Adriano
71da162e1f
Container FastAPI separato (Dockerfile.vision, python:3.13-slim) che espone run_graph/engine_version del Task 2 via POST /run e GET /health, cosi' l'immagine del server principale non importa mai VisionSuite. engine_version() ora legge VISION_ENGINE_VERSION se impostata, altrimenti ricade su git rev-parse nel checkout di sviluppo, e non inventa mai un valore: senza nessuna delle due solleva un errore esplicito. Nel container il fallback a git non puo' funzionare (.git del submodule punta fuori dal build context), quindi Dockerfile.vision prende il commit come build arg e lo fissa in ambiente; i compose file lo passano da VISION_ENGINE_VERSION. Nessuna porta pubblicata e nessuna label Traefik sul servizio vision: e' raggiungibile solo dal server, su tmflow-net. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_014BBnuACZSCJqXrMYC3LUMU
109 lines
3.3 KiB
YAML
109 lines
3.3 KiB
YAML
services:
|
|
mysql:
|
|
image: mysql:8.0
|
|
container_name: tmflow-mysql
|
|
restart: unless-stopped
|
|
environment:
|
|
MYSQL_ROOT_PASSWORD: ${DB_ROOT_PASSWORD:-root_password_change_me}
|
|
MYSQL_DATABASE: ${DB_NAME:-tiemeasureflow}
|
|
MYSQL_USER: ${DB_USER:-tmflow}
|
|
MYSQL_PASSWORD: ${DB_PASSWORD:-change_me_in_production}
|
|
volumes:
|
|
- mysql_data:/var/lib/mysql
|
|
command: >
|
|
--authentication-policy=mysql_native_password
|
|
--character-set-server=utf8mb4
|
|
--collation-server=utf8mb4_unicode_ci
|
|
healthcheck:
|
|
test: ["CMD", "mysqladmin", "ping", "-h", "localhost"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 5
|
|
networks:
|
|
- tmflow-net
|
|
|
|
server:
|
|
build:
|
|
context: .
|
|
dockerfile: Dockerfile
|
|
container_name: tmflow-server
|
|
restart: unless-stopped
|
|
env_file:
|
|
- .env
|
|
environment:
|
|
DB_HOST: mysql
|
|
UPLOAD_DIR: uploads
|
|
VISION_WORKER_URL: http://vision:8100
|
|
volumes:
|
|
- upload_data:/app/uploads
|
|
depends_on:
|
|
mysql:
|
|
condition: service_healthy
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.tmflow-api.rule=Host(`tieflow.tielogic.xyz`) && (PathPrefix(`/api/`) || PathPrefix(`/uploads/`))"
|
|
- "traefik.http.routers.tmflow-api.entrypoints=web,websecure"
|
|
- "traefik.http.routers.tmflow-api.tls=true"
|
|
- "traefik.http.routers.tmflow-api.tls.certresolver=mytlschallenge"
|
|
- "traefik.http.routers.tmflow-api.priority=100"
|
|
- "traefik.http.services.tmflow-api.loadbalancer.server.port=8000"
|
|
networks:
|
|
- tmflow-net
|
|
- traefik-net
|
|
|
|
vision:
|
|
build:
|
|
context: .
|
|
dockerfile: Dockerfile.vision
|
|
args:
|
|
VISION_ENGINE_VERSION: ${VISION_ENGINE_VERSION:-}
|
|
container_name: tmflow-vision
|
|
restart: unless-stopped
|
|
networks:
|
|
- tmflow-net
|
|
|
|
client:
|
|
build:
|
|
context: .
|
|
dockerfile: Dockerfile.frontend
|
|
container_name: tmflow-client
|
|
restart: unless-stopped
|
|
env_file:
|
|
- .env
|
|
environment:
|
|
API_SERVER_URL: http://server:8000
|
|
depends_on:
|
|
- server
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.tmflow-web.rule=Host(`tieflow.tielogic.xyz`)"
|
|
- "traefik.http.routers.tmflow-web.entrypoints=web,websecure"
|
|
- "traefik.http.routers.tmflow-web.tls=true"
|
|
- "traefik.http.routers.tmflow-web.tls.certresolver=mytlschallenge"
|
|
- "traefik.http.routers.tmflow-web.priority=10"
|
|
- "traefik.http.services.tmflow-web.loadbalancer.server.port=5000"
|
|
- "traefik.http.middlewares.tmflow-headers.headers.SSLRedirect=true"
|
|
- "traefik.http.middlewares.tmflow-headers.headers.STSSeconds=315360000"
|
|
- "traefik.http.middlewares.tmflow-headers.headers.browserXSSFilter=true"
|
|
- "traefik.http.middlewares.tmflow-headers.headers.contentTypeNosniff=true"
|
|
- "traefik.http.middlewares.tmflow-headers.headers.forceSTSHeader=true"
|
|
- "traefik.http.middlewares.tmflow-headers.headers.STSIncludeSubdomains=true"
|
|
- "traefik.http.middlewares.tmflow-headers.headers.STSPreload=true"
|
|
- "traefik.http.routers.tmflow-web.middlewares=tmflow-headers"
|
|
networks:
|
|
- tmflow-net
|
|
- traefik-net
|
|
|
|
volumes:
|
|
mysql_data:
|
|
driver: local
|
|
upload_data:
|
|
driver: local
|
|
|
|
networks:
|
|
tmflow-net:
|
|
driver: bridge
|
|
traefik-net:
|
|
external: true
|
|
name: traefik
|