FastAPI + Kali tools UI for authorized scans of levkin.ca / LAN targets. Gitignore local data/.env; add pytest + gitleaks CI.
49 lines
1.2 KiB
YAML
49 lines
1.2 KiB
YAML
services:
|
|
tools:
|
|
build: ./tools
|
|
image: talos-tools:latest
|
|
command: ["true"]
|
|
profiles: ["build-only"]
|
|
|
|
talos:
|
|
build:
|
|
context: ./backend
|
|
image: talos:latest
|
|
environment:
|
|
- OLLAMA_URL=${OLLAMA_URL:-http://ollama:11434}
|
|
- OLLAMA_MODEL=${OLLAMA_MODEL:-qwen2.5:14b}
|
|
- ALLOW_LOOPBACK=${ALLOW_LOOPBACK:-false}
|
|
- BLOCKED_TARGETS=${BLOCKED_TARGETS:-}
|
|
- DB_PATH=/data/talos.db
|
|
- MAX_CONCURRENT_SCANS=${MAX_CONCURRENT_SCANS:-5}
|
|
- AUDIT_LOG_PATH=/data/audit.log
|
|
volumes:
|
|
- ./data:/data
|
|
- ./frontend:/app/frontend:ro
|
|
cap_add:
|
|
- NET_RAW
|
|
- NET_ADMIN
|
|
ports:
|
|
- "8000:8000"
|
|
restart: unless-stopped
|
|
extra_hosts:
|
|
# Reach homelab Ollama from container (optional override via OLLAMA_URL)
|
|
- "devgpu.host:10.0.10.122"
|
|
|
|
ollama:
|
|
image: ollama/ollama:latest
|
|
profiles: ["bundled-ollama"]
|
|
volumes:
|
|
- ./ollama:/root/.ollama
|
|
ports:
|
|
- "11434:11434"
|
|
restart: unless-stopped
|
|
# Uncomment for GPU on host with nvidia-container-toolkit:
|
|
# deploy:
|
|
# resources:
|
|
# reservations:
|
|
# devices:
|
|
# - driver: nvidia
|
|
# count: all
|
|
# capabilities: [gpu]
|