Add docs/INSTALL.md with two installation paths: - Option A: Docker Compose (all-in-one with PostgreSQL, MinIO, OpenLDAP, and optional nginx) - Option B: Daemon install (systemd with external services, links to setup instructions for PostgreSQL, MinIO, FreeIPA, nginx) Includes LDAP user/group management instructions, verification steps, and upgrade procedures for both paths. Update README.md Quick Start to point to INSTALL.md, add to docs table. Add redirect banner to DEPLOYMENT.md for first-time users. Add comments to docker-compose.prod.yaml noting unsupported env vars.
51 lines
1.8 KiB
YAML
51 lines
1.8 KiB
YAML
# Production Docker Compose for Silo
|
|
# Uses external PostgreSQL (psql.example.internal) and MinIO (minio.example.internal)
|
|
#
|
|
# Usage:
|
|
# export SILO_DB_PASSWORD=<your-password>
|
|
# export SILO_MINIO_ACCESS_KEY=<your-access-key>
|
|
# export SILO_MINIO_SECRET_KEY=<your-secret-key>
|
|
# docker compose -f docker-compose.prod.yaml up -d
|
|
|
|
services:
|
|
silo:
|
|
build:
|
|
context: ..
|
|
dockerfile: build/package/Dockerfile
|
|
container_name: silod
|
|
restart: unless-stopped
|
|
environment:
|
|
# Database connection (psql.example.internal)
|
|
# Supported as direct env var overrides in the Go config loader:
|
|
SILO_DB_HOST: psql.example.internal
|
|
SILO_DB_NAME: silo
|
|
SILO_DB_USER: silo
|
|
SILO_DB_PASSWORD: ${SILO_DB_PASSWORD:?Database password required}
|
|
# Note: SILO_DB_PORT and SILO_DB_SSLMODE are NOT supported as direct
|
|
# env var overrides. Set these in config.yaml instead, or use ${VAR}
|
|
# syntax in the YAML file. See docs/CONFIGURATION.md for details.
|
|
|
|
# MinIO storage (minio.example.internal)
|
|
# Supported as direct env var overrides:
|
|
SILO_MINIO_ENDPOINT: minio.example.internal:9000
|
|
SILO_MINIO_ACCESS_KEY: ${SILO_MINIO_ACCESS_KEY:?MinIO access key required}
|
|
SILO_MINIO_SECRET_KEY: ${SILO_MINIO_SECRET_KEY:?MinIO secret key required}
|
|
# Note: SILO_MINIO_BUCKET and SILO_MINIO_USE_SSL are NOT supported as
|
|
# direct env var overrides. Set these in config.yaml instead.
|
|
ports:
|
|
- "8080:8080"
|
|
volumes:
|
|
- ../schemas:/etc/silo/schemas:ro
|
|
- ./config.prod.yaml:/etc/silo/config.yaml:ro
|
|
healthcheck:
|
|
test: ["CMD", "wget", "-qO-", "http://localhost:8080/health"]
|
|
interval: 30s
|
|
timeout: 5s
|
|
retries: 3
|
|
start_period: 10s
|
|
logging:
|
|
driver: "json-file"
|
|
options:
|
|
max-size: "10m"
|
|
max-file: "3"
|