B0rbor4d
cc4c3fcecb
- Backend: Customer/Satellite Models, customer_id auf Server/Job/Audit - Satellite-API: heartbeat, poll (atomares Claiming), logs, result, scan-result, health-report - Auth via X-Api-Key (SHA-256 gehasht) - Job-Queue: pending/claimed/running/success/failed + Stale-Janitor - Batch-Trigger: ein Job pro Server, Satellite arbeitet sequenziell ab - Credentials bleiben lokal: nur symbolische credential_ref zentral - Neues Paket satellite/: Pull-Loop, WinRM/SSH/CAU/Scanner, PyInstaller-tauglich - Frontend: Kunden-Switcher, Satelliten-View, Polling statt WebSocket - Entfernt: WebSocket/Socket.io, Redis, zentrale Credentials, JobRunner - Docs: README/AGENTS/PROMPT auf neue Architektur aktualisiert
71 lines
1.7 KiB
YAML
71 lines
1.7 KiB
YAML
version: '3.8'
|
|
|
|
# Zentrale Insight-Updater-Instanz (Hub). Satelliten laufen beim Kunden,
|
|
# nicht hier - siehe satellite/.
|
|
|
|
services:
|
|
backend:
|
|
build:
|
|
context: ./backend
|
|
dockerfile: Dockerfile
|
|
target: development
|
|
container_name: insight-updater-backend
|
|
environment:
|
|
- APP_ENV=development
|
|
- DATABASE_URL=sqlite+aiosqlite:///./data/app.db
|
|
- SECRET_KEY=${SECRET_KEY:-dev-secret-change-me-32-chars-min}
|
|
- JWT_ALGORITHM=RS256
|
|
- JWT_PRIVATE_KEY_PATH=/app/keys/private.pem
|
|
- JWT_PUBLIC_KEY_PATH=/app/keys/public.pem
|
|
- LDAP_ENABLED=false
|
|
- LOG_LEVEL=DEBUG
|
|
volumes:
|
|
- ./backend:/app
|
|
- ./data:/app/data
|
|
- ./backend/keys:/app/keys:ro
|
|
ports:
|
|
- "8000:8000"
|
|
healthcheck:
|
|
test: ["CMD", "curl", "-f", "http://localhost:8000/health"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 5
|
|
start_period: 10s
|
|
networks:
|
|
- insight-updater-network
|
|
|
|
frontend:
|
|
build:
|
|
context: ./frontend
|
|
dockerfile: Dockerfile
|
|
target: development
|
|
container_name: insight-updater-frontend
|
|
environment:
|
|
- VITE_API_URL=http://localhost:8000
|
|
volumes:
|
|
- ./frontend:/app
|
|
- /app/node_modules
|
|
ports:
|
|
- "3000:3000"
|
|
depends_on:
|
|
- backend
|
|
networks:
|
|
- insight-updater-network
|
|
|
|
# PostgreSQL (optional, fuer Produktion)
|
|
# postgres:
|
|
# image: postgres:16-alpine
|
|
# container_name: insight-updater-postgres
|
|
# environment:
|
|
# - POSTGRES_DB=updater
|
|
# - POSTGRES_USER=updater
|
|
# - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
|
|
# volumes:
|
|
# - postgres-data:/var/lib/postgresql/data
|
|
# networks:
|
|
# - insight-updater-network
|
|
|
|
networks:
|
|
insight-updater-network:
|
|
driver: bridge
|