b2379e3275
Module 5 phase 4 step 1 (docs/kb/modules/05-faza4-plan.md, §4): first user-facing HTTP entry point to the KB. FastAPI wrapping kb_retrieval.cascade_query/flat_query — GET /search (query_text -> embed via Ollama@SOLARIA -> cascade/flat -> envelope join -> JSON with per-source links) and GET /healthz. Search API only, no answer synthesis (phase 5) and no server-side dist filtering — the 0.45/0.55 colour thresholds are a frontend concern (plan §7, a later step). Hard startup invariant (plan §2 decision 2): refuses to start unless the configured EMBED_MODEL is present in both document_chunk.model and document_summary.embedding_model. Note the latter: document_summary.model is the LLM that *wrote* the summary (claude-haiku-4-5/gemma3:12b), not the embedder — checked live against kb-postgres@PIHA before writing this, see app/startup.py's docstring. Verified end-to-end with a live docker run: the invariant crash-loops on a mismatched EMBED_MODEL and passes through to a real /search hit against the live corpus with a correct model. Repo-only: no deploy, no npm/OIDC/DNS wiring (plan §8, later step), no local embed fallback (plan §5, later step) — Ollama@SOLARIA is called directly and a failure surfaces as 503, not a crash. Also: scripts/deploy/deploy.sh's gate now builds each service via `docker compose build` instead of a raw `docker build <svc_dir>`, so a service whose docker-compose.yml declares a repo-root build context (needed here to COPY packages/kb-retrieval/, the packages/ Dockerfile convention already documented in CLAUDE.md) resolves the same way in the gate as it does at real deploy time (deploy-node.sh's `docker compose ... up --build`). No behavior change for existing single-context services — verified against llm-gateway's compose file. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
124 lines
3.9 KiB
YAML
124 lines
3.9 KiB
YAML
host: piha
|
|
|
|
services:
|
|
ha-diag-agent:
|
|
role: ha-diagnostic-agent
|
|
deployment_model: docker-compose
|
|
exposure: local-only
|
|
offline_required: false
|
|
depends_on:
|
|
local: []
|
|
external: [homeassistant]
|
|
config:
|
|
target_url: http://localhost:8123
|
|
location_tag: "ken"
|
|
events_dir: /opt/homelab/events/piha
|
|
runtime:
|
|
config_path: /opt/homelab/config/ha-diag-agent
|
|
data_path: /var/lib/ha-diag-agent
|
|
|
|
node-agent:
|
|
role: node-stability-monitor
|
|
deployment_model: docker-compose
|
|
exposure: local-only
|
|
offline_required: true
|
|
depends_on:
|
|
local: []
|
|
external: []
|
|
runtime:
|
|
config_path: /opt/homelab/config/node-agent
|
|
data_path: /opt/homelab/state
|
|
logs_path: /opt/homelab/events
|
|
|
|
brain-watchdog:
|
|
role: control-plane-watchdog
|
|
deployment_model: docker-compose
|
|
exposure: private
|
|
offline_required: false
|
|
depends_on:
|
|
local: []
|
|
external: [control-plane]
|
|
runtime:
|
|
config_path: /opt/homelab/config/brain-watchdog
|
|
|
|
vikunja:
|
|
role: task-management
|
|
deployment_model: docker-compose
|
|
exposure: private # public via npm reverse proxy at vikunja.okit.pl
|
|
offline_required: false
|
|
depends_on:
|
|
local: []
|
|
external: [forgejo] # OIDC identity provider
|
|
ports:
|
|
- name: http
|
|
container_port: 3456
|
|
protocol: tcp
|
|
runtime:
|
|
# secrets (.env) + OIDC config (config.yml) live alongside the compose file
|
|
config_path: services/vikunja
|
|
# data is in Docker named volumes: vikunja_vikunja_db, vikunja_vikunja_files
|
|
|
|
llm-gateway:
|
|
role: llm-router # FastAPI proxy -> Ollama @ SOLARIA :11434
|
|
deployment_model: docker-compose
|
|
exposure: private # Tailscale-only bind (TAILSCALE_BIND_IP); no public ingress
|
|
offline_required: false
|
|
depends_on:
|
|
local: []
|
|
external: [ollama] # SOLARIA may be powered down -> routes 502, health stays ok
|
|
ports:
|
|
- name: http
|
|
container_port: 8080
|
|
protocol: tcp
|
|
runtime:
|
|
# .env (TAILSCALE_BIND_IP) lives alongside the compose file; stateless, no data path
|
|
config_path: services/llm-gateway
|
|
|
|
node_exporter:
|
|
role: metrics-exporter
|
|
deployment_model: docker-compose
|
|
exposure: local-only
|
|
offline_required: true
|
|
depends_on:
|
|
local: []
|
|
external: []
|
|
runtime:
|
|
# textfile collector reads /opt/homelab/state/node-exporter (module 5 phase 3 step 5,
|
|
# docs/kb/modules/05-faza3-plan.md §7.2 — kb-ingest.prom) via the existing /:/host:ro
|
|
# mount, see hosts/piha/runtime/node_exporter/docker-compose.override.yml.
|
|
data_path: /opt/homelab/state/node-exporter
|
|
|
|
kb-postgres:
|
|
role: kb-database # KB spine: Postgres 16 + pgvector (always-on)
|
|
deployment_model: docker-compose
|
|
exposure: local-only # Tailscale-accessible; no public ingress
|
|
offline_required: false
|
|
depends_on:
|
|
local: []
|
|
external: []
|
|
ports:
|
|
- name: postgres
|
|
host_port: 5433
|
|
protocol: tcp
|
|
runtime:
|
|
config_path: /opt/homelab/config/kb-postgres
|
|
# data is in Docker named volume kb_postgres_data — must land on the NVMe
|
|
# (Docker data-root on /home); see hosts/piha/runtime/kb-postgres override.
|
|
|
|
kb-query:
|
|
role: kb-search-api # module 5 phase 4: FastAPI wrapper over kb_retrieval cascade/flat query
|
|
deployment_model: docker-compose
|
|
exposure: private # LAN bind (LAN_BIND_IP); npm@PIHA vhost + OIDC is a later step
|
|
offline_required: false
|
|
depends_on:
|
|
local: [kb-postgres]
|
|
external: [ollama] # SOLARIA may be offline -> /search 502/503, /healthz stays ok
|
|
ports:
|
|
- name: http
|
|
container_port: 8080
|
|
host_port: 8230
|
|
protocol: tcp
|
|
runtime:
|
|
# .env (KB_DSN, LAN_BIND_IP) lives alongside the compose file; stateless, no data path
|
|
config_path: services/kb-query
|