openrag/docker-compose.host-backend.yml at main · NishadA05/openrag · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
# docker-compose.host-backend.yml
#
# Layered override for the dev-local mode where the OpenRAG backend
# runs on the HOST machine via `make backend` (not as a compose
# service). In that mode OpenSearch — running inside its container —
# needs to reach the host's port 8000 to fetch the OIDC discovery /
# JWKS for JWT validation. This override adds the alias that routes
# `openrag-backend` from inside the OpenSearch container to the host
# gateway.
#
# Do NOT merge this into the base `docker-compose.yml`: `extra_hosts`
# writes to /etc/hosts, which libc resolves before DNS, so adding the
# alias unconditionally overrides the docker-compose service-name
# resolution in any deployment where the backend runs as a service
# (e.g. CI integration tests, e2e tests). That broke every
# `/search` call with `AuthenticationException(401, 'Unauthorized')`
# until this file existed.
#
# Usage:
#     docker compose \
#         -f docker-compose.yml \
#         -f docker-compose.host-backend.yml \
#         up -d opensearch dashboards langflow
#     make backend     # in another terminal — listens on host:8000
#     make frontend    # in another terminal

services:
  opensearch:
    extra_hosts:
      - "openrag-backend:host-gateway"
  langflow:
    extra_hosts:
      - "openrag-backend:host-gateway"