mirror of
https://github.com/KeygraphHQ/shannon.git
synced 2026-05-28 19:31:34 +02:00
ezl-keygraph
9b1abd9ec0
Bring in changes from shannon-npx: npx-distributable CLI package (cli/), semantic-release CI/CD workflows, ephemeral per-scan worker containers, TOML config support, setup wizard, and workspace management. Preserves all shannon-only changes: security hardening (localhost-bound ports, MCP env allowlist, path traversal guard), updated benchmarks (XBEN 19/31/35/44), README assets, and prompt injection disclaimer. Applies security hardening to cli/infra/compose.yml as well.
53 lines
1.8 KiB
YAML
53 lines
1.8 KiB
YAML
networks:
|
|
default:
|
|
name: shannon-net
|
|
|
|
services:
|
|
temporal:
|
|
image: temporalio/temporal:latest
|
|
container_name: shannon-temporal
|
|
command: ["server", "start-dev", "--db-filename", "/home/temporal/temporal.db", "--ip", "0.0.0.0"]
|
|
ports:
|
|
- "127.0.0.1:7233:7233" # gRPC
|
|
- "127.0.0.1:8233:8233" # Web UI (built-in)
|
|
volumes:
|
|
- temporal-data:/home/temporal
|
|
healthcheck:
|
|
test: ["CMD", "temporal", "operator", "cluster", "health", "--address", "localhost:7233"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 10
|
|
start_period: 30s
|
|
|
|
# Optional: claude-code-router for multi-model support
|
|
# Start with: ROUTER=true ./shannon start ...
|
|
router:
|
|
image: node:20-slim
|
|
container_name: shannon-router
|
|
profiles: ["router"] # Only starts when explicitly requested
|
|
command: >
|
|
sh -c "apt-get update && apt-get install -y gettext-base &&
|
|
npm install -g @musistudio/claude-code-router &&
|
|
mkdir -p /root/.claude-code-router &&
|
|
envsubst < /config/router-config.json > /root/.claude-code-router/config.json &&
|
|
ccr start"
|
|
ports:
|
|
- "127.0.0.1:3456:3456"
|
|
volumes:
|
|
- ./configs/router-config.json:/config/router-config.json:ro
|
|
environment:
|
|
- HOST=0.0.0.0
|
|
- ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY:-}
|
|
- OPENAI_API_KEY=${OPENAI_API_KEY:-}
|
|
- OPENROUTER_API_KEY=${OPENROUTER_API_KEY:-}
|
|
- ROUTER_DEFAULT=${ROUTER_DEFAULT:-openai,gpt-4o}
|
|
healthcheck:
|
|
test: ["CMD", "node", "-e", "require('http').get('http://localhost:3456/health', r => process.exit(r.statusCode === 200 ? 0 : 1)).on('error', () => process.exit(1))"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 5
|
|
start_period: 30s
|
|
|
|
volumes:
|
|
temporal-data:
|