65 lines
2.1 KiB
YAML
65 lines
2.1 KiB
YAML
# -----------------------------------------------------------------------------
|
|
# docker-compose.yml
|
|
# Sprint: SPRINT_20260125_002_Attestor_trust_automation
|
|
# Task: PROXY-008 - Docker Compose for tile-proxy stack
|
|
# Description: Docker Compose configuration for tile-proxy deployment
|
|
# -----------------------------------------------------------------------------
|
|
|
|
services:
|
|
tile-proxy:
|
|
build:
|
|
context: ../../..
|
|
dockerfile: src/Attestor/StellaOps.Attestor.TileProxy/Dockerfile
|
|
image: stellaops/tile-proxy:latest
|
|
container_name: stellaops-tile-proxy
|
|
ports:
|
|
- "8090:8080"
|
|
volumes:
|
|
- tile-cache:/var/cache/stellaops/tiles
|
|
- tuf-cache:/var/cache/stellaops/tuf
|
|
environment:
|
|
# Upstream Rekor configuration
|
|
- TILE_PROXY__UPSTREAMURL=${REKOR_UPSTREAM_URL:-https://rekor.sigstore.dev}
|
|
- TILE_PROXY__ORIGIN=${REKOR_ORIGIN:-rekor.sigstore.dev - 1985497715}
|
|
|
|
# TUF configuration (optional)
|
|
- TILE_PROXY__TUF__ENABLED=${TUF_ENABLED:-false}
|
|
- TILE_PROXY__TUF__URL=${TUF_ROOT_URL:-}
|
|
- TILE_PROXY__TUF__VALIDATECHECKPOINTSIGNATURE=${TUF_VALIDATE_CHECKPOINT:-true}
|
|
|
|
# Cache configuration
|
|
- TILE_PROXY__CACHE__BASEPATH=/var/cache/stellaops/tiles
|
|
- TILE_PROXY__CACHE__MAXSIZEGB=${CACHE_MAX_SIZE_GB:-10}
|
|
- TILE_PROXY__CACHE__CHECKPOINTTTLMINUTES=${CHECKPOINT_TTL_MINUTES:-5}
|
|
|
|
# Sync job configuration
|
|
- TILE_PROXY__SYNC__ENABLED=${SYNC_ENABLED:-true}
|
|
- TILE_PROXY__SYNC__SCHEDULE=${SYNC_SCHEDULE:-0 */6 * * *}
|
|
- TILE_PROXY__SYNC__DEPTH=${SYNC_DEPTH:-10000}
|
|
|
|
# Request handling
|
|
- TILE_PROXY__REQUEST__COALESCINGENABLED=${COALESCING_ENABLED:-true}
|
|
- TILE_PROXY__REQUEST__TIMEOUTSECONDS=${REQUEST_TIMEOUT_SECONDS:-30}
|
|
|
|
# Logging
|
|
- Serilog__MinimumLevel__Default=${LOG_LEVEL:-Information}
|
|
healthcheck:
|
|
test: ["CMD", "curl", "-f", "http://localhost:8080/_admin/health"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 5s
|
|
restart: unless-stopped
|
|
networks:
|
|
- stellaops
|
|
|
|
volumes:
|
|
tile-cache:
|
|
driver: local
|
|
tuf-cache:
|
|
driver: local
|
|
|
|
networks:
|
|
stellaops:
|
|
driver: bridge
|