-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathdocker-compose.yml
More file actions
83 lines (79 loc) · 2.89 KB
/
docker-compose.yml
File metadata and controls
83 lines (79 loc) · 2.89 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
# =============================================================================
# csharp — Windows DFIR triage agent
# =============================================================================
include:
- path: ../shared/docker-compose.ollama.yml
services:
arcp-runtime:
build:
context: .
dockerfile: Dockerfile
target: runtime
args:
ARCP_SDK_VERSION: ${ARCP_SDK_VERSION:-latest}
image: arcp-sdk-examples/csharp-runtime:dev
container_name: arcp-csharp-runtime
depends_on:
ollama:
condition: service_healthy
environment:
ROLE: runtime
ASPNETCORE_URLS: http://0.0.0.0:${ARCP_RUNTIME_PORT:-8080}
DOTNET_RUNNING_IN_CONTAINER: "true"
OLLAMA_URL: ${OLLAMA_URL:-http://ollama:11434}
OLLAMA_MODEL: ${OLLAMA_MODEL:-qwen2.5:1.5b-instruct}
ARCP_RUNTIME_HOST: ${ARCP_RUNTIME_HOST:-0.0.0.0}
ARCP_RUNTIME_PORT: ${ARCP_RUNTIME_PORT:-8080}
ARCP_RUNTIME_PATH: ${ARCP_RUNTIME_PATH:-/arcp}
ARCP_AUTH_TOKEN: ${ARCP_AUTH_TOKEN:-dev-token-change-me}
CASES_DIR: ${CASES_DIR:-/cases}
REPORTS_DIR: ${REPORTS_DIR:-/reports}
CASE_BUDGET_USD: ${CASE_BUDGET_USD:-2.00}
PER_CLASS_BUDGET_USD: ${PER_CLASS_BUDGET_USD:-0.30}
SUSPICION_THRESHOLD: ${SUSPICION_THRESHOLD:-0.60}
PARSER_BIN_DIR: ${PARSER_BIN_DIR:-/opt/dfir-parsers}
PARSER_TIMEOUT_MS: ${PARSER_TIMEOUT_MS:-15000}
LOG_LEVEL: ${LOG_LEVEL:-Information}
volumes:
# Evidence volumes — read-only on the case side, read-write on outputs.
- cases:/cases:ro
- reports:/reports
# Synthetic sample case ships with the example.
- ./samples:/samples:ro
# Reserved mount point for an out-of-band Zimmerman parser bundle.
# Populate locally and uncomment to wire real Windows parsers.
# - ./parsers:/opt/dfir-parsers:ro
ports:
- "${ARCP_RUNTIME_PORT:-8080}:${ARCP_RUNTIME_PORT:-8080}"
healthcheck:
test: ["CMD-SHELL", "wget -qO- http://127.0.0.1:${ARCP_RUNTIME_PORT:-8080}/health || exit 1"]
interval: 5s
timeout: 3s
retries: 30
start_period: 30s
arcp-client:
build:
context: .
dockerfile: Dockerfile
target: client
args:
ARCP_SDK_VERSION: ${ARCP_SDK_VERSION:-latest}
image: arcp-sdk-examples/csharp-client:dev
container_name: arcp-csharp-client
depends_on:
arcp-runtime:
condition: service_healthy
environment:
ROLE: client
ARCP_RUNTIME_URL: ws://arcp-runtime:${ARCP_RUNTIME_PORT:-8080}${ARCP_RUNTIME_PATH:-/arcp}
ARCP_AUTH_TOKEN: ${ARCP_AUTH_TOKEN:-dev-token-change-me}
ARCP_CLIENT_NAME: ${ARCP_CLIENT_NAME:-dfir}
ARCP_CLIENT_VERSION: ${ARCP_CLIENT_VERSION:-1.0.0}
ARCP_CLIENT_TIMEOUT_MS: ${ARCP_CLIENT_TIMEOUT_MS:-30000}
LOG_LEVEL: ${LOG_LEVEL:-Information}
volumes:
- ./samples:/samples:ro
- reports:/reports
volumes:
cases:
reports: