vulnrag/docker-compose.yml at main · chasingimpact/vulnrag · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
# VulnRAG Docker Compose Configuration
#
# Usage:
#   docker-compose up -d          # Start VulnRAG
#   docker-compose logs -f        # View logs
#   docker-compose down           # Stop
#
# Data persists in named volumes between restarts.

version: '3.8'

services:
  vulnrag:
    build:
      context: .
      dockerfile: Dockerfile
    image: vulnrag:latest
    container_name: vulnrag
    ports:
      - "8001:8001"
    volumes:
      # Persist database and vector store
      - vulnrag-data:/app/data
      # Optional: mount local data for development
      # - ./data:/app/data
    environment:
      # API Keys (set via .env file or environment)
      - ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY:-}
      - OPENAI_API_KEY=${OPENAI_API_KEY:-}
      # Database paths
      - VULNRAG_DATA_DIR=/app/data
      - VULNRAG_DB_PATH=/app/data/vulnrag.db
      - VULNRAG_CHROMA_PATH=/app/data/chroma
      # Server config
      - VULNRAG_HOST=0.0.0.0
      - VULNRAG_PORT=8001
    healthcheck:
      test: ["CMD", "python", "-c", "import httpx; r = httpx.get('http://localhost:8001/v2/health'); exit(0 if r.status_code == 200 else 1)"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 60s
    restart: unless-stopped
    deploy:
      resources:
        limits:
          memory: 4G
        reservations:
          memory: 2G

volumes:
  vulnrag-data:
    driver: local

# Optional: Network for CVE-GEN integration
networks:
  default:
    name: vulnrag-network
    driver: bridge