platon/docker-compose.yml at main · alexar76/platon · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
services:
  platon-backend:
    container_name: platon-platon-backend
    build:
      context: ./backend
      dockerfile: Dockerfile
    env_file:
      # Least-privilege: inject ONLY the secrets Platon needs (a provider API key,
      # optional signing seed / hub token) — NOT the whole ecosystem
      # /root/.hermes/.env (~146 secrets: every LLM key, Telegram token, etc.),
      # so a Platon compromise can't exfiltrate the rest. See platon.env.example;
      # create the scoped file before `docker compose up` (override with PLATON_ENV_FILE).
      - ${PLATON_ENV_FILE:-/root/.hermes/platon.env}
    environment:
      PLATON_HOST: "0.0.0.0"
      PLATON_PORT: "9200"
      PLATON_PUBLIC_URL: ${PLATON_PUBLIC_URL:-http://78.17.126.214}
      PLATON_SIGNING_KEY_PATH: /data/platon_signing_key
      PLATON_ORACLE_PROVIDER: ${PLATON_ORACLE_PROVIDER:-auto}
      PLATON_OPENAI_MODEL: ${PLATON_OPENAI_MODEL:-gpt-4o-mini}
      PLATON_ANTHROPIC_MODEL: ${PLATON_ANTHROPIC_MODEL:-claude-3-5-haiku-latest}
      PLATON_DEEPSEEK_MODEL: ${PLATON_DEEPSEEK_MODEL:-deepseek-chat}
      PLATON_DEEPSEEK_BASE_URL: ${PLATON_DEEPSEEK_BASE_URL:-https://api.deepseek.com/v1}
      PLATON_OLLAMA_URL: ${PLATON_OLLAMA_URL:-http://host.docker.internal:11434}
      PLATON_ALIEN_MONITOR_WEBHOOK: ${PLATON_ALIEN_MONITOR_WEBHOOK:-http://alien-monitor:9100/api/integrations/platon/event}
      PLATON_IDLE_TICK_HZ: ${PLATON_IDLE_TICK_HZ:-2}
    volumes:
      - platon-signing-key:/data
    cpus: "1.0"
    mem_limit: 512m
    healthcheck:
      test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://127.0.0.1:9200/api/health', timeout=3)"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 15s
    restart: unless-stopped
    networks:
      - platon
      - ecosystem

  platon-frontend:
    container_name: platon-platon-frontend
    build:
      context: ./frontend
      dockerfile: Dockerfile
    ports:
      - "127.0.0.1:8080:80"
    depends_on:
      - platon-backend
    restart: unless-stopped
    networks:
      - platon

networks:
  platon:
    driver: bridge
  ecosystem:
    name: ecosystem
    driver: bridge

volumes:
  platon-signing-key: