4d94aa5040
Same pattern as the gateway (a54fdcb): the mp-suppliers-* DNS records are no
longer Cloudflare-proxied, so each supplier gets a websecure router with the
letsencrypt resolver and its :80 router becomes a permanent HTTPS redirect.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
74 lines
3.2 KiB
YAML
74 lines
3.2 KiB
YAML
# deploy/mainnet/docker-compose.supplier-kimi-3.yml — Supplier — MAINNET (OpenRouter / Kimi K2.6 replica #3)
|
|
#
|
|
# Parallel-capacity replica of supplier-kimi (OpenRouter, moonshotai/kimi-k2.6).
|
|
# Identical to docker-compose.supplier-kimi.yml except for the instance name,
|
|
# container name, env file, Traefik host/router, and OPENAI_TIMEOUT_MS (raised
|
|
# to 3600000 to match this advert's max_processing_ms=3600000, max_output_tokens=262144).
|
|
# Shares the same OpenRouter API key as the other kimi suppliers (accepted
|
|
# concurrency ceiling; supplier has no 429/backoff).
|
|
#
|
|
# Pre-flight:
|
|
# 1. DNS (proxied): mp-suppliers-kimi-3.vector.apexfusion.org → host
|
|
# 2. supplier/.env.kimi-3 on host (chmod 600): SUPPLIER_PRIV_KEY_HEX, OPENAI_API_KEY,
|
|
# OGMIOS_URL, NETWORK_ID=1, VECTOR_ZERO_TIME_MS, ESCROW_REF_UTXO, ADVERT_REF_UTXO,
|
|
# ADVERT_REF, LIVE_CHAIN=1
|
|
# 3. Networks marketplace-mainnet-net + traefik-net already exist.
|
|
|
|
name: marketplace-mainnet-supplier-kimi-3
|
|
|
|
services:
|
|
supplier:
|
|
build:
|
|
context: ../..
|
|
dockerfile: supplier/Dockerfile
|
|
container_name: marketplace-mainnet-supplier-kimi-3
|
|
restart: unless-stopped
|
|
env_file:
|
|
- path: ../../supplier/.env.kimi-3
|
|
required: false
|
|
environment:
|
|
LLM_BACKEND: openai
|
|
# No /v1 suffix — supplier/src/openai.ts appends /v1/chat/completions.
|
|
OPENAI_BASE_URL: https://openrouter.ai/api
|
|
# Raised to match the advert's max_processing_ms=3600000 (60 min) so the
|
|
# upstream call isn't aborted before the advertised processing deadline.
|
|
OPENAI_TIMEOUT_MS: "3600000"
|
|
PORT: "8080"
|
|
LIVE_CHAIN: "1"
|
|
# NETWORK_ID and OGMIOS_URL intentionally not pinned here — they MUST
|
|
# come from supplier/.env.kimi-3 on the mainnet host (footgun avoidance).
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "wget -qO- http://localhost:8080/healthz >/dev/null || exit 1"]
|
|
interval: 20s
|
|
timeout: 5s
|
|
retries: 3
|
|
start_period: 15s
|
|
networks:
|
|
- marketplace-mainnet-net
|
|
- traefik-net
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.docker.network=traefik-net"
|
|
- "traefik.http.routers.mp-suppliers-kimi-3-mainnet.entrypoints=web"
|
|
- "traefik.http.routers.mp-suppliers-kimi-3-mainnet.rule=Host(`mp-suppliers-kimi-3.vector.apexfusion.org`)"
|
|
- "traefik.http.routers.mp-suppliers-kimi-3-mainnet.middlewares=mp-suppliers-kimi-3-mainnet-https"
|
|
- "traefik.http.middlewares.mp-suppliers-kimi-3-mainnet-https.redirectscheme.scheme=https"
|
|
- "traefik.http.middlewares.mp-suppliers-kimi-3-mainnet-https.redirectscheme.permanent=true"
|
|
- "traefik.http.routers.mp-suppliers-kimi-3-mainnet-tls.entrypoints=websecure"
|
|
- "traefik.http.routers.mp-suppliers-kimi-3-mainnet-tls.rule=Host(`mp-suppliers-kimi-3.vector.apexfusion.org`)"
|
|
- "traefik.http.routers.mp-suppliers-kimi-3-mainnet-tls.tls.certresolver=letsencrypt"
|
|
- "traefik.http.services.mp-suppliers-kimi-3-mainnet.loadbalancer.server.port=8080"
|
|
logging:
|
|
driver: json-file
|
|
options:
|
|
max-size: "10m"
|
|
max-file: "3"
|
|
|
|
networks:
|
|
marketplace-mainnet-net:
|
|
external: true
|
|
name: marketplace-mainnet-net
|
|
traefik-net:
|
|
external: true
|
|
name: traefik-net
|