Isolating containers from internet access to enhance security.

This commit is contained in:
ben
2023-03-04 22:22:22 +01:00
parent f3eae794ac
commit 207592ff57
9 changed files with 53 additions and 22 deletions

View File

@@ -7,8 +7,15 @@ RUN update-ca-certificates
RUN cargo install --target x86_64-unknown-linux-musl aichat
ADD src/aichat/entrypoint.sh /entrypoint.sh
ADD src/aichat/config.yaml /aichat_config_tpl.yaml
RUN chmod 755 entrypoint.sh
RUN useradd -ms /bin/bash aichat
USER aichat
WORKDIR /home/aichat
RUN mkdir -p /home/aichat/.config/aichat
ADD src/aichat/config.yaml /home/aichat/.config/aichat/config.yaml
ADD src/aichat/roles /home/aichat/.config/aichat/roles
ENTRYPOINT ["/entrypoint.sh"]

View File

@@ -1,4 +1,6 @@
#!/bin/sh
mkdir -p ~/.config/aichat
cat /aichat_config_tpl.yaml | sed "s/__LLM_API_KEY__/${LLM_API_KEY}/" | sed "s/localhost/ollama/" >~/.config/aichat/config.yaml
cat ~/.config/aichat/config.yaml | grep -v 'api_key' | sed "s/localhost/ollama/" | tee ~/.config/aichat/config.yaml.tmp
mv ~/.config/aichat/config.yaml.tmp ~/.config/aichat/config.yaml
aichat --serve 0.0.0.0