sipher/docker-compose.yml at main · sip-protocol/sipher · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
name: sipher

services:
  api:
    image: ghcr.io/sip-protocol/sipher:latest
    container_name: sipher
    restart: unless-stopped
    ports:
      - "5006:3000"
    environment:
      - NODE_ENV=production
      - PORT=3000
      - API_KEYS=${API_KEYS}
      - ADMIN_API_KEY=${ADMIN_API_KEY}
      - SOLANA_RPC_URL=${SOLANA_RPC_URL:-https://api.mainnet-beta.solana.com}
      - SIPHER_HELIUS_API_KEY=${SIPHER_HELIUS_API_KEY:-}
      - RPC_PROVIDER=${RPC_PROVIDER:-generic}
      - CORS_ORIGINS=${CORS_ORIGINS:-https://sipher.sip-protocol.org,https://sip-protocol.org,https://app.sip-protocol.org}
      - REDIS_URL=redis://redis:6379
      - TRUST_PROXY=1
      - LOG_LEVEL=info
      - RATE_LIMIT_MAX=100
      - RATE_LIMIT_WINDOW_MS=60000
      # Phase 2 — Guardian Command
      - JWT_SECRET=${JWT_SECRET}
      - SIPHER_ADMIN_PASSWORD=${SIPHER_ADMIN_PASSWORD}
      - AUTHORIZED_WALLETS=${AUTHORIZED_WALLETS:-}
      - SOLANA_NETWORK=${SOLANA_NETWORK:-mainnet-beta}
      # SENTINEL
      - SENTINEL_MODE=${SENTINEL_MODE:-yolo}
      - SENTINEL_AUTHORITY_KEYPAIR=${SENTINEL_AUTHORITY_KEYPAIR:-}
      - OPENROUTER_API_KEY=${OPENROUTER_API_KEY:-}
      - X_BEARER_TOKEN=${X_BEARER_TOKEN:-}
      - X_CONSUMER_KEY=${X_CONSUMER_KEY:-}
      - X_CONSUMER_SECRET=${X_CONSUMER_SECRET:-}
      - X_ACCESS_TOKEN=${X_ACCESS_TOKEN:-}
      - X_ACCESS_SECRET=${X_ACCESS_SECRET:-}
      - HERALD_MONTHLY_BUDGET=${HERALD_MONTHLY_BUDGET:-150}
      - JUPITER_API_URL=${JUPITER_API_URL:-https://lite-api.jup.ag}
      - JITO_BLOCK_ENGINE_URL=${JITO_BLOCK_ENGINE_URL:-}
      - SIPHER_BASE_URL=${SIPHER_BASE_URL:-https://sipher.sip-protocol.org}
    volumes:
      - sipher-data:/app/data
    depends_on:
      redis:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "node", "-e", "fetch('http://localhost:3000/api/health').then(r=>{process.exit(r.ok?0:1)}).catch(()=>process.exit(1))"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 10s

  redis:
    image: redis:7-alpine
    container_name: sipher-redis
    restart: unless-stopped
    command: redis-server --appendonly yes --maxmemory 100mb --maxmemory-policy allkeys-lru
    volumes:
      - redis-data:/data
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 3s
      retries: 3
      start_period: 5s

volumes:
  redis-data:
  sipher-data: