pyr0ball
53b07568d9
API additions (dev-api.py split across this and next commit):
- /api/jobs/{job_id}/qa GET/PATCH/suggest — Interview Prep answer storage + LLM suggestions
- /api/settings/ui-preference POST — persist streamlit/vue preference to user.yaml
- cancel_task() added to scripts/db.py (per-task cancel for Danger Zone)
Vue / UI:
- AppNav: "⚡ Classic" button to switch back to Streamlit UI (writes cookie + persists to user.yaml)
- ApplyWorkspace: Resume Highlights panel (collapsible skills/domains/keywords with job-match highlighting)
- SettingsView: hide Data tab in cloud mode (showData guard)
- ResumeProfileView: minor improvements
- useApi.ts: error handling improvements
Infra:
- compose.cloud.yml: add api service (uvicorn dev_api running in cloud container)
- docker/web/nginx.conf: proxy /api/* to api service in cloud mode
- README.md: Vue SPA now listed as Free tier feature
99 lines
3.2 KiB
YAML
99 lines
3.2 KiB
YAML
# compose.cloud.yml — Multi-tenant cloud stack for menagerie.circuitforge.tech/peregrine
|
|
#
|
|
# Each authenticated user gets their own encrypted SQLite data tree at
|
|
# /devl/menagerie-data/<user-id>/peregrine/
|
|
#
|
|
# Caddy injects the Directus session cookie as X-CF-Session header before forwarding.
|
|
# cloud_session.py resolves user_id → per-user db_path at session init.
|
|
#
|
|
# Usage:
|
|
# docker compose -f compose.cloud.yml --project-name peregrine-cloud up -d
|
|
# docker compose -f compose.cloud.yml --project-name peregrine-cloud down
|
|
# docker compose -f compose.cloud.yml --project-name peregrine-cloud logs app -f
|
|
|
|
services:
|
|
app:
|
|
build:
|
|
context: ..
|
|
dockerfile: peregrine/Dockerfile.cfcore
|
|
container_name: peregrine-cloud
|
|
ports:
|
|
- "8505:8501"
|
|
volumes:
|
|
- /devl/menagerie-data:/devl/menagerie-data # per-user data trees
|
|
- ./config/llm.cloud.yaml:/app/config/llm.yaml:ro # cloud-safe backends only (no claude_code/copilot/anthropic)
|
|
environment:
|
|
- CLOUD_MODE=true
|
|
- CLOUD_DATA_ROOT=/devl/menagerie-data
|
|
- DIRECTUS_JWT_SECRET=${DIRECTUS_JWT_SECRET}
|
|
- CF_SERVER_SECRET=${CF_SERVER_SECRET}
|
|
- PLATFORM_DB_URL=${PLATFORM_DB_URL}
|
|
- HEIMDALL_URL=${HEIMDALL_URL:-http://cf-license:8000}
|
|
- HEIMDALL_ADMIN_TOKEN=${HEIMDALL_ADMIN_TOKEN}
|
|
- STAGING_DB=/devl/menagerie-data/cloud-default.db # fallback only — never used
|
|
- DOCS_DIR=/tmp/cloud-docs
|
|
- STREAMLIT_SERVER_BASE_URL_PATH=peregrine
|
|
- PYTHONUNBUFFERED=1
|
|
- PEREGRINE_CADDY_PROXY=1
|
|
- CF_ORCH_URL=http://host.docker.internal:7700
|
|
- DEMO_MODE=false
|
|
- FORGEJO_API_TOKEN=${FORGEJO_API_TOKEN:-}
|
|
depends_on:
|
|
searxng:
|
|
condition: service_healthy
|
|
extra_hosts:
|
|
- "host.docker.internal:host-gateway"
|
|
restart: unless-stopped
|
|
|
|
api:
|
|
build:
|
|
context: ..
|
|
dockerfile: peregrine/Dockerfile.cfcore
|
|
command: >
|
|
bash -c "uvicorn dev_api:app --host 0.0.0.0 --port 8601"
|
|
volumes:
|
|
- /devl/menagerie-data:/devl/menagerie-data
|
|
- ./config/llm.cloud.yaml:/app/config/llm.yaml:ro
|
|
environment:
|
|
- CLOUD_MODE=true
|
|
- CLOUD_DATA_ROOT=/devl/menagerie-data
|
|
- STAGING_DB=/devl/menagerie-data/cloud-default.db
|
|
- DIRECTUS_JWT_SECRET=${DIRECTUS_JWT_SECRET}
|
|
- CF_SERVER_SECRET=${CF_SERVER_SECRET}
|
|
- PLATFORM_DB_URL=${PLATFORM_DB_URL}
|
|
- HEIMDALL_URL=${HEIMDALL_URL:-http://cf-license:8000}
|
|
- HEIMDALL_ADMIN_TOKEN=${HEIMDALL_ADMIN_TOKEN}
|
|
- PYTHONUNBUFFERED=1
|
|
- FORGEJO_API_TOKEN=${FORGEJO_API_TOKEN:-}
|
|
extra_hosts:
|
|
- "host.docker.internal:host-gateway"
|
|
restart: unless-stopped
|
|
|
|
web:
|
|
build:
|
|
context: .
|
|
dockerfile: docker/web/Dockerfile
|
|
args:
|
|
VITE_BASE_PATH: /peregrine/
|
|
ports:
|
|
- "8508:80"
|
|
depends_on:
|
|
- api
|
|
restart: unless-stopped
|
|
|
|
searxng:
|
|
image: searxng/searxng:latest
|
|
volumes:
|
|
- ./docker/searxng:/etc/searxng:ro
|
|
healthcheck:
|
|
test: ["CMD", "wget", "-q", "--spider", "http://localhost:8080/"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 3
|
|
restart: unless-stopped
|
|
# No host port — internal only
|
|
|
|
networks:
|
|
default:
|
|
external: true
|
|
name: caddy-proxy_caddy-internal
|