APIARY/llm-worker/docker-compose.captured-data.yml at main · Xore/APIARY · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
# Exposure override for #83's explicitly authorized canary. The base file is
# useful and healthy without this override; adding it grants read-only capture
# access plus internal-only routes to Elasticsearch and the shared Ollama server.
# All three worker gates still default false/true/false in the safe direction.

services:
  llm-worker:
    environment:
      ES_HOST: 'http://elasticsearch:9200'
      OLLAMA_URL: 'http://ollama:11434'
      LLM_EXPECTED_MODEL_DIGEST: 'bdbd181c33f2ed1b31c972991882db3cf4d192569092138a7d29e973cd9debe8'
      LLM_PAYLOAD_ROOTS: '/payloads/cowrie:/payloads/scripts/script-payloads'
    networks:
      - synthetic-only
      - llm-data
      - llm-backend
    volumes:
      # Cowrie saves uploaded/downloaded files by SHA-256. Text-only scanning
      # is additionally enforced in worker.py; nothing here is executed.
      - /opt/stacks/apiary/logs/cowrie/downloads:/payloads/cowrie:ro
      # Dashboard-retained inline scripts. The live canary must verify that
      # the unprivileged worker can read the intended files without widening
      # the volume's permissions globally.
      - dashboard-state:/payloads/scripts:ro

networks:
  llm-data:
    name: honeypot-llm-data
    external: true
  llm-backend:
    name: honeypot-llm
    external: true

volumes:
  dashboard-state:
    name: dashboard-state
    external: true