OpenAgentLock/docker-compose.yml at main · openagentlock/OpenAgentLock · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
# OpenAgentLock daemon (agentlockd) — drop-in compose file for end users.
#
# Pulls the published image from GitHub Container Registry. No build step
# required.
#
# Usage:
#   # optional external guardrails:
#   # export NVIDIA_API_KEY=...
#   # export OPENROUTER_API_KEY=...
#   docker compose up -d
#   docker compose logs -f control-plane
#   docker compose down
#
# Then point the `agentlock` CLI at http://127.0.0.1:7878 (the default).
# Open the local web dashboard at http://127.0.0.1:7879

services:
  control-plane:
    image: ghcr.io/openagentlock/agentlockd:latest
    container_name: agentlock
    restart: unless-stopped
    ports:
      - "127.0.0.1:7878:7878"   # CLI / hooks
      - "127.0.0.1:7879:7879"   # local web dashboard
    environment:
      AGENTLOCK_LISTEN: "0.0.0.0:7878"
      AGENTLOCK_DASHBOARD_LISTEN: "0.0.0.0:7879"
      AGENTLOCK_HOME: "/var/lib/agentlock"
      # Optional external guardrail providers. Values are read once at
      # control-plane startup, kept in daemon RAM, and cleared on restart.
      NVIDIA_API_KEY: "${NVIDIA_API_KEY:-}"
      OPENROUTER_API_KEY: "${OPENROUTER_API_KEY:-}"
    volumes:
      - agentlock-state:/var/lib/agentlock
    healthcheck:
      test: ["CMD", "/usr/local/bin/agentlockd", "--health"]
      interval: 10s
      timeout: 2s
      retries: 3

volumes:
  agentlock-state: