Compare commits

..

16 Commits

Author SHA1 Message Date
5aa21876da feat: rename tak to int, add worldmonitor stack 2026-05-31 11:22:52 -04:00
3d90f57e7f Merge pull request 'fix: move run-multi-gateways.sh into build context, bake into image' (#50) from fix/multi-gateway-path into master
Some checks failed
Build Hermes agent / build (push) Has been cancelled
Build ollama (gfx906) / build (push) Has been cancelled
Reviewed-on: #50
2026-05-23 02:12:51 +00:00
c1cd9d31e9 fix: move run-multi-gateways.sh into ai/hermes/ and bake into image
Some checks failed
Build Hermes agent / build (pull_request) Has been cancelled
Build ollama (gfx906) / build (pull_request) Has been cancelled
2026-05-22 21:37:01 -04:00
5765dc6004 Merge remote-tracking branch 'origin/fix/hermes-build' 2026-05-22 21:13:46 -04:00
e8075fb71b fix: also clear API_SERVER_KEY for profile gateways
Line 1521 in gateway/config.py: if api_server_enabled or api_server_key:
The compose.yml sets API_SERVER_KEY=hermes_local_key, which was enough
to enable the API server even with API_SERVER_ENABLED=false.
2026-05-22 13:53:53 -04:00
645d519030 fix: use env to force API_SERVER_ENABLED=false in multi-gateway launcher
Shell prefix didn't work with nohup+gosu chain - Docker compose
env var API_SERVER_ENABLED=true leaked through. Using 'env'
command guarantees the override is in the child process env.
2026-05-22 13:52:05 -04:00
146add2a64 fix: use full hermes path and gosu in multi-gateway launcher
- Use /opt/hermes/.venv/bin/hermes (full path) — not on PATH
  before entrypoint.sh sources the venv
- Wrap with gosu hermes to avoid root guard in gateway run
- Add error check if hermes binary doesn't exist
2026-05-22 13:34:12 -04:00
eb3795d9e3 Merge remote-tracking branch 'origin/fix/hermes-build' 2026-05-22 13:26:59 -04:00
ef6e0e57b6 Merge remote-tracking branch 'origin/fix/remove-venv-mount' 2026-05-22 13:25:59 -04:00
d8a1ebcd96 fix: add missing command: gateway run to hermes service
Without this,  is empty and entrypoint.sh runs bare 'hermes'
which defaults to interactive chat mode. With a non-TTY stdin
this exits immediately with prompt_toolkit's 'Input is not a
terminal' warning, causing a container restart loop.

The profile gateways (run-multi-gateways.sh) were unaffected
because the script passes 'gateway run' explicitly.
2026-05-22 13:23:08 -04:00
45a224eb7f fix: add missing command: gateway run to hermes service
Without this,  is empty and entrypoint.sh runs bare 'hermes'
which defaults to interactive chat mode. With a non-TTY stdin
this exits immediately with prompt_toolkit's 'Input is not a
terminal' warning, causing a container restart loop.

The profile gateways (run-multi-gateways.sh) were unaffected
because the script passes 'gateway run' explicitly.
2026-05-22 13:22:58 -04:00
46f3b23a3f Merge pull request 'fix: remove venv volume mount conflicting with entrypoint.sh' (#49) from fix/remove-venv-mount into master
Some checks failed
Build Hermes agent / build (push) Has been cancelled
Build ollama (gfx906) / build (push) Has been cancelled
Reviewed-on: #49
2026-05-22 17:05:52 +00:00
567850bd13 feat: bake Matrix bridge deps into Docker image instead of volume mount
Some checks failed
Build Hermes agent / build (pull_request) Has been cancelled
Build ollama (gfx906) / build (pull_request) Has been cancelled
- Add libolm-dev system dep (required by mautrix[encryption])
- Add mautrix[encryption] + openai pip packages to build
- These were previously installed inline at container startup and
  persisted via the fragile venv volume mount (now removed)
2026-05-22 13:04:49 -04:00
bce336c4fd feat: bake Matrix bridge deps into Docker image instead of volume mount
- Add libolm-dev system dep (required by mautrix[encryption])
- Add mautrix[encryption] + openai pip packages to build
- These were previously installed inline at container startup and
  persisted via the fragile venv volume mount (now removed)
2026-05-22 13:04:43 -04:00
e4117cd3d5 fix: remove venv volume mount conflicting with entrypoint.sh
The volume mount at /mnt/HoardingCow_docker_data/Hermes/venv overrides the
container's built .venv with an empty or stale host directory, causing
entrypoint.sh line 62 to fail on 'source .venv/bin/activate' (set -e).

The Docker image already builds a complete venv — no need to persist it.
2026-05-22 13:04:08 -04:00
2d59bb44c3 fix: remove venv volume mount conflicting with upstream entrypoint.sh
Some checks failed
Build Hermes agent / build (pull_request) Has been cancelled
Build ollama (gfx906) / build (pull_request) Has been cancelled
The volume mount /mnt/HoardingCow_docker_data/Hermes/venv overrides the
container's built-in .venv with whatever is on the host. On a fresh start
or after a clean build, an empty/missing venv directory causes entrypoint.sh
line 62 (source .venv/bin/activate) to fail with set -e.

The Docker image already builds a complete venv — persisting it on the host
is unnecessary and fragile.
2026-05-22 13:03:51 -04:00
10 changed files with 280 additions and 341 deletions

13
.gitignore vendored Normal file
View File

@@ -0,0 +1,13 @@
# Temp/scratch files — never commit these
*.bak
*.swp
*.tmp
*~
scratch/
.env
.env.local
tmp/
temp/
replace_compose.py
entrypoint-*.sh
copy_*.txt

View File

@@ -32,7 +32,7 @@ services:
- default
container_name: hermes
entrypoint: ["/bin/bash", "-c",
"bash /opt/data/hermes-tools/install.sh && bash /opt/data/hermes-tools/run-multi-gateways.sh && exec /usr/bin/tini -g -- /opt/hermes/docker/entrypoint.sh \"$@\"",
"bash /opt/data/hermes-tools/install.sh && bash /usr/local/bin/run-multi-gateways.sh && exec /usr/bin/tini -g -- /opt/hermes/docker/entrypoint.sh \"$@\"",
"hermes-entrypoint"]
restart: always
# Gateway run enables the internal API server on port 8642
@@ -72,8 +72,6 @@ services:
networks:
- ai_backend
- ai_net
depends_on:
- honcho
labels:
- "traefik.enable=true"
- "traefik.docker.network=ai_net"
@@ -160,84 +158,6 @@ services:
- "303"
- "26"
# --- Honcho: AI-native user modeling ---
honcho:
build: ./honcho
container_name: honcho
restart: unless-stopped
ports:
- "127.0.0.1:8000:8000"
environment:
- DB_CONNECTION_URI=postgresql+psycopg://honcho:honcho_pass@honcho-db:5432/honcho
- CACHE_URL=redis://honcho-redis:6379/0
- CACHE_ENABLED=true
volumes:
- /mnt/HoardingCow_docker_data/Honcho/data:/app/data
networks:
- ai_backend
- ai_net
depends_on:
honcho-db:
condition: service_healthy
honcho-redis:
condition: service_healthy
labels:
- "traefik.enable=true"
# Router for HTTP + redirect to HTTPS
- "traefik.http.routers.honcho-http.rule=Host(`honcho.lazyworkhorse.net`)"
- "traefik.http.routers.honcho-http.entrypoints=web"
- "traefik.http.routers.honcho-http.middlewares=redirect-to-https"
# Router for HTTPS with TLS — protected by Authelia
- "traefik.http.routers.honcho-https.rule=Host(`honcho.lazyworkhorse.net`)"
- "traefik.http.routers.honcho-https.entrypoints=websecure"
- "traefik.http.routers.honcho-https.tls=true"
- "traefik.http.routers.honcho-https.tls.certresolver=njalla"
- "traefik.http.routers.honcho-https.middlewares=hermes-auth"
# Service Loadbalancer
- "traefik.http.services.honcho.loadbalancer.server.port=8000"
honcho-db:
image: pgvector/pgvector:pg15
container_name: honcho-db
restart: unless-stopped
ports:
- "127.0.0.1:5432:5432"
command: ["postgres", "-c", "max_connections=200"]
environment:
- POSTGRES_DB=honcho
- POSTGRES_USER=honcho
- POSTGRES_PASSWORD=honcho_pass
- PGDATA=/var/lib/postgresql/data/pgdata
volumes:
- /mnt/HoardingCow_docker_data/Honcho/postgres:/var/lib/postgresql/data
- ./honcho/init-db.sql:/docker-entrypoint-initdb.d/init.sql:ro
networks:
- ai_backend
healthcheck:
test: ["CMD-SHELL", "pg_isready -U honcho -d honcho"]
interval: 5s
timeout: 5s
retries: 5
honcho-redis:
image: redis:8
container_name: honcho-redis
restart: unless-stopped
ports:
- "127.0.0.1:6379:6379"
volumes:
- /mnt/HoardingCow_docker_data/Honcho/redis:/data
networks:
- ai_backend
healthcheck:
test: ["CMD-SHELL", "redis-cli ping"]
interval: 5s
timeout: 5s
retries: 5
networks:
ai_net:
external: true

