4d94aa5040
Same pattern as the gateway (a54fdcb): the mp-suppliers-* DNS records are no
longer Cloudflare-proxied, so each supplier gets a websecure router with the
letsencrypt resolver and its :80 router becomes a permanent HTTPS redirect.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
88 lines
3.8 KiB
YAML
88 lines
3.8 KiB
YAML
# deploy/mainnet/docker-compose.supplier-tts.yml — TTS Supplier — MAINNET
|
|
#
|
|
# Third mainnet supplier, dedicated to capability `audio.synthesize.piper.v1`.
|
|
# Reaches the colocated PRIVATE PiperTTS container at the docker-DNS name
|
|
# `marketplace-mainnet-tts-piper:8000`. Traefik publishes it at
|
|
# `mp-suppliers-tts.vector.apexfusion.org`. Coexists with the ollama-backed
|
|
# (docker-compose.supplier.yml) and ChatGPT-backed (docker-compose.supplier-gpt.yml)
|
|
# suppliers.
|
|
#
|
|
# Pre-flight networks (must already exist):
|
|
# docker network create marketplace-mainnet-net # one-shot
|
|
# # traefik-net is created by the Traefik project
|
|
#
|
|
# Pre-flight services:
|
|
# docker compose -f docker-compose.tts-piper.yml up -d
|
|
# bash deploy/mainnet/install-voice-extras.sh # one-shot voice install
|
|
#
|
|
# Bring up:
|
|
# docker compose -f deploy/mainnet/docker-compose.supplier-tts.yml up -d --build
|
|
|
|
name: marketplace-mainnet-supplier-tts
|
|
|
|
services:
|
|
supplier:
|
|
build:
|
|
context: ../..
|
|
dockerfile: supplier/Dockerfile
|
|
container_name: marketplace-mainnet-supplier-tts
|
|
restart: unless-stopped
|
|
env_file:
|
|
# Self-contained env for the TTS variant — kept separate from the
|
|
# canonical ../../supplier/.env (ollama-backed) and ../../supplier/.env.gpt
|
|
# (ChatGPT-backed). Holds this supplier's distinct SUPPLIER_PRIV_KEY_HEX,
|
|
# ADVERT_REF, ADVERT_*, and the shared mainnet plumbing duplicated
|
|
# in full (NETWORK_ID, OGMIOS_URL, VECTOR_ZERO_TIME_MS, ref-script
|
|
# UTxOs, LIVE_CHAIN). No env_file ordering / override magic.
|
|
- path: ../../supplier/.env.tts
|
|
required: false
|
|
environment:
|
|
CAPABILITY_KIND: "tts"
|
|
# Internal docker-DNS — Piper is private on marketplace-mainnet-net,
|
|
# no public hostname for it.
|
|
PIPER_URL: "http://marketplace-mainnet-tts-piper:8000"
|
|
PORT: "8080"
|
|
# Enable LiveOgmiosProvider so submitTx/awaitTx actually broadcast.
|
|
# Mirrors the other mainnet supplier composes; without this the
|
|
# supplier silently falls back to ReadOnlyOgmiosProvider and
|
|
# Claim/Submit never reach chain.
|
|
LIVE_CHAIN: "1"
|
|
# NETWORK_ID and OGMIOS_URL intentionally not pinned here — they MUST
|
|
# come from the operator-provided supplier/.env.tts on a mainnet host.
|
|
# Setting them via compose would be a footgun: a stray re-up on
|
|
# testnet hardware could silently re-tag the supplier as mainnet.
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "wget -qO- http://localhost:8080/healthz >/dev/null || exit 1"]
|
|
interval: 20s
|
|
timeout: 5s
|
|
retries: 3
|
|
start_period: 15s
|
|
networks:
|
|
- marketplace-mainnet-net
|
|
- traefik-net
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.docker.network=traefik-net"
|
|
- "traefik.http.routers.mp-suppliers-tts-mainnet.entrypoints=web"
|
|
- "traefik.http.routers.mp-suppliers-tts-mainnet.rule=Host(`mp-suppliers-tts.vector.apexfusion.org`)"
|
|
- "traefik.http.routers.mp-suppliers-tts-mainnet.middlewares=mp-suppliers-tts-mainnet-https"
|
|
- "traefik.http.middlewares.mp-suppliers-tts-mainnet-https.redirectscheme.scheme=https"
|
|
- "traefik.http.middlewares.mp-suppliers-tts-mainnet-https.redirectscheme.permanent=true"
|
|
- "traefik.http.routers.mp-suppliers-tts-mainnet-tls.entrypoints=websecure"
|
|
- "traefik.http.routers.mp-suppliers-tts-mainnet-tls.rule=Host(`mp-suppliers-tts.vector.apexfusion.org`)"
|
|
- "traefik.http.routers.mp-suppliers-tts-mainnet-tls.tls.certresolver=letsencrypt"
|
|
- "traefik.http.services.mp-suppliers-tts-mainnet.loadbalancer.server.port=8080"
|
|
logging:
|
|
driver: json-file
|
|
options:
|
|
max-size: "10m"
|
|
max-file: "3"
|
|
|
|
networks:
|
|
marketplace-mainnet-net:
|
|
external: true
|
|
name: marketplace-mainnet-net
|
|
traefik-net:
|
|
external: true
|
|
name: traefik-net
|