Praxis CI
f2a12f9fed
v0.4 (Operator Tier — Cohort Dashboard + Auth + Postgres) milestone complete. Phases: ✓ P0 pre-execution (planning) → v0.1.6 ✓ P1 operator foundation (Postgres+auth+VC migration) → v0.1.7 ✓ P2 cohort dashboard + aggregation → v0.1.8 ✓ P3 final review + ship → v0.1.9 (= v0.4 milestone release) Requirements covered (8/8): REQ-MT-01 (Postgres store), REQ-MT-02 (aggregation pipeline), REQ-AUTH-01 (operator auth), REQ-DASH-01 (cohort dashboard), REQ-NFR-AUTH-01 (auth NFRs), REQ-NFR-MT-01 (Postgres-in-LXC), REQ-NFR-DASH-01 (k-anonymity ≥10), REQ-NFR-DASH-02 (freshness ≤24h) Grill MUSTs honored (6/6): G-008, G-011, G-027, G-031, G-038, G-041 Tests: 317 pytest pass, 36 skip (Postgres-requiring), 0 fail; 17/17 vitest pass Review: APPROVE_WITH_NOTES (6/6 personas, 0 P0, 8 P1+ carry-forward) Audit: HEALTHY (reconstruction PASS, 8/8 REQ, 6/6 grill) ---ci--- project: praxis phase: 3 milestone: v0.4 status: complete phase_role: final milestone_complete: true milestone_merged_to_main: true tag: v0.1.9 requirements: covered: [REQ-MT-01, REQ-MT-02, REQ-AUTH-01, REQ-DASH-01, REQ-NFR-AUTH-01, REQ-NFR-MT-01, REQ-NFR-DASH-01, REQ-NFR-DASH-02] partial: [] ---/ci---
94 lines
3.5 KiB
YAML
94 lines
3.5 KiB
YAML
# Praxis — Docker Compose service definition (v0.2 + v0.4 Postgres).
|
|
# Runs the praxis server + a Postgres 16 service inside a Docker-in-LXC CT.
|
|
# Per ARCHITECTURE.md §v0.2 Deployment + §v0.4 Operator-Tier Architecture.
|
|
|
|
services:
|
|
praxis:
|
|
build: .
|
|
image: praxis:latest
|
|
restart: unless-stopped
|
|
ports:
|
|
- "8789:8789"
|
|
volumes:
|
|
# SQLite DB persistence — survives container recreation (G-102).
|
|
- praxis-data:/app/data
|
|
environment:
|
|
PRAXIS_HOST: "0.0.0.0"
|
|
PRAXIS_PORT: "8789"
|
|
PRAXIS_DB_PATH: "/app/data/praxis.db"
|
|
PRAXIS_SCENARIOS_DIR: "/app/scenarios"
|
|
PRAXIS_TTS: "${PRAXIS_TTS:-cartesia}"
|
|
PRAXIS_SCENARIO: "${PRAXIS_SCENARIO:-customer_service_refund_ca_v01}"
|
|
# Voice-service keys (empty if unprovisioned — server degrades gracefully)
|
|
DEEPGRAM_API_KEY: "${DEEPGRAM_API_KEY:-}"
|
|
CARTESIA_API_KEY: "${CARTESIA_API_KEY:-}"
|
|
OLLAMA_API_KEY: "${OLLAMA_API_KEY:-}"
|
|
# Ollama Cloud endpoints (D-020)
|
|
OLLAMA_BASE_URL: "${OLLAMA_BASE_URL:-https://ollama.com/v1}"
|
|
OLLAMA_CHAT_URL: "${OLLAMA_CHAT_URL:-https://ollama.com/api/chat}"
|
|
OLLAMA_ROLEPLAY_MODEL: "${OLLAMA_ROLEPLAY_MODEL:-gemma4:cloud}"
|
|
OLLAMA_DEBRIEF_MODEL: "${OLLAMA_DEBRIEF_MODEL:-deepseek-v4-flash:cloud}"
|
|
# Deepgram (D-013)
|
|
DEEPGRAM_MODEL: "${DEEPGRAM_MODEL:-nova-3}"
|
|
DEEPGRAM_LANGUAGE: "${DEEPGRAM_LANGUAGE:-en}"
|
|
DEEPGRAM_REGION: "${DEEPGRAM_REGION:-na}"
|
|
# Cartesia (D-014)
|
|
CARTESIA_VOICE_ID: "${CARTESIA_VOICE_ID:-a3536a36-1d18-4efb-a95a-7c44b7b5e384}"
|
|
# v0.4 operator tier — Postgres DSN (D-050). Empty → graceful no-pool mode.
|
|
PRAXIS_PG_DSN: "${PRAXIS_PG_DSN:-}"
|
|
# v0.4 auth (D-041, D-056). Empty → server generates ephemeral secret (dev only).
|
|
PRAXIS_COOKIE_SECRET: "${PRAXIS_COOKIE_SECRET:-}"
|
|
PRAXIS_COOKIE_SECURE: "${PRAXIS_COOKIE_SECURE:-true}"
|
|
PRAXIS_VC_ISSUER_KEY: "${PRAXIS_VC_ISSUER_KEY:-}"
|
|
PRAXIS_ISSUER_URL: "${PRAXIS_ISSUER_URL:-https://praxis.example/issuers/v0.4}"
|
|
env_file:
|
|
# /etc/praxis/server.env is written by install-service.sh with
|
|
# secrets injected via lxc.environment (G-101 fix: GITEA_TOKEN baked
|
|
# into the snippet; voice keys from lxc.environment).
|
|
# required: false so `docker compose config` validates in dev without
|
|
# the file; install-service.sh ALWAYS creates it before
|
|
# `docker compose up` in production (so secrets are present at runtime).
|
|
- path: /etc/praxis/server.env
|
|
required: false
|
|
depends_on:
|
|
postgres:
|
|
condition: service_healthy
|
|
networks:
|
|
- praxis-net
|
|
|
|
postgres:
|
|
image: postgres:16-slim
|
|
restart: unless-stopped
|
|
environment:
|
|
POSTGRES_USER: praxis
|
|
POSTGRES_PASSWORD: "${PRAXIS_PG_PASSWORD:-}"
|
|
POSTGRES_DB: praxis
|
|
PGDATA: /var/lib/postgresql/data/pgdata
|
|
env_file:
|
|
- path: /etc/praxis/server.env
|
|
required: false
|
|
volumes:
|
|
- pgdata:/var/lib/postgresql/data
|
|
- pgbackups:/backups
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U praxis -d praxis"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 5
|
|
networks:
|
|
- praxis-net
|
|
# No `ports:` — Postgres is NOT exposed to the LXC host bridge (D-040).
|
|
# The praxis service reaches it via the praxis-net bridge using the
|
|
# service-DNS name `postgres`.
|
|
|
|
volumes:
|
|
praxis-data:
|
|
driver: local
|
|
pgdata:
|
|
driver: local
|
|
pgbackups:
|
|
driver: local
|
|
|
|
networks:
|
|
praxis-net:
|
|
driver: bridge |