87494aae95
Some checks failed
CI / Detect changes (push) Has been cancelled
CI / API Lint (push) Has been cancelled
CI / API Tests (push) Has been cancelled
CI / Scanner Lint (push) Has been cancelled
CI / Scanner Tests (push) Has been cancelled
CI / Banner Lint & Typecheck (push) Has been cancelled
CI / Banner Tests (push) Has been cancelled
CI / Banner Build (push) Has been cancelled
CI / Admin UI Typecheck (push) Has been cancelled
CI / Admin UI Tests (push) Has been cancelled
CI / Admin UI Build (push) Has been cancelled
The root Dockerfile bakes api + scanner + worker + beat into a single container managed by supervisord, but the [program:scanner] entry was shipped with autostart=false and the api/worker had no SCANNER_SERVICE_URL in their environment, so run_scan tasks always got ConnectError trying to reach http://localhost:8001. Enable the scanner, point the api/worker/beat at the in-process scanner at http://127.0.0.1:8001, and start the scanner before the api/worker so its port is listening by the time scan tasks start running.
75 lines
1.9 KiB
Plaintext
75 lines
1.9 KiB
Plaintext
[supervisord]
|
|
nodaemon=true
|
|
logfile=/var/log/supervisor/supervisord.log
|
|
pidfile=/var/run/supervisord.pid
|
|
user=root
|
|
|
|
[program:nginx]
|
|
command=nginx -g "daemon off;" -c /etc/nginx/conf.d/default.conf
|
|
autostart=true
|
|
autorestart=true
|
|
stdout_logfile=/dev/stdout
|
|
stdout_logfile_maxbytes=0
|
|
stderr_logfile=/dev/stderr
|
|
stderr_logfile_maxbytes=0
|
|
stopwaitsecs=5
|
|
killasgroup=true
|
|
priority=100
|
|
|
|
[program:api]
|
|
command=sh -c "uvicorn src.main:app --host 127.0.0.1 --port 8000 --workers ${API_WORKERS:-4} --access-log --proxy-headers --forwarded-allow-ips '*'"
|
|
directory=/app
|
|
autostart=true
|
|
autorestart=true
|
|
stdout_logfile=/dev/stdout
|
|
stdout_logfile_maxbytes=0
|
|
stderr_logfile=/dev/stderr
|
|
stderr_logfile_maxbytes=0
|
|
stopwaitsecs=10
|
|
killasgroup=true
|
|
priority=200
|
|
environment=PYTHONUNBUFFERED="1",SCANNER_SERVICE_URL="http://127.0.0.1:8001"
|
|
|
|
[program:worker]
|
|
command=sh -c "SCANNER_SERVICE_URL=http://127.0.0.1:8001 celery -A src.celery_app worker --loglevel=info --concurrency=2"
|
|
directory=/app
|
|
autostart=true
|
|
autorestart=true
|
|
stdout_logfile=/dev/stdout
|
|
stdout_logfile_maxbytes=0
|
|
stderr_logfile=/dev/stderr
|
|
stderr_logfile_maxbytes=0
|
|
stopwaitsecs=30
|
|
killasgroup=true
|
|
priority=300
|
|
environment=PYTHONUNBUFFERED="1",SCANNER_SERVICE_URL="http://127.0.0.1:8001"
|
|
|
|
[program:beat]
|
|
command=sh -c "SCANNER_SERVICE_URL=http://127.0.0.1:8001 celery -A src.celery_app beat --loglevel=info"
|
|
directory=/app
|
|
autostart=true
|
|
autorestart=true
|
|
stdout_logfile=/dev/stdout
|
|
stdout_logfile_maxbytes=0
|
|
stderr_logfile=/dev/stderr
|
|
stderr_logfile_maxbytes=0
|
|
stopwaitsecs=10
|
|
killasgroup=true
|
|
priority=400
|
|
environment=PYTHONUNBUFFERED="1",SCANNER_SERVICE_URL="http://127.0.0.1:8001"
|
|
|
|
[program:scanner]
|
|
command=python -m src.worker
|
|
directory=/app
|
|
autostart=true
|
|
autorestart=true
|
|
startsecs=10
|
|
stdout_logfile=/dev/stdout
|
|
stdout_logfile_maxbytes=0
|
|
stderr_logfile=/dev/stderr
|
|
stderr_logfile_maxbytes=0
|
|
stopwaitsecs=10
|
|
killasgroup=true
|
|
priority=150
|
|
environment=PYTHONUNBUFFERED="1"
|