View File

@@ -43,8 +43,6 @@ RUN apt-get update && \
# ---------- UV ----------
COPY --chmod=0755 --from=ghcr.io/astral-sh/uv:latest /uv /usr/local/bin/
WORKDIR /opt/hermes
# ---------- Matrix bridge + extra pip deps ----------
# Previously installed inline at container startup and persisted via volume mount.
# Now baked into the image so the fragile venv volume mount can be removed.
@@ -78,6 +76,10 @@ os.remove(tgz)
print('himalaya v1.2.0 installed')
PYEOF
# ---------- Install multi-gateway launcher ----------
# Launches one gateway process per profile (HERMES_PROFILES env var)
COPY --chmod=0755 run-multi-gateways.sh /usr/local/bin/run-multi-gateways.sh
# ---------- Runtime ----------
USER hermes
ENV HERMES_HOME=/opt/data

32
ai/hermes/run-multi-gateways.sh Executable file
View File

@@ -0,0 +1,32 @@
#!/bin/bash
# Multi-gateway launcher for HERMES_PROFILES env var.
# Reads comma-separated profile names, spawns one gateway per profile.
# Designed to run before the main entrypoint — gateways run in background.
set -e
if [ -z "${HERMES_PROFILES}" ]; then
echo "HERMES_PROFILES not set — skipping multi-gateway launch"
exit 0
fi
# Source venv to make 'hermes' available (entrypoint.sh sources it later,
# but we need it NOW for the background gateways)
HERMES_BIN="/opt/hermes/.venv/bin/hermes"
if [ ! -x "$HERMES_BIN" ]; then
echo "ERROR: hermes binary not found at $HERMES_BIN"
exit 1
fi
mkdir -p /opt/data/logs
IFS=',' read -ra PROFILES <<< "${HERMES_PROFILES}"
for profile in "${PROFILES[@]}"; do
profile="$(echo "${profile}" | xargs)" # trim whitespace
[ -z "${profile}" ] && continue
echo "Starting gateway for profile: ${profile}"
nohup env API_SERVER_ENABLED=false API_SERVER_KEY= gosu hermes "$HERMES_BIN" --profile "${profile}" gateway run \
>> "/opt/data/logs/gateway-${profile}.log" 2>&1 &
done
echo "All gateways launched: ${HERMES_PROFILES}"

View File

@@ -1,42 +0,0 @@
# build stage — fetches and builds Honcho from source
# Using buildkit cache mounts for speed across rebuilds
FROM python:3.13-slim-bookworm AS builder
RUN apt-get update && \
apt-get install -y --no-install-recommends git && \
rm -rf /var/lib/apt/lists/*
COPY --from=ghcr.io/astral-sh/uv:0.9.24 /uv /bin/uv
# Clone Honcho at a pinned commit for reproducibility
ARG HONCHO_REPO=https://github.com/plastic-labs/honcho
ARG HONCHO_REF=main
RUN git clone --depth 1 --branch ${HONCHO_REF} ${HONCHO_REPO} /app
WORKDIR /app
ENV UV_COMPILE_BYTECODE=1
ENV UV_LINK_MODE=copy
RUN --mount=type=cache,target=/root/.cache/uv \
uv sync --frozen --no-group dev
# --- runtime stage ---
FROM python:3.13-slim-bookworm
RUN groupadd --system app && \
useradd --system --gid app --create-home app
COPY --from=builder /app /app
COPY --from=builder /root/.cache/uv /root/.cache/uv
WORKDIR /app
ENV PATH="/app/.venv/bin:$PATH"
ENV HOME=/app
COPY --chown=app:app config.toml /app/config.toml
USER app
EXPOSE 8000
CMD ["fastapi", "run", "--host", "0.0.0.0", "src/main.py"]

View File

@@ -1,117 +0,0 @@
[app]
LOG_LEVEL = "INFO"
MAX_MESSAGE_SIZE = 25000
EMBED_MESSAGES = true
NAMESPACE = "honcho"
[db]
CONNECTION_URI = "postgresql+psycopg://honcho:honcho_pass@honcho-db:5432/honcho"
SCHEMA = "public"
POOL_SIZE = 10
MAX_OVERFLOW = 20
[auth]
USE_AUTH = false
[sentry]
ENABLED = false
[telemetry]
ENABLED = false
[webhook]
ENABLED = false
[cache]
ENABLED = true
URL = "redis://honcho-redis:6379/0"
[llm]
DEFAULT_MAX_TOKENS = 4096
# Embeddings via Ollama (nomic-embed-text recommended on this system)
[embedding]
VECTOR_DIMENSIONS = 768
MAX_INPUT_TOKENS = 8192
[embedding.model_config]
transport = "openai"
model = "nomic-embed-text"
base_url = "http://ollama:11434/v1"
# --- Deriver (user representation builder) ---
[deriver]
ENABLED = true
WORKERS = 1
POLLING_SLEEP_INTERVAL_SECONDS = 5.0
FLUSH_ENABLED = true
[deriver.model_config]
transport = "openai"
model = "hermes-3"
base_url = "http://ollama:11434/v1"
# --- Dialectic ---
[dialectic]
MAX_INPUT_TOKENS = 4096
SESSION_HISTORY_MAX_TOKENS = 8192
[dialectic.levels.minimal]
MAX_TOOL_ITERATIONS = 1
MAX_OUTPUT_TOKENS = 512
[dialectic.levels.minimal.model_config]
transport = "openai"
model = "hermes-3"
base_url = "http://ollama:11434/v1"
[dialectic.levels.low]
MAX_TOOL_ITERATIONS = 3
[dialectic.levels.low.model_config]
transport = "openai"
model = "hermes-3"
base_url = "http://ollama:11434/v1"
[dialectic.levels.medium]
MAX_TOOL_ITERATIONS = 2
[dialectic.levels.medium.model_config]
transport = "openai"
model = "hermes-3"
base_url = "http://ollama:11434/v1"
[dialectic.levels.high]
MAX_TOOL_ITERATIONS = 4
[dialectic.levels.high.model_config]
transport = "openai"
model = "hermes-3"
base_url = "http://ollama:11434/v1"
[dialectic.levels.max]
MAX_TOOL_ITERATIONS = 10
[dialectic.levels.max.model_config]
transport = "openai"
model = "hermes-3"
base_url = "http://ollama:11434/v1"
# --- Summary ---
[summary]
ENABLED = true
MESSAGES_PER_SHORT_SUMMARY = 20
MESSAGES_PER_LONG_SUMMARY = 60
[summary.model_config]
transport = "openai"
model = "hermes-3"
base_url = "http://ollama:11434/v1"
# --- Dream ---
[dream]
ENABLED = false
# --- Peer Card ---
[peer_card]
ENABLED = true
# --- Vector Store ---
[vector_store]
TYPE = "pgvector"
DIMENSIONS = 768

View File

@@ -1 +0,0 @@
CREATE EXTENSION IF NOT EXISTS vector;

53
int/.env.example Normal file
View File

@@ -0,0 +1,53 @@
# =============================================================================
# WorldMonitor — Environment Variables
# =============================================================================
# Copy this file to .env (gitignored) and fill in your keys.
# All keys are optional — the dashboard works without them,
# but the corresponding features will be disabled.
#
# Usage:
# cp .env.example .env.local (docker-compose auto-loads .env from CWD)
#
# For production secrets, add these to the shared containers.env
# agenix secret at: secrets/containers.env.age
# =============================================================================
# ── REQUIRED: These containers refuse to start without them ──
# Generate with: openssl rand -hex 32
REDIS_PASSWORD=
REDIS_TOKEN=
RELAY_SHARED_SECRET=
# ── LLM / AI (for intelligence assessments) ──
# Pick one or both
GROQ_API_KEY= # https://console.groq.com (free: 14,400 req/day)
OPENROUTER_API_KEY= # https://openrouter.ai (free: 50 req/day)
# ── Markets & Economics (optional) ──
FINNHUB_API_KEY= # https://finnhub.io (free tier)
FRED_API_KEY= # https://fred.stlouisfed.org (free)
EIA_API_KEY= # https://www.eia.gov/opendata/ (free)
# ── Aviation (optional) ──
AVIATIONSTACK_API= # https://aviationstack.com (free tier)
WINGBITS_API_KEY= # https://wingbits.com (contact them)
# ── Maritime (optional) ──
AISSTREAM_API_KEY= # https://aisstream.io (free tier)
# ── Conflict & Unrest (optional) ──
ACLED_ACCESS_TOKEN= # https://acleddata.com (free for researchers)
# ── Earth Observation (optional) ──
NASA_FIRMS_API_KEY= # https://firms.modaps.eosdis.nasa.gov (free)
# ── Infrastructure / Internet (optional) ──
CLOUDFLARE_API_TOKEN= # https://developers.cloudflare.com/fundamentals/api/
# ── Port (optional, defaults to 3000) ──
WM_PORT=3000
# ── Convex (for cloud sync / auth — optional for self-host) ──
CONVEX_URL=
CLERK_SECRET_KEY=
VITE_CLERK_PUBLISHABLE_KEY=

177
int/compose.yml Normal file
View File

@@ -0,0 +1,177 @@
# =============================================================================
# Integrations stack
# =============================================================================
# Currently running: WorldMonitor
# Planned: TAK server (commented out — needs fixing)
# =============================================================================
# ── TAK Server (FreeTAKServer) ──
# Disabled: needs debugging. Was having connectivity/auth issues.
# See: https://github.com/FreeTAKTeam/FreeTAKServer
#
# services:
# freetakserver:
# image: ghcr.io/freetakteam/freetakserver:master
# container_name: freetakserver
# hostname: freetakserver
# restart: always
# networks:
# - int_backend
# volumes:
# - /mnt/HoardingCow_docker_data/TAK/fts_data:/opt/fts:z,rw
# ports:
# - 8087:8087
# - 8089:8089
# - 8443:8443
# - 9000:9000
# - 19023:19023
# environment:
# FTS_FED_PASSWORD: "${FTS_FED_PASSWORD}"
# FTS_CLIENT_CERT_PASSWORD: "${FTS_CLIENT_CERT_PASSWORD}"
# FTS_WEBSOCKET_KEY: "${FTS_WEBSOCKET_KEY}"
# FTS_SECRET_KEY: "${FTS_SECRET_KEY}"
# FTS_CONNECTION_MESSAGE: "Welcome to FreeTAKServer. The Parrot is not dead. It's just resting"
# FTS_COT_PORT: 8087
# FTS_SSLCOT_PORT: 8089
# FTS_API_PORT: 19023
# FTS_FED_PORT: 9000
# FTS_DP_ADDRESS: 'freetakserver'
# FTS_USER_ADDRESS: 'freetakserver'
# FTS_API_ADDRESS: 'freetakserver'
# FTS_ROUTING_PROXY_SUBSCRIBE_PORT: 19030
# FTS_ROUTING_PROXY_SUBSCRIBE_IP: 'freetakserver'
# FTS_ROUTING_PROXY_PUBLISHER_PORT: 19032
# FTS_ROUTING_PROXY_PUBLISHER_IP: 'freetakserver'
# FTS_ROUTING_PROXY_SERVER_PORT: 19031
# FTS_ROUTING_PROXY_SERVER_IP: 'freetakserver'
# FTS_INTEGRATION_MANAGER_PULLER_PORT: 19033
# FTS_INTEGRATION_MANAGER_PULLER_ADDRESS: 'freetakserver'
# FTS_INTEGRATION_MANAGER_PUBLISHER_PORT: 19034
# FTS_INTEGRATION_MANAGER_PUBLISHER_ADDRESS: 'freetakserver'
# FTS_OPTIMIZE_API: "True"
# FTS_DATA_RECEPTION_BUFFER: 1024
# FTS_MAX_RECEPTION_TIME: 4
# FTS_NUM_ROUTING_WORKERS: 3
# FTS_COT_TO_DB: "True"
# FTS_MAINLOOP_DELAY: 100
# FTS_EMERGENCY_RADIUS: 0
# FTS_LOG_LEVEL: "info"
#
# freetakserver-ui:
# image: ghcr.io/freetakteam/ui:latest
# container_name: freetakserver-ui
# hostname: freetakserver-ui
# restart: always
# networks:
# - int_net
# ports:
# - 5000:5000
# volumes:
# - /mnt/HoardingCow_docker_data/TAK/fts_ui_data:/home/freetak/data:z,rw
# environment:
# FTS_IP: "freetakserver"
# FTS_API_PORT: 19023
# FTS_API_PROTO: 'http'
# FTS_UI_EXPOSED_IP: 'freetakserver-ui'
# FTS_MAP_EXPOSED_IP: '127.0.0.1'
# FTS_MAP_PORT: 8000
# FTS_MAP_PROTO: 'http'
# FTS_UI_PORT: 5000
# FTS_UI_WSKEY: "${FTS_WEBSOCKET_KEY}"
# FTS_API_KEY: 'Bearer token'
# FTS_UI_SQLALCHEMY_DATABASE_URI: 'sqlite:////home/freetak/data/FTSServer-UI.db'
# labels:
# - "traefik.enable=true"
# - "traefik.docker.network=traefik-net"
