api/compose.development.yml at main · treeseed-ai/api · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
services:
  api-live:
    image: node:24-bookworm-slim
    working_dir: ${TREESEED_DEVELOPMENT_WORKTREE:?TreeSeed development worktree is required}
    init: true
    read_only: true
    command: ["node", "--watch", "--import", "tsx", "src/api/support/server.ts"]
    environment:
      TREESEED_OPENBAO_ADDRESS: https://openbao:8200
      TREESEED_OPENBAO_IDENTITY_FILE: /run/openbao-client/identity.json
      NODE_EXTRA_CA_CERTS: /run/openbao-client/ca.pem
      TREESEED_CAPACITY_ENCRYPTION_KEY_FILE: /run/treeseed-keys/credentials
      TREESEED_DIAGNOSTICS_ENCRYPTION_KEY_FILE: /run/treeseed-keys/diagnostics
      HOST: 0.0.0.0
      PORT: "3000"
      NODE_ENV:
      LOCAL_DEV_MODE:
      TREESEED_ENVIRONMENT:
      TREESEED_LOCAL_DEV_MODE:
      TREESEED_COMPONENT_DATA_ROOT:
      TREESEED_API_BASE_URL:
      TREESEED_SITE_URL:
      TREESEED_API_AUTH_APPROVAL_BASE_URL:
      TREESEED_API_BOOTSTRAP_ADMIN_ALLOWLIST:
      TREESEED_MAILPIT_SMTP_HOST:
      TREESEED_MAILPIT_SMTP_PORT:
      TREESEED_TREEDX_URL: http://treedx-api:4000
      TREESEED_LOCAL_TREEDX_HOSTS: treedx-api,treedx,host.docker.internal
      TREESEED_TREEDX_JWT_ISSUER:
      TREESEED_TREEDX_JWT_AUDIENCE:
      TREESEED_DATABASE_URL_FILE: /run/treeseed/postgres/api/url
      SESSION_SECRET:
      TREESEED_TREEDX_DELEGATION_PRIVATE_KEY:
      TREESEED_TREEDX_CREDENTIAL_BROKER_ASSERTION:
      TREESEED_GITHUB_TOKEN:
      TREESEED_DEVELOPMENT_SESSION_ID:
      TREESEED_DEVELOPMENT_MODE:
    ports:
      - "127.0.0.1:3000:3000"
    volumes:
      - /run/treeseed/postgres-clients/api/api/runtime:/run/treeseed/postgres/api:ro
      - /run/treeseed/openbao/client:/run/openbao-client:ro
      - /run/treeseed/component-credentials/api:/run/treeseed-keys:ro
      - ${TREESEED_DEVELOPMENT_WORKSPACE_ROOT:?TreeSeed development workspace root is required}:${TREESEED_DEVELOPMENT_WORKSPACE_ROOT:?TreeSeed development workspace root is required}:ro
    extra_hosts:
      - "host.docker.internal:host-gateway"
    tmpfs:
      - /tmp
    networks:
      - database
      - api-private
      - edge
      - platform
    healthcheck:
      test: ["CMD", "node", "-e", "fetch('http://127.0.0.1:3000/v1/health/ready').then(r=>{if(!r.ok)process.exit(1)}).catch(()=>process.exit(1))"]
      interval: 2s
      timeout: 2s
      retries: 60
    stop_grace_period: 30s

  operations-runner-live:
    image: node:24-bookworm-slim
    working_dir: ${TREESEED_DEVELOPMENT_WORKTREE:?TreeSeed development worktree is required}
    init: true
    read_only: true
    command: ["node", "./dist/operations-runner/entrypoint.js", "run"]
    environment:
      TREESEED_OPENBAO_ADDRESS: https://openbao:8200
      TREESEED_OPENBAO_IDENTITY_FILE: /run/openbao-client/identity.json
      NODE_EXTRA_CA_CERTS: /run/openbao-client/ca.pem
      TREESEED_CAPACITY_ENCRYPTION_KEY_FILE: /run/treeseed-keys/credentials
      TREESEED_DIAGNOSTICS_ENCRYPTION_KEY_FILE: /run/treeseed-keys/diagnostics
      NODE_ENV:
      LOCAL_DEV_MODE:
      TREESEED_ENVIRONMENT:
      TREESEED_LOCAL_DEV_MODE:
      TREESEED_COMPONENT_DATA_ROOT:
      TREESEED_API_BASE_URL:
      TREESEED_TREEDX_URL: http://treedx-api:4000
      TREESEED_LOCAL_TREEDX_HOSTS: treedx-api,treedx,host.docker.internal
      TREESEED_TREEDX_JWT_ISSUER:
      TREESEED_TREEDX_JWT_AUDIENCE:
      TREESEED_CLOUDFLARE_ACCOUNT_ID:
      TREESEED_CLOUDFLARE_API_TOKEN:
      TREESEED_CONTENT_BUCKET_NAME:
      TREESEED_LIBRARY_BRANCH:
      TREESEED_R2_ACCESS_KEY_ID:
      TREESEED_R2_SECRET_ACCESS_KEY:
      TREESEED_TREEDX_DELEGATION_PRIVATE_KEY:
      TREESEED_TREEDX_CREDENTIAL_BROKER_ASSERTION:
      TREESEED_GITHUB_TOKEN:
      TREESEED_PLATFORM_RUNNER_DATA_DIR: /data/operations-runner
      TREESEED_PUBLISHED_KNOWLEDGE_ROOT: /data/published-knowledge
      TREESEED_PRIVATE_OBJECT_ROOT: /data/private-objects
      TREESEED_DEVELOPMENT_SESSION_ID:
      TREESEED_DEVELOPMENT_MODE:
    volumes:
      - /run/treeseed/openbao/client:/run/openbao-client:ro
      - /run/treeseed/component-credentials/api:/run/treeseed-keys:ro
      - ${TREESEED_DEVELOPMENT_WORKSPACE_ROOT:?TreeSeed development workspace root is required}:${TREESEED_DEVELOPMENT_WORKSPACE_ROOT:?TreeSeed development workspace root is required}:ro
      - treeseed-api-development-operations-runner-data:/data
    extra_hosts:
      - "host.docker.internal:host-gateway"
    tmpfs:
      - /tmp
    networks:
      - api-private
      - platform
    stop_grace_period: 60s

networks:
  database:
    external: true
    name: treeseed-postgres-private
  api-private:
    external: true
    name: treeseed-api_private
  edge:
    external: true
    name: treeseed-edge
  platform:
    external: true
    name: treeseed-platform

volumes:
  treeseed-api-development-operations-runner-data: