47cddcbeaf
- Add check_jwt_secret() that refuses default JWT secret when APP_ENV != development - Make CORS origins configurable via CORS_ORIGINS env var (comma-separated) - Replace hardcoded postgres credentials in docker-compose.yml with env var references - Add APP_ENV and cors_origins to config.py - Update .env.example with all required variables and documentation - Add tests for JWT startup guard and CORS configuration Closes leeworks-agents/SPARC#4 Closes leeworks-agents/SPARC#5 Closes leeworks-agents/SPARC#6 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
66 lines
1.7 KiB
YAML
66 lines
1.7 KiB
YAML
services:
|
|
postgres:
|
|
image: postgres:16-alpine
|
|
container_name: sparc-postgres
|
|
environment:
|
|
POSTGRES_USER: ${POSTGRES_USER}
|
|
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
|
|
POSTGRES_DB: ${POSTGRES_DB}
|
|
ports:
|
|
- "5432:5432"
|
|
volumes:
|
|
- postgres_data:/var/lib/postgresql/data
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER}"]
|
|
interval: 5s
|
|
timeout: 5s
|
|
retries: 5
|
|
restart: unless-stopped
|
|
|
|
init-db:
|
|
build: .
|
|
container_name: sparc-init-db
|
|
command: python scripts/init_database.py
|
|
environment:
|
|
DATABASE_URL: postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB}
|
|
depends_on:
|
|
postgres:
|
|
condition: service_healthy
|
|
restart: "no"
|
|
|
|
api:
|
|
build: .
|
|
container_name: sparc-api
|
|
command: uvicorn SPARC.api:app --host 0.0.0.0 --port 8000
|
|
environment:
|
|
API_KEY: ${API_KEY}
|
|
OPENROUTER_API_KEY: ${OPENROUTER_API_KEY}
|
|
DATABASE_URL: postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB}
|
|
USE_CACHE: "true"
|
|
JWT_SECRET: ${JWT_SECRET:-sparc-secret-key-change-in-production}
|
|
CORS_ORIGINS: ${CORS_ORIGINS:-}
|
|
APP_ENV: ${APP_ENV:-development}
|
|
ROOT_PATH: /api
|
|
ports:
|
|
- "8000:8000"
|
|
depends_on:
|
|
postgres:
|
|
condition: service_healthy
|
|
init-db:
|
|
condition: service_completed_successfully
|
|
volumes:
|
|
- ./patents:/app/patents
|
|
restart: unless-stopped
|
|
|
|
dashboard:
|
|
build: ./frontend
|
|
container_name: sparc-dashboard
|
|
ports:
|
|
- "8080:80"
|
|
depends_on:
|
|
- api
|
|
restart: unless-stopped
|
|
|
|
volumes:
|
|
postgres_data:
|