opencode-server/compose.yml at main · icco/opencode-server · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
services:
  opencode:
    image: ghcr.io/icco/opencode-server:main
    restart: unless-stopped
    stop_grace_period: 30s
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
    pids_limit: 2048
    mem_limit: 4g
    cpus: 2
    environment:
      GH_TOKEN: ${GH_TOKEN:-}
      GOOGLE_GENERATIVE_AI_API_KEY: ${GOOGLE_GENERATIVE_AI_API_KEY:-}
      OPENCODE_GEMINI_PROJECT_ID: ${OPENCODE_GEMINI_PROJECT_ID:-}
      LUNCHMONEY_API_TOKEN: ${LUNCHMONEY_API_TOKEN:-}
      GRAFANA_URL: ${GRAFANA_URL:-}
      GRAFANA_SERVICE_ACCOUNT_TOKEN: ${GRAFANA_SERVICE_ACCOUNT_TOKEN:-}
      KARAKEEP_API_ADDR: ${KARAKEEP_API_ADDR:-}
      KARAKEEP_API_KEY: ${KARAKEEP_API_KEY:-}
      OPENCODE_PASSWORD: ${OPENCODE_PASSWORD:?Set OPENCODE_PASSWORD}
      ANTHROPIC_API_KEY: ${ANTHROPIC_API_KEY:-}
      OPENAI_API_KEY: ${OPENAI_API_KEY:-}
    volumes:
      - data:/data
      - type: bind
        source: ${HOME}/.ssh
        target: /data/.ssh
        read_only: true
        bind:
          create_host_path: false
  openchamber:
    image: ghcr.io/icco/opencode-server:main
    restart: unless-stopped
    stop_grace_period: 30s
    command:
      - openchamber
      - serve
      - --foreground
      - --host
      - 0.0.0.0
      - --port
      - "3000"
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
    pids_limit: 2048
    mem_limit: 4g
    cpus: 2
    environment:
      GH_TOKEN: ${GH_TOKEN:-}
      OPENCODE_HOST: http://opencode:4096
      OPENCODE_SKIP_START: "true"
      OPENCODE_PASSWORD: ${OPENCODE_PASSWORD:?Set OPENCODE_PASSWORD}
      OPENCODE_SERVER_PASSWORD: ${OPENCODE_PASSWORD:?Set OPENCODE_PASSWORD}
      OPENCHAMBER_UI_PASSWORD: ${OPENCHAMBER_UI_PASSWORD:?Set OPENCHAMBER_UI_PASSWORD}
      OPENCHAMBER_ENTERPRISE_MODE: "1"
      OPENCHAMBER_ALLOW_NETWORK_ACCESS: "1"
    depends_on:
      opencode:
        condition: service_healthy
    healthcheck:
      test:
        - CMD
        - /usr/local/bin/openchamber-healthcheck.sh
      interval: 30s
      timeout: 5s
      start_period: 60s
      retries: 3
    ports:
      - 127.0.0.1:3000:3000
    volumes:
      - data:/data
      - type: bind
        source: ${HOME}/.ssh
        target: /data/.ssh
        read_only: true
        bind:
          create_host_path: false
volumes:
  data: