRES_USER:-crank}
|
||||
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-crank}
|
||||
CRANK_DATABASE_URL: ${CRANK_DATABASE_URL:-}
|
||||
POSTGRES_MAX_CONNECTIONS: ${POSTGRES_MAX_CONNECTIONS:-20}
|
||||
POSTGRES_MIN_CONNECTIONS: ${POSTGRES_MIN_CONNECTIONS:-2}
|
||||
POSTGRES_ACQUIRE_TIMEOUT_MS: ${POSTGRES_ACQUIRE_TIMEOUT_MS:-5000}
|
||||
POSTGRES_IDLE_TIMEOUT_MS: ${POSTGRES_IDLE_TIMEOUT_MS:-600000}
|
||||
POSTGRES_MAX_LIFETIME_MS: ${POSTGRES_MAX_LIFETIME_MS:-1800000}
|
||||
CRANK_STORAGE_ROOT: ${CRANK_STORAGE_ROOT:-/var/lib/crank/storage}
|
||||
CRANK_MCP_BIND: ${CRANK_MCP_BIND:-0.0.0.0:3002}
|
||||
CRANK_MCP_REFRESH_MS: ${CRANK_MCP_REFRESH_MS:-5000}
|
||||
CRANK_CACHE_BACKEND: ${CRANK_CACHE_BACKEND:-memory}
|
||||
CRANK_CACHE_URL: ${CRANK_CACHE_URL:-}
|
||||
CRANK_CACHE_DEFAULT_TTL_MS: ${CRANK_CACHE_DEFAULT_TTL_MS:-}
|
||||
CRANK_MCP_RATE_LIMIT_RPS: ${CRANK_MCP_RATE_LIMIT_RPS:-60}
|
||||
CRANK_MCP_RATE_LIMIT_BURST: ${CRANK_MCP_RATE_LIMIT_BURST:-120}
|
||||
CRANK_RUNTIME_MAX_CONCURRENT_UNARY: ${CRANK_RUNTIME_MAX_CONCURRENT_UNARY:-64}
|
||||
CRANK_RUNTIME_MAX_CONCURRENT_SESSIONS: ${CRANK_RUNTIME_MAX_CONCURRENT_SESSIONS:-16}
|
||||
CRANK_ENVIRONMENT: ${CRANK_ENVIRONMENT:-production}
|
||||
CRANK_LOG_LEVEL: ${CRANK_LOG_LEVEL:-info}
|
||||
CRANK_LOG_LEVEL: ${CRANK_LOG_LEVEL:-}
|
||||
CRANK_SENTRY_DSN: ${CRANK_SENTRY_DSN:-}
|
||||
CRANK_METRICS_ENABLED: ${CRANK_METRICS_ENABLED:-true}
|
||||
CRANK_MCP_METRICS_BIND: ${CRANK_MCP_METRICS_BIND:-127.0.0.1:9465}
|
||||
@@ -153,8 +177,6 @@ services:
|
||||
CRANK_OUTBOUND_ALLOWED_HOSTS: ${CRANK_OUTBOUND_ALLOWED_HOSTS:-}
|
||||
CRANK_OUTBOUND_DENIED_HOSTS: ${CRANK_OUTBOUND_DENIED_HOSTS:-}
|
||||
CRANK_OUTBOUND_MAX_RESPONSE_BYTES: ${CRANK_OUTBOUND_MAX_RESPONSE_BYTES:-4194304}
|
||||
volumes:
|
||||
- artifact_storage:${CRANK_STORAGE_ROOT:-/var/lib/crank/storage}
|
||||
ports:
|
||||
- "${CRANK_PUBLISH_BIND:-127.0.0.1}:${CRANK_MCP_PUBLISH_PORT:-3002}:3002"
|
||||
healthcheck:
|
||||
|
||||
Reference in New Issue
Block a user