diff options
| author | ben | 2023-03-04 22:22:22 +0100 |
|---|---|---|
| committer | ben | 2025-03-04 21:47:15 +0100 |
| commit | 207592ff57938536eafa99f2632d670d2bb9457e (patch) | |
| tree | 25e89078fad54f86d2691b21e8390b36e44e1aa5 /docker-compose.yml | |
| parent | f3eae794ace20d10edc4e970ce6258a47fb3b4d9 (diff) | |
| download | ai_env-207592ff57938536eafa99f2632d670d2bb9457e.tar.gz ai_env-207592ff57938536eafa99f2632d670d2bb9457e.tar.bz2 ai_env-207592ff57938536eafa99f2632d670d2bb9457e.tar.xz | |
Isolating containers from internet access to enhance security.
Diffstat (limited to 'docker-compose.yml')
| -rw-r--r-- | docker-compose.yml | 25 |
1 files changed, 22 insertions, 3 deletions
diff --git a/docker-compose.yml b/docker-compose.yml index 65638a9..f750995 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -17,6 +17,8 @@ services: retries: 5 start_period: 20s timeout: 10s + networks: + - nointernet openedai-speech: build: @@ -40,12 +42,16 @@ services: retries: 5 start_period: 10s timeout: 10s + networks: + - nointernet - llm_provision: + ollama_provision: build: - dockerfile: src/llm_provision/Dockerfile + dockerfile: src/ollama_provision/Dockerfile environment: - MODELS=qwen2.5:latest,qwen2.5-coder:32b,nomic-embed-text:latest,gemma2:latest,mistral:latest,deepseek-r1:7b + volumes: + - ollama:/root/.ollama restart: no depends_on: ollama: @@ -53,6 +59,8 @@ services: restart: true links: - ollama + networks: + - internet aichat: build: @@ -69,11 +77,14 @@ services: interval: 30s timeout: 15s retries: 3 + networks: + - nointernet nginx: image: nginx volumes: - ./src/nginx/nginx.conf:/etc/nginx/templates/nginx.conf.template + - ./src/nginx/htpasswd:/etc/nginx/.htpasswd environment: - NGINX_ENVSUBST_OUTPUT_DIR=/etc/nginx - API_KEY=${LLM_API_KEY} @@ -90,9 +101,17 @@ services: - "8000:8000" - "8001:8001" restart: unless-stopped + networks: + - internet + - nointernet volumes: ollama: voices: speech-config: - hf-hub-cache: + +networks: + internet: + internal: false + nointernet: + internal: true |