mirror of
https://github.com/smittix/intercept.git
synced 2026-04-25 07:10:00 -07:00
003c4d62cf
Add start.sh as the recommended production entry point with: - gunicorn + gevent worker for concurrent SSE/WebSocket handling - CLI flags for port, host, debug, HTTPS, and dependency checks - Auto-fallback to Flask dev server if gunicorn not installed - Conditional gevent monkey-patch in app.py via INTERCEPT_USE_GEVENT env var - Docker CMD updated to use start.sh - Updated all docs, setup.sh, and requirements.txt accordingly Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
139 lines
4.8 KiB
YAML
139 lines
4.8 KiB
YAML
# INTERCEPT - Signal Intelligence Platform
|
|
# Docker Compose configuration for easy deployment
|
|
#
|
|
# Uses gunicorn + gevent production server via start.sh (handles concurrent SSE/WebSocket)
|
|
#
|
|
# Basic usage (build locally):
|
|
# docker compose --profile basic up -d --build
|
|
#
|
|
# Basic usage (pre-built image from registry):
|
|
# INTERCEPT_IMAGE=ghcr.io/user/intercept:latest docker compose --profile basic up -d
|
|
#
|
|
# With ADS-B history (Postgres):
|
|
# docker compose --profile history up -d
|
|
|
|
services:
|
|
intercept:
|
|
# When INTERCEPT_IMAGE is set, use that pre-built image; otherwise build locally
|
|
image: ${INTERCEPT_IMAGE:-intercept:latest}
|
|
build: .
|
|
container_name: intercept
|
|
ports:
|
|
- "5050:5050"
|
|
# Uncomment for HTTPS support (set INTERCEPT_HTTPS=true below)
|
|
# - "5443:5443"
|
|
# Privileged mode required for USB SDR device access
|
|
privileged: true
|
|
# USB device mapping for all USB devices
|
|
devices:
|
|
- /dev/bus/usb:/dev/bus/usb
|
|
volumes:
|
|
# Persist decoded images and database across container rebuilds
|
|
- ./data:/app/data
|
|
# Optional: mount logs directory
|
|
# - ./logs:/app/logs
|
|
environment:
|
|
- INTERCEPT_HOST=0.0.0.0
|
|
- INTERCEPT_PORT=5050
|
|
- INTERCEPT_LOG_LEVEL=INFO
|
|
# HTTPS support (auto-generates self-signed cert)
|
|
# - INTERCEPT_HTTPS=true
|
|
# - INTERCEPT_PORT=5443
|
|
# ADS-B history is disabled by default
|
|
# To enable, use: docker compose --profile history up -d
|
|
# - INTERCEPT_ADSB_HISTORY_ENABLED=true
|
|
# - INTERCEPT_ADSB_DB_HOST=adsb_db
|
|
# - INTERCEPT_ADSB_DB_PORT=