Initial commit: breakpilot-compliance - Compliance SDK Platform
Services: Admin-Compliance, Backend-Compliance, AI-Compliance-SDK, Consent-SDK, Developer-Portal, PCA-Platform, DSMS Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Benjamin Boenisch
253
breakpilot-compliance-sdk/hardware/mac-studio/setup.sh
Normal file
253
breakpilot-compliance-sdk/hardware/mac-studio/setup.sh
Normal file
@@ -0,0 +1,253 @@
|
||||
#!/bin/bash
|
||||
# BreakPilot Compliance SDK - Mac Studio Setup Script
|
||||
# Hardware: Mac Studio M2 Ultra, 512GB RAM
|
||||
# Enterprise/Airgapped deployment
|
||||
|
||||
set -e
|
||||
|
||||
echo "=============================================="
|
||||
echo "BreakPilot Compliance SDK - Mac Studio Setup"
|
||||
echo "Enterprise Edition"
|
||||
echo "=============================================="
|
||||
|
||||
# Check prerequisites
|
||||
check_prerequisites() {
|
||||
echo "Checking prerequisites..."
|
||||
|
||||
# Check Docker
|
||||
if ! command -v docker &> /dev/null; then
|
||||
echo "Error: Docker is not installed"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Check memory
|
||||
TOTAL_MEM=$(sysctl -n hw.memsize)
|
||||
TOTAL_MEM_GB=$((TOTAL_MEM / 1024 / 1024 / 1024))
|
||||
|
||||
if [ "$TOTAL_MEM_GB" -lt 256 ]; then
|
||||
echo "Warning: This setup is optimized for 512GB RAM"
|
||||
echo "Current memory: ${TOTAL_MEM_GB}GB"
|
||||
read -p "Continue anyway? (y/N) " -n 1 -r
|
||||
echo
|
||||
if [[ ! $REPLY =~ ^[Yy]$ ]]; then
|
||||
exit 1
|
||||
fi
|
||||
fi
|
||||
|
||||
# Check Ollama
|
||||
if ! command -v ollama &> /dev/null; then
|
||||
echo "Installing Ollama..."
|
||||
curl -fsSL https://ollama.com/install.sh | sh
|
||||
fi
|
||||
|
||||
echo "Prerequisites OK"
|
||||
}
|
||||
|
||||
# Configure Docker for enterprise
|
||||
configure_docker() {
|
||||
echo "Configuring Docker for enterprise deployment..."
|
||||
|
||||
echo ""
|
||||
echo "Please ensure Docker Desktop is configured with:"
|
||||
echo " - Memory: 256 GB (recommended)"
|
||||
echo " - CPUs: 20+ (recommended)"
|
||||
echo " - Disk: 500 GB (minimum)"
|
||||
echo ""
|
||||
read -p "Press Enter when Docker is configured..."
|
||||
}
|
||||
|
||||
# Install LLM models
|
||||
install_models() {
|
||||
echo "Installing LLM models..."
|
||||
|
||||
# Pull embedding model
|
||||
echo "Pulling embedding model (bge-m3)..."
|
||||
ollama pull bge-m3
|
||||
|
||||
# Pull main LLM (larger model for Mac Studio)
|
||||
echo "Pulling Qwen 2.5 40B (this will take a while)..."
|
||||
ollama pull qwen2.5:40b
|
||||
|
||||
echo "Models installed successfully"
|
||||
}
|
||||
|
||||
# Create environment file
|
||||
create_env_file() {
|
||||
echo "Creating environment file..."
|
||||
|
||||
if [ -f .env ]; then
|
||||
echo ".env file already exists"
|
||||
read -p "Overwrite? (y/N) " -n 1 -r
|
||||
echo
|
||||
if [[ ! $REPLY =~ ^[Yy]$ ]]; then
|
||||
return
|
||||
fi
|
||||
fi
|
||||
|
||||
# Generate strong secrets
|
||||
JWT_SECRET=$(openssl rand -hex 64)
|
||||
DB_PASSWORD=$(openssl rand -hex 32)
|
||||
MINIO_SECRET=$(openssl rand -hex 32)
|
||||
GRAFANA_PASSWORD=$(openssl rand -base64 24)
|
||||
|
||||
cat > .env << EOF
|
||||
# BreakPilot Compliance SDK - Enterprise Environment Configuration
|
||||
# Mac Studio M2 Ultra
|
||||
# Generated on $(date)
|
||||
|
||||
# Database
|
||||
DB_PASSWORD=${DB_PASSWORD}
|
||||
|
||||
# JWT (64 bytes for enterprise)
|
||||
JWT_SECRET=${JWT_SECRET}
|
||||
|
||||
# MinIO
|
||||
MINIO_ACCESS_KEY=breakpilot
|
||||
MINIO_SECRET_KEY=${MINIO_SECRET}
|
||||
|
||||
# Grafana
|
||||
GRAFANA_PASSWORD=${GRAFANA_PASSWORD}
|
||||
|
||||
# Maintenance
|
||||
MAINTENANCE_API_KEY=
|
||||
DEVICE_ID=mac-studio-$(hostname | tr '[:upper:]' '[:lower:]')
|
||||
EOF
|
||||
|
||||
chmod 600 .env
|
||||
echo ".env file created with secure permissions"
|
||||
}
|
||||
|
||||
# Create supporting files
|
||||
create_config_files() {
|
||||
echo "Creating configuration files..."