# - "traefik.http.routers.fts-ui-http.rule=Host(`tak.lazyworkhorse.net`)"
# - "traefik.http.routers.fts-ui-http.entrypoints=web"
# - "traefik.http.routers.fts-ui-http.middlewares=redirect-to-https"
# - "traefik.http.routers.fts-ui-https.rule=Host(`tak.lazyworkhorse.net`)"
# - "traefik.http.routers.fts-ui-https.entrypoints=websecure"
# - "traefik.http.routers.fts-ui-https.tls=true"
# - "traefik.http.routers.fts-ui-https.tls.certresolver=njalla"
# - "traefik.http.services.fts-ui.loadbalancer.server.port=5000"
# - "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"
# ── WorldMonitor ──
# Real-time global intelligence dashboard
# Repo: https://github.com/koala73/worldmonitor
# Self-hosted, map-first OSINT with MCP support (39 tools)
services:
worldmonitor:
build:
context: https://github.com/koala73/worldmonitor.git
dockerfile: Dockerfile
image: worldmonitor:latest
container_name: worldmonitor
ports:
- "${WM_PORT:-3000}:8080"
environment:
UPSTASH_REDIS_REST_URL: "http://redis-rest:80"
UPSTASH_REDIS_REST_TOKEN: "${REDIS_TOKEN:?REDIS_TOKEN required}"
LOCAL_API_PORT: "46123"
LOCAL_API_MODE: "docker"
LOCAL_API_CLOUD_FALLBACK: "false"
WS_RELAY_URL: "http://ais-relay:3004"
# LLM providers (optional — features degrade gracefully)
LLM_API_URL: "${LLM_API_URL:-}"
LLM_API_KEY: "${LLM_API_KEY:-}"
LLM_MODEL: "${LLM_MODEL:-}"
GROQ_API_KEY: "${GROQ_API_KEY:-}"
# Data source API keys (optional — features degrade gracefully)
AISSTREAM_API_KEY: "${AISSTREAM_API_KEY:-}"
FINNHUB_API_KEY: "${FINNHUB_API_KEY:-}"
EIA_API_KEY: "${EIA_API_KEY:-}"
FRED_API_KEY: "${FRED_API_KEY:-}"
ACLED_ACCESS_TOKEN: "${ACLED_ACCESS_TOKEN:-}"
NASA_FIRMS_API_KEY: "${NASA_FIRMS_API_KEY:-}"
CLOUDFLARE_API_TOKEN: "${CLOUDFLARE_API_TOKEN:-}"
AVIATIONSTACK_API: "${AVIATIONSTACK_API:-}"
depends_on:
redis-rest:
condition: service_started
ais-relay:
condition: service_started
restart: unless-stopped
ais-relay:
build:
context: https://github.com/koala73/worldmonitor.git
dockerfile: Dockerfile.relay
image: worldmonitor-ais-relay:latest
container_name: worldmonitor-ais-relay
environment:
AISSTREAM_API_KEY: "${AISSTREAM_API_KEY:-}"
PORT: "3004"
restart: unless-stopped
redis:
image: docker.io/redis:7-alpine
container_name: worldmonitor-redis
command: >
redis-server
--requirepass "${REDIS_PASSWORD:?REDIS_PASSWORD required}"
--maxmemory 256mb
--maxmemory-policy allkeys-lru
volumes:
- wm-redis-data:/data
restart: unless-stopped
redis-rest:
build:
context: https://github.com/koala73/worldmonitor.git
dockerfile: docker/Dockerfile.redis-rest
image: worldmonitor-redis-rest:latest
container_name: worldmonitor-redis-rest
ports:
- "127.0.0.1:8079:80"
environment:
SRH_TOKEN: "${REDIS_TOKEN:?REDIS_TOKEN required}"
SRH_CONNECTION_STRING: "redis://:${REDIS_PASSWORD:?REDIS_PASSWORD required}@redis:6379"
depends_on:
- redis
restart: unless-stopped
volumes:
wm-redis-data:

View File

@@ -1,98 +0,0 @@
services:
freetakserver:
image: ghcr.io/freetakteam/freetakserver:master
container_name: freetakserver
hostname: freetakserver
restart: always
networks:
- tak_backend
volumes:
- /mnt/HoardingCow_docker_data/TAK/fts_data:/opt/fts:z,rw
ports:
- 8087:8087
- 8089:8089
- 8443:8443
- 9000:9000
- 19023:19023
environment:
FTS_FED_PASSWORD: "${FTS_FED_PASSWORD}"
FTS_CLIENT_CERT_PASSWORD: "${FTS_CLIENT_CERT_PASSWORD}"
FTS_WEBSOCKET_KEY: "${FTS_WEBSOCKET_KEY}"
FTS_SECRET_KEY: "${FTS_SECRET_KEY}"
FTS_CONNECTION_MESSAGE: "Welcome to FreeTAKServer. The Parrot is not dead. It's just resting"
FTS_COT_PORT: 8087
FTS_SSLCOT_PORT: 8089
FTS_API_PORT: 19023
FTS_FED_PORT: 9000
FTS_DP_ADDRESS: 'freetakserver'
FTS_USER_ADDRESS: 'freetakserver'
FTS_API_ADDRESS: 'freetakserver'
FTS_ROUTING_PROXY_SUBSCRIBE_PORT: 19030
FTS_ROUTING_PROXY_SUBSCRIBE_IP: 'freetakserver'
FTS_ROUTING_PROXY_PUBLISHER_PORT: 19032
FTS_ROUTING_PROXY_PUBLISHER_IP: 'freetakserver'
FTS_ROUTING_PROXY_SERVER_PORT: 19031
FTS_ROUTING_PROXY_SERVER_IP: 'freetakserver'
FTS_INTEGRATION_MANAGER_PULLER_PORT: 19033
FTS_INTEGRATION_MANAGER_PULLER_ADDRESS: 'freetakserver'
FTS_INTEGRATION_MANAGER_PUBLISHER_PORT: 19034
FTS_INTEGRATION_MANAGER_PUBLISHER_ADDRESS: 'freetakserver'
FTS_OPTIMIZE_API: "True"
FTS_DATA_RECEPTION_BUFFER: 1024
FTS_MAX_RECEPTION_TIME: 4
FTS_NUM_ROUTING_WORKERS: 3
FTS_COT_TO_DB: "True"
FTS_MAINLOOP_DELAY: 100
FTS_EMERGENCY_RADIUS: 0
FTS_LOG_LEVEL: "info"
freetakserver-ui:
image: ghcr.io/freetakteam/ui:latest
container_name: freetakserver-ui
hostname: freetakserver-ui
restart: always
networks:
- tak_net
ports:
- 5000:5000
volumes:
- /mnt/HoardingCow_docker_data/TAK/fts_ui_data:/home/freetak/data:z,rw
environment:
FTS_IP: "freetakserver"
FTS_API_PORT: 19023
FTS_API_PROTO: 'http'
FTS_UI_EXPOSED_IP: 'freetakserver-ui'
FTS_MAP_EXPOSED_IP: '127.0.0.1'
FTS_MAP_PORT: 8000
FTS_MAP_PROTO: 'http'
FTS_UI_PORT: 5000
FTS_UI_WSKEY: "${FTS_WEBSOCKET_KEY}"
FTS_API_KEY: 'Bearer token'
FTS_UI_SQLALCHEMY_DATABASE_URI: 'sqlite:////home/freetak/data/FTSServer-UI.db'
labels:
- "traefik.enable=true"
- "traefik.docker.network=traefik-net"
# HTTP -> HTTPS Redirect
- "traefik.http.routers.fts-ui-http.rule=Host(`tak.lazyworkhorse.net`)"
- "traefik.http.routers.fts-ui-http.entrypoints=web"
- "traefik.http.routers.fts-ui-http.middlewares=redirect-to-https"
# HTTPS Router
- "traefik.http.routers.fts-ui-https.rule=Host(`tak.lazyworkhorse.net`)"
- "traefik.http.routers.fts-ui-https.entrypoints=websecure"
- "traefik.http.routers.fts-ui-https.tls=true"
- "traefik.http.routers.fts-ui-https.tls.certresolver=njalla"
# Service & Port
- "traefik.http.services.fts-ui.loadbalancer.server.port=5000"
# Reuse your existing redirect middleware
- "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"
networks:
tak_net:
external: true
tak_backend:
driver: bridge
name: tak_backend