Files
guarddog-nexus/docker-compose.yml
Marker689 d23abe8b4b feat: лимит конкурентных сканов через asyncio.Semaphore
- config.py: MAX_CONCURRENT_SCANS (default=4)
- harvester.py: глобальный _scan_semaphore оборачивает scan_package()
  — при N одновременных сканах, (N+1)-й будет ждать освобождения слота
  — download и SHA256 не лимитируются, только guarddog subprocess
- docker-compose.yml, .env.example: переменная добавлена
2026-05-10 05:52:23 +03:00

50 lines
1.2 KiB
YAML

services:
guarddog-nexus:
build: .
ports:
- "8080:8080"
environment:
NEXUS_URL: http://nexus:8081
NEXUS_USERNAME: admin
NEXUS_PASSWORD: "${NEXUS_PASSWORD:-admin123}"
LOG_LEVEL: INFO
LOG_SYSLOG_HOST: ""
HOST: "0.0.0.0"
PORT: "8080"
LLM_ENABLED: "${LLM_ENABLED:-0}"
LLM_API_BASE: "${LLM_API_BASE:-https://api.openai.com/v1}"
LLM_API_KEY: "${LLM_API_KEY:-}"
LLM_MODEL: "${LLM_MODEL:-gpt-4o-mini}"
LLM_TIMEOUT_SECONDS: "${LLM_TIMEOUT_SECONDS:-30}"
MAX_CONCURRENT_SCANS: "${MAX_CONCURRENT_SCANS:-4}"
volumes:
- ./data:/data
depends_on:
nexus-setup:
condition: service_completed_successfully
restart: unless-stopped
nexus:
image: sonatype/nexus3:3.79.0
ports:
- "8081:8081"
volumes:
- nexus-data:/nexus-data
restart: unless-stopped
nexus-setup:
image: alpine:3.21
volumes:
- ./scripts/setup-nexus.sh:/setup.sh:ro
- nexus-data:/nexus-data:ro
environment:
NEXUS_URL: http://nexus:8081
ADMIN_PASSWORD: "${NEXUS_PASSWORD:-admin123}"
WEBHOOK_URL: http://guarddog-nexus:8080/webhooks/nexus
entrypoint: ["/bin/sh", "/setup.sh"]
depends_on:
- nexus
volumes:
nexus-data: