fix: migrate deployment from Hetzner to Coolify (#1)
All checks were successful
CI/CD / go-lint (push) Has been skipped
CI/CD / python-lint (push) Has been skipped
CI/CD / nodejs-lint (push) Has been skipped
CI/CD / test-go-ai-compliance (push) Successful in 34s
CI/CD / test-python-backend-compliance (push) Successful in 39s
CI/CD / test-python-document-crawler (push) Successful in 24s
CI/CD / test-python-dsms-gateway (push) Successful in 19s
CI/CD / validate-canonical-controls (push) Successful in 13s
CI/CD / Deploy (push) Successful in 2s
All checks were successful
CI/CD / go-lint (push) Has been skipped
CI/CD / python-lint (push) Has been skipped
CI/CD / nodejs-lint (push) Has been skipped
CI/CD / test-go-ai-compliance (push) Successful in 34s
CI/CD / test-python-backend-compliance (push) Successful in 39s
CI/CD / test-python-document-crawler (push) Successful in 24s
CI/CD / test-python-dsms-gateway (push) Successful in 19s
CI/CD / validate-canonical-controls (push) Successful in 13s
CI/CD / Deploy (push) Successful in 2s
## Summary - Add Coolify deployment configuration (docker-compose, healthchecks, network setup) - Replace deploy-hetzner CI job with Coolify webhook deploy - Externalize postgres, qdrant, S3 for Coolify environment ## All changes since branch creation - Coolify docker-compose with Traefik labels and healthchecks - CI pipeline: deploy-hetzner → deploy-coolify (simple webhook curl) - SQLAlchemy 2.x text() compatibility fixes - Alpine-compatible Dockerfile fixes Co-authored-by: Sharang Parnerkar <parnerkarsharang@gmail.com> Reviewed-on: #1
This commit was merged in pull request #1.
This commit is contained in:
272
docker-compose.coolify.yml
Normal file
272
docker-compose.coolify.yml
Normal file
@@ -0,0 +1,272 @@
|
||||
# =========================================================
|
||||
# BreakPilot Compliance — Compliance SDK Platform (Coolify)
|
||||
# =========================================================
|
||||
# Requires: breakpilot-core must be running
|
||||
# Deployed via Coolify. SSL termination handled by Traefik.
|
||||
# External services (managed separately in Coolify):
|
||||
# - PostgreSQL, Qdrant, S3-compatible storage
|
||||
# =========================================================
|
||||
|
||||
networks:
|
||||
breakpilot-network:
|
||||
external: true
|
||||
name: breakpilot-network
|
||||
coolify:
|
||||
external: true
|
||||
name: coolify
|
||||
|
||||
volumes:
|
||||
dsms_data:
|
||||
|
||||
services:
|
||||
|
||||
# =========================================================
|
||||
# FRONTEND
|
||||
# =========================================================
|
||||
admin-compliance:
|
||||
build:
|
||||
context: ./admin-compliance
|
||||
dockerfile: Dockerfile
|
||||
args:
|
||||
NEXT_PUBLIC_API_URL: ${NEXT_PUBLIC_API_URL:-https://api-compliance.breakpilot.ai}
|
||||
NEXT_PUBLIC_SDK_URL: ${NEXT_PUBLIC_SDK_URL:-https://sdk.breakpilot.ai}
|
||||
container_name: bp-compliance-admin
|
||||
labels:
|
||||
- "traefik.docker.network=coolify"
|
||||
expose:
|
||||
- "3000"
|
||||
environment:
|
||||
NODE_ENV: production
|
||||
DATABASE_URL: ${COMPLIANCE_DATABASE_URL}
|
||||
BACKEND_URL: http://backend-compliance:8002
|
||||
CONSENT_SERVICE_URL: http://bp-core-consent-service:8081
|
||||
SDK_URL: http://ai-compliance-sdk:8090
|
||||
OLLAMA_URL: ${OLLAMA_URL:-}
|
||||
COMPLIANCE_LLM_MODEL: ${COMPLIANCE_LLM_MODEL:-}
|
||||
depends_on:
|
||||
backend-compliance:
|
||||
condition: service_started
|
||||
healthcheck:
|
||||
test: ["CMD", "wget", "-q", "--spider", "http://127.0.0.1:3000/"]
|
||||
interval: 30s