|
||||
|
||||
# Qdrant config
|
||||
cat > qdrant-config.yaml << 'EOF'
|
||||
storage:
|
||||
storage_path: /qdrant/storage
|
||||
snapshots_path: /qdrant/snapshots
|
||||
|
||||
service:
|
||||
host: 0.0.0.0
|
||||
http_port: 6333
|
||||
grpc_port: 6334
|
||||
|
||||
cluster:
|
||||
enabled: false
|
||||
|
||||
telemetry_disabled: true
|
||||
|
||||
optimizers_config:
|
||||
default_segment_number: 8
|
||||
max_segment_size_kb: 204800
|
||||
memmap_threshold_kb: 51200
|
||||
indexing_threshold_kb: 20000
|
||||
EOF
|
||||
|
||||
# Prometheus config
|
||||
cat > prometheus.yml << 'EOF'
|
||||
global:
|
||||
scrape_interval: 15s
|
||||
evaluation_interval: 15s
|
||||
|
||||
scrape_configs:
|
||||
- job_name: 'prometheus'
|
||||
static_configs:
|
||||
- targets: ['localhost:9090']
|
||||
|
||||
- job_name: 'api-gateway'
|
||||
static_configs:
|
||||
- targets: ['api-gateway:8080']
|
||||
|
||||
- job_name: 'compliance-engine'
|
||||
static_configs:
|
||||
- targets: ['compliance-engine:8081']
|
||||
|
||||
- job_name: 'rag-service'
|
||||
static_configs:
|
||||
- targets: ['rag-service:8082']
|
||||
|
||||
- job_name: 'postgres'
|
||||
static_configs:
|
||||
- targets: ['postgres:5432']
|
||||
|
||||
- job_name: 'redis'
|
||||
static_configs:
|
||||
- targets: ['redis:6379']
|
||||
EOF
|
||||
|
||||
# Backup script
|
||||
cat > backup.sh << 'EOF'
|
||||
#!/bin/sh
|
||||
DATE=$(date +%Y%m%d_%H%M%S)
|
||||
pg_dump -Fc compliance > /backup/compliance_${DATE}.dump
|
||||
find /backup -name "*.dump" -mtime +7 -delete
|
||||
echo "Backup completed: compliance_${DATE}.dump"
|
||||
EOF
|
||||
chmod +x backup.sh
|
||||
|
||||
# Create directories
|
||||
mkdir -p pg-backup grafana-dashboards
|
||||
|
||||
echo "Configuration files created"
|
||||
}
|
||||
|
||||
# Start services
|
||||
start_services() {
|
||||
echo "Starting services..."
|
||||
|
||||
docker compose up -d
|
||||
|
||||
echo "Waiting for services to be ready..."
|
||||
sleep 30
|
||||
|
||||
# Check health
|
||||
echo "Checking service health..."
|
||||
docker compose ps
|
||||
}
|
||||
|
||||
# Print summary
|
||||
print_summary() {
|
||||
echo ""
|
||||
echo "=============================================="
|
||||
echo "Enterprise Setup Complete!"
|
||||
echo "=============================================="
|
||||
echo ""
|
||||
echo "Services:"
|
||||
echo " API Gateway: https://localhost"
|
||||
echo " PostgreSQL: localhost:5432"
|
||||
echo " Redis: localhost:6379"
|
||||
echo " Qdrant: localhost:6333"
|
||||
echo " MinIO Console: http://localhost:9001"
|
||||
echo " Prometheus: http://localhost:9090"
|
||||
echo " Grafana: http://localhost:3000"
|
||||
echo ""
|
||||
echo "LLM Models (via Ollama on host):"
|
||||
echo " Embedding: bge-m3"
|
||||
echo " Chat: qwen2.5:40b (Enterprise)"
|
||||
echo ""
|
||||
echo "Security:"
|
||||
echo " - All secrets stored in .env (chmod 600)"
|
||||
echo " - Database backups: daily, 7-day retention"
|
||||
echo " - Monitoring: Prometheus + Grafana"
|
||||
echo ""
|
||||
echo "Commands:"
|
||||
echo " Start: docker compose up -d"
|
||||
echo " Stop: docker compose down"
|
||||
echo " Logs: docker compose logs -f [service]"
|
||||
echo " Backup: docker compose exec backup /backup.sh"
|
||||
echo ""
|
||||
}
|
||||
|
||||
# Main
|
||||
main() {
|
||||
check_prerequisites
|
||||
configure_docker
|
||||
install_models
|
||||
create_env_file
|
||||
create_config_files
|
||||
start_services
|
||||
print_summary
|
||||
}
|
||||
|
||||
main "$@"
|
||||
Reference in New Issue
Block a user