4d94aa5040
Same pattern as the gateway (a54fdcb): the mp-suppliers-* DNS records are no
longer Cloudflare-proxied, so each supplier gets a websecure router with the
letsencrypt resolver and its :80 router becomes a permanent HTTPS redirect.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
84 lines
3.7 KiB
YAML
84 lines
3.7 KiB
YAML
# deploy/mainnet/docker-compose.supplier-gpt.yml — Supplier — MAINNET (ChatGPT/Codex backend)
|
|
#
|
|
# This compose runs a SECOND mainnet supplier with LLM_BACKEND=openai pointed
|
|
# at the ChatMock localhost proxy (see docker-compose.chatmock.yml). Traefik
|
|
# routes at mp-suppliers-gpt.vector.apexfusion.org. Coexists with the
|
|
# canonical ollama-backed supplier in docker-compose.supplier.yml, which owns
|
|
# the unsuffixed mp-suppliers.vector.apexfusion.org slot.
|
|
#
|
|
# Pre-flight networks (must already exist):
|
|
# docker network create marketplace-mainnet-net # one-shot
|
|
# # traefik-net is created by the Traefik project
|
|
#
|
|
# Pre-flight services:
|
|
# docker compose -f docker-compose.chatmock.yml up -d chatmock
|
|
# # then run the --profile login flow once to seed OAuth tokens in
|
|
# # the chatmock_data volume — see chatmock compose header for details
|
|
|
|
name: marketplace-mainnet-supplier-gpt
|
|
|
|
services:
|
|
supplier:
|
|
build:
|
|
context: ../..
|
|
dockerfile: supplier/Dockerfile
|
|
container_name: marketplace-mainnet-supplier-gpt
|
|
restart: unless-stopped
|
|
env_file:
|
|
# Self-contained env for the GPT variant — kept separate from the
|
|
# canonical ../../supplier/.env (which the ollama-backed supplier
|
|
# reads). Holds this supplier's distinct SUPPLIER_PRIV_KEY_HEX,
|
|
# ADVERT_REF, ADVERT_*, and the shared mainnet plumbing duplicated
|
|
# in full (NETWORK_ID, OGMIOS_URL, VECTOR_ZERO_TIME_MS, ref-script
|
|
# UTxOs, LIVE_CHAIN). No env_file ordering / override magic.
|
|
- path: ../../supplier/.env.gpt
|
|
required: false
|
|
environment:
|
|
LLM_BACKEND: openai
|
|
OPENAI_BASE_URL: http://marketplace-mainnet-chatmock:8000
|
|
OPENAI_TIMEOUT_MS: "300000"
|
|
PORT: "8080"
|
|
# Enable LiveOgmiosProvider so submitTx/awaitTx actually broadcast.
|
|
# Mirrors the testnet supplier compose; without this the supplier
|
|
# silently falls back to ReadOnlyOgmiosProvider and Claim/Submit
|
|
# never reach chain.
|
|
LIVE_CHAIN: "1"
|
|
# NETWORK_ID and OGMIOS_URL intentionally not pinned here — they MUST
|
|
# come from the operator-provided supplier/.env on a mainnet host.
|
|
# Setting them via compose would be a footgun: a stray re-up on
|
|
# testnet hardware could silently re-tag the supplier as mainnet.
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "wget -qO- http://localhost:8080/healthz >/dev/null || exit 1"]
|
|
interval: 20s
|
|
timeout: 5s
|
|
retries: 3
|
|
start_period: 15s
|
|
networks:
|
|
- marketplace-mainnet-net
|
|
- traefik-net
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.docker.network=traefik-net"
|
|
- "traefik.http.routers.mp-suppliers-gpt-mainnet.entrypoints=web"
|
|
- "traefik.http.routers.mp-suppliers-gpt-mainnet.rule=Host(`mp-suppliers-gpt.vector.apexfusion.org`)"
|
|
- "traefik.http.routers.mp-suppliers-gpt-mainnet.middlewares=mp-suppliers-gpt-mainnet-https"
|
|
- "traefik.http.middlewares.mp-suppliers-gpt-mainnet-https.redirectscheme.scheme=https"
|
|
- "traefik.http.middlewares.mp-suppliers-gpt-mainnet-https.redirectscheme.permanent=true"
|
|
- "traefik.http.routers.mp-suppliers-gpt-mainnet-tls.entrypoints=websecure"
|
|
- "traefik.http.routers.mp-suppliers-gpt-mainnet-tls.rule=Host(`mp-suppliers-gpt.vector.apexfusion.org`)"
|
|
- "traefik.http.routers.mp-suppliers-gpt-mainnet-tls.tls.certresolver=letsencrypt"
|
|
- "traefik.http.services.mp-suppliers-gpt-mainnet.loadbalancer.server.port=8080"
|
|
logging:
|
|
driver: json-file
|
|
options:
|
|
max-size: "10m"
|
|
max-file: "3"
|
|
|
|
networks:
|
|
marketplace-mainnet-net:
|
|
external: true
|
|
name: marketplace-mainnet-net
|
|
traefik-net:
|
|
external: true
|
|
name: traefik-net
|