Add compose.yaml

2026-10-03 20:59:29 +00:00
parent 5a8e53d833
commit 4e095c459b
1 changed files with 17 additions and 0 deletions
@@ -0,0 +1,17 @@
+services:
+  executor:
+    build: ./app
+    container_name: coreci-executor
+    restart: unless-stopped
+    ports:
+      - "127.0.0.1:8765:8000"     # HAProxy proxies executor.coreci.dev → here
+    env_file: .env                # secrets live here, never in git
+    environment:
+      - ALLOWLIST_PATH=/config/allowlist.yaml
+      - WORK_ROOT=/work
+    volumes:
+      - .:/config:ro              # allowlist + docs, read-only in container
+      - ./logs:/app/logs          # audit JSONL (committed back to git)
+      - executor-work:/work
+volumes:
+  executor-work: {}