Praxis CI
00e39a3f85
Phase 1 complete — Operator Foundation: - Postgres 16 in Docker-in-LXC (asyncpg pool, 5-table schema, PgStore, migrations) - Operator auth (argon2id, signed stateless cookies, slowapi 5/min rate limit) - VC issuer key migration SQLite→Postgres (archive-before-active, R-VC-MIG-01) - Operator bootstrap CLI (create-operator.py, idempotent) - Backup cron script + G-008 restore drill - Graceful degradation (server starts without Postgres) - 272 tests pass, 33 skip (Postgres-requiring), 0 fail ---ci--- project: praxis phase: 1 milestone: v0.4 status: complete requirements: covered: [REQ-MT-01, REQ-AUTH-01, REQ-NFR-AUTH-01, REQ-NFR-MT-01, REQ-MT-02] partial: [] ---/ci---
94 lines
3.5 KiB
YAML
94 lines
3.5 KiB
YAML
# Praxis — Docker Compose service definition (v0.2 + v0.4 Postgres).
|
|
# Runs the praxis server + a Postgres 16 service inside a Docker-in-LXC CT.
|
|
# Per ARCHITECTURE.md §v0.2 Deployment + §v0.4 Operator-Tier Architecture.
|
|
|
|
services:
|
|
praxis:
|
|
build: .
|
|
image: praxis:latest
|
|
restart: unless-stopped
|
|
ports:
|
|
- "8789:8789"
|
|
volumes:
|
|
# SQLite DB persistence — survives container recreation (G-102).
|
|
- praxis-data:/app/data
|
|
environment:
|
|
PRAXIS_HOST: "0.0.0.0"
|
|
PRAXIS_PORT: "8789"
|
|
PRAXIS_DB_PATH: "/app/data/praxis.db"
|
|
PRAXIS_SCENARIOS_DIR: "/app/scenarios"
|
|
PRAXIS_TTS: "${PRAXIS_TTS:-cartesia}"
|
|
PRAXIS_SCENARIO: "${PRAXIS_SCENARIO:-customer_service_refund_ca_v01}"
|
|
# Voice-service keys (empty if unprovisioned — server degrades gracefully)
|
|
DEEPGRAM_API_KEY: "${DEEPGRAM_API_KEY:-}"
|
|
CARTESIA_API_KEY: "${CARTESIA_API_KEY:-}"
|
|
OLLAMA_API_KEY: "${OLLAMA_API_KEY:-}"
|
|
# Ollama Cloud endpoints (D-020)
|
|
OLLAMA_BASE_URL: "${OLLAMA_BASE_URL:-https://ollama.com/v1}"
|
|
OLLAMA_CHAT_URL: "${OLLAMA_CHAT_URL:-https://ollama.com/api/chat}"
|
|
OLLAMA_ROLEPLAY_MODEL: "${OLLAMA_ROLEPLAY_MODEL:-gemma4:cloud}"
|
|
OLLAMA_DEBRIEF_MODEL: "${OLLAMA_DEBRIEF_MODEL:-deepseek-v4-flash:cloud}"
|
|
# Deepgram (D-013)
|
|
DEEPGRAM_MODEL: "${DEEPGRAM_MODEL:-nova-3}"
|
|
DEEPGRAM_LANGUAGE: "${DEEPGRAM_LANGUAGE:-en}"
|
|
DEEPGRAM_REGION: "${DEEPGRAM_REGION:-na}"
|
|
# Cartesia (D-014)
|
|
CARTESIA_VOICE_ID: "${CARTESIA_VOICE_ID:-a3536a36-1d18-4efb-a95a-7c44b7b5e384}"
|
|
# v0.4 operator tier — Postgres DSN (D-050). Empty → graceful no-pool mode.
|
|
PRAXIS_PG_DSN: "${PRAXIS_PG_DSN:-}"
|
|
# v0.4 auth (D-041, D-056). Empty → server generates ephemeral secret (dev only).
|
|
PRAXIS_COOKIE_SECRET: "${PRAXIS_COOKIE_SECRET:-}"
|
|
PRAXIS_COOKIE_SECURE: "${PRAXIS_COOKIE_SECURE:-true}"
|
|
PRAXIS_VC_ISSUER_KEY: "${PRAXIS_VC_ISSUER_KEY:-}"
|
|
PRAXIS_ISSUER_URL: "${PRAXIS_ISSUER_URL:-https://praxis.example/issuers/v0.4}"
|
|
env_file:
|
|
# /etc/praxis/server.env is written by install-service.sh with
|
|
# secrets injected via lxc.environment (G-101 fix: GITEA_TOKEN baked
|
|
# into the snippet; voice keys from lxc.environment).
|
|
# required: false so `docker compose config` validates in dev without
|
|
# the file; install-service.sh ALWAYS creates it before
|
|
# `docker compose up` in production (so secrets are present at runtime).
|
|
- path: /etc/praxis/server.env
|
|
required: false
|
|
depends_on:
|
|
postgres:
|
|
condition: service_healthy
|
|
networks:
|
|
- praxis-net
|
|
|
|
postgres:
|
|
image: postgres:16-slim
|
|
restart: unless-stopped
|
|
environment:
|
|
POSTGRES_USER: praxis
|
|
POSTGRES_PASSWORD: "${PRAXIS_PG_PASSWORD:-}"
|
|
POSTGRES_DB: praxis
|
|
PGDATA: /var/lib/postgresql/data/pgdata
|
|
env_file:
|
|
- path: /etc/praxis/server.env
|
|
required: false
|
|
volumes:
|
|
- pgdata:/var/lib/postgresql/data
|
|
- pgbackups:/backups
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U praxis -d praxis"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 5
|
|
networks:
|
|
- praxis-net
|
|
# No `ports:` — Postgres is NOT exposed to the LXC host bridge (D-040).
|
|
# The praxis service reaches it via the praxis-net bridge using the
|
|
# service-DNS name `postgres`.
|
|
|
|
volumes:
|
|
praxis-data:
|
|
driver: local
|
|
pgdata:
|
|
driver: local
|
|
pgbackups:
|
|
driver: local
|
|
|
|
networks:
|
|
praxis-net:
|
|
driver: bridge |