|
||||
timeout: 10s
|
||||
start_period: 30s
|
||||
retries: 3
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- breakpilot-network
|
||||
- coolify
|
||||
|
||||
developer-portal:
|
||||
build:
|
||||
context: ./developer-portal
|
||||
dockerfile: Dockerfile
|
||||
container_name: bp-compliance-developer-portal
|
||||
labels:
|
||||
- "traefik.docker.network=coolify"
|
||||
expose:
|
||||
- "3000"
|
||||
environment:
|
||||
NODE_ENV: production
|
||||
healthcheck:
|
||||
test: ["CMD", "wget", "-q", "--spider", "http://127.0.0.1:3000/"]
|
||||
interval: 30s
|
||||
timeout: 10s
|
||||
start_period: 30s
|
||||
retries: 3
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- breakpilot-network
|
||||
- coolify
|
||||
|
||||
# =========================================================
|
||||
# BACKEND
|
||||
# =========================================================
|
||||
backend-compliance:
|
||||
build:
|
||||
context: ./backend-compliance
|
||||
dockerfile: Dockerfile
|
||||
container_name: bp-compliance-backend
|
||||
labels:
|
||||
- "traefik.docker.network=coolify"
|
||||
expose:
|
||||
- "8002"
|
||||
environment:
|
||||
PORT: 8002
|
||||
DATABASE_URL: ${COMPLIANCE_DATABASE_URL}
|
||||
JWT_SECRET: ${JWT_SECRET}
|
||||
ENVIRONMENT: production
|
||||
CONSENT_SERVICE_URL: http://bp-core-consent-service:8081
|
||||
VALKEY_URL: redis://bp-core-valkey:6379/0
|
||||
SESSION_TTL_HOURS: ${SESSION_TTL_HOURS:-24}
|
||||
COMPLIANCE_LLM_PROVIDER: ${COMPLIANCE_LLM_PROVIDER:-anthropic}
|
||||
SELF_HOSTED_LLM_URL: ${SELF_HOSTED_LLM_URL:-}
|
||||
SELF_HOSTED_LLM_MODEL: ${SELF_HOSTED_LLM_MODEL:-}
|
||||
COMPLIANCE_LLM_MAX_TOKENS: ${COMPLIANCE_LLM_MAX_TOKENS:-4096}
|
||||
COMPLIANCE_LLM_TEMPERATURE: ${COMPLIANCE_LLM_TEMPERATURE:-0.3}
|
||||
COMPLIANCE_LLM_TIMEOUT: ${COMPLIANCE_LLM_TIMEOUT:-120}
|
||||
ANTHROPIC_API_KEY: ${ANTHROPIC_API_KEY:-}
|
||||
SMTP_HOST: ${SMTP_HOST}
|
||||
SMTP_PORT: ${SMTP_PORT:-587}
|
||||
SMTP_USERNAME: ${SMTP_USERNAME}
|
||||
SMTP_PASSWORD: ${SMTP_PASSWORD}
|
||||
SMTP_FROM_NAME: ${SMTP_FROM_NAME:-BreakPilot Compliance}
|
||||
SMTP_FROM_ADDR: ${SMTP_FROM_ADDR:-compliance@breakpilot.ai}
|
||||
RAG_SERVICE_URL: http://bp-core-rag-service:8097
|
||||
healthcheck:
|
||||
test: ["CMD", "curl", "-f", "http://127.0.0.1:8002/health"]
|
||||
interval: 30s
|
||||
timeout: 10s
|
||||
start_period: 15s
|
||||
retries: 3
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- breakpilot-network
|
||||
- coolify
|
||||
|
||||
# =========================================================
|
||||
# SDK SERVICES
|
||||
# =========================================================
|
||||
ai-compliance-sdk:
|
||||
build:
|
||||
context: ./ai-compliance-sdk
|
||||
dockerfile: Dockerfile
|
||||
container_name: bp-compliance-ai-sdk
|
||||
labels:
|
||||
- "traefik.docker.network=coolify"
|
||||
expose:
|
||||
- "8090"
|
||||
environment:
|
||||
PORT: 8090
|
||||
ENVIRONMENT: production
|
||||
DATABASE_URL: ${COMPLIANCE_DATABASE_URL}
|
||||
JWT_SECRET: ${JWT_SECRET}
|
||||
LLM_PROVIDER: ${COMPLIANCE_LLM_PROVIDER:-anthropic}
|
||||
LLM_FALLBACK_PROVIDER: ${LLM_FALLBACK_PROVIDER:-}
|
||||
OLLAMA_URL: ${OLLAMA_URL:-}
|
||||
OLLAMA_DEFAULT_MODEL: ${OLLAMA_DEFAULT_MODEL:-}
|
||||
ANTHROPIC_API_KEY: ${ANTHROPIC_API_KEY:-}
|
||||
ANTHROPIC_DEFAULT_MODEL: ${ANTHROPIC_DEFAULT_MODEL:-claude-sonnet-4-5-20250929}
|
||||
PII_REDACTION_ENABLED: ${PII_REDACTION_ENABLED:-true}
|
||||
PII_REDACTION_LEVEL: ${PII_REDACTION_LEVEL:-standard}
|
||||
AUDIT_RETENTION_DAYS: ${AUDIT_RETENTION_DAYS:-365}
|
||||
AUDIT_LOG_PROMPTS: ${AUDIT_LOG_PROMPTS:-true}
|
||||
ALLOWED_ORIGINS: "*"
|
||||
TTS_SERVICE_URL: http://compliance-tts-service:8095
|
||||
QDRANT_URL: ${QDRANT_URL}
|
||||
QDRANT_API_KEY: ${QDRANT_API_KEY:-}
|
||||
healthcheck:
|
||||
test: ["CMD", "wget", "-q", "--spider", "http://127.0.0.1:8090/health"]
|
||||
interval: 30s
|
||||
timeout: 3s
|
||||
start_period: 10s
|
||||
retries: 3
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- breakpilot-network
|
||||
- coolify
|
||||
|
||||
# =========================================================
|
||||
# TTS SERVICE (Piper TTS + FFmpeg)
|
||||
# =========================================================
|
||||
compliance-tts-service:
|
||||
build:
|
||||
context: ./compliance-tts-service
|
||||
dockerfile: Dockerfile
|
||||
container_name: bp-compliance-tts
|
||||
expose:
|
||||
- "8095"
|
||||
environment:
|
||||
MINIO_ENDPOINT: ${S3_ENDPOINT}
|
||||
MINIO_ACCESS_KEY: ${S3_ACCESS_KEY}
|
||||
MINIO_SECRET_KEY: ${S3_SECRET_KEY}
|
||||
MINIO_SECURE: ${S3_SECURE:-true}
|
||||
PIPER_MODEL_PATH: /app/models/de_DE-thorsten-high.onnx
|
||||
healthcheck:
|
||||
test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8095/health')"]
|
||||
interval: 30s
|
||||
timeout: 10s
|
||||
start_period: 60s
|
||||
retries: 3
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- breakpilot-network
|
||||
|
||||
# =========================================================
|
||||
# DATA SOVEREIGNTY
|
||||
# =========================================================
|
||||
dsms-node:
|
||||
build:
|
||||
context: ./dsms-node
|
||||
dockerfile: Dockerfile
|
||||
container_name: bp-compliance-dsms-node
|
||||
expose:
|
||||
- "4001"
|
||||
- "5001"
|
||||
- "8080"
|
||||
volumes:
|
||||
- dsms_data:/data/ipfs
|
||||
environment:
|
||||
IPFS_PROFILE: server
|
||||
healthcheck:
|
||||
test: ["CMD-SHELL", "ipfs id"]
|
||||
interval: 30s
|
||||
timeout: 10s
|
||||
start_period: 30s
|
||||
retries: 3
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- breakpilot-network
|
||||
|
||||
dsms-gateway:
|
||||
build:
|
||||
context: ./dsms-gateway
|
||||
dockerfile: Dockerfile
|
||||
container_name: bp-compliance-dsms-gateway
|
||||
expose:
|
||||
- "8082"
|
||||
environment:
|
||||
IPFS_API_URL: http://dsms-node:5001
|
||||
IPFS_GATEWAY_URL: http://dsms-node:8080
|
||||
JWT_SECRET: ${JWT_SECRET}
|
||||
depends_on:
|
||||
dsms-node:
|
||||
condition: service_healthy
|
||||
healthcheck:
|
||||
test: ["CMD", "curl", "-f", "http://127.0.0.1:8082/health"]
|
||||
interval: 30s
|
||||
timeout: 10s
|
||||
start_period: 15s
|
||||
retries: 3
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- breakpilot-network
|
||||
|
||||
# =========================================================
|
||||
# DOCUMENT CRAWLER & AUTO-ONBOARDING
|
||||
# =========================================================
|
||||
document-crawler:
|
||||
build:
|
||||
context: ./document-crawler
|
||||
dockerfile: Dockerfile
|
||||
container_name: bp-compliance-document-crawler
|
||||
expose:
|
||||
- "8098"
|
||||
environment:
|
||||
PORT: 8098
|
||||
DATABASE_URL: ${COMPLIANCE_DATABASE_URL}
|
||||
LLM_GATEWAY_URL: http://ai-compliance-sdk:8090
|
||||
DSMS_GATEWAY_URL: http://dsms-gateway:8082
|
||||
CRAWL_BASE_PATH: /data/crawl
|
||||
MAX_FILE_SIZE_MB: 50
|
||||
volumes:
|
||||
- /tmp/breakpilot-crawl-data:/data/crawl:ro
|
||||
healthcheck:
|
||||
test: ["CMD", "curl", "-f", "http://127.0.0.1:8098/health"]
|
||||
interval: 30s
|
||||
timeout: 10s
|
||||
start_period: 15s
|
||||
retries: 3
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- breakpilot-network
|
||||
Reference in New Issue
Block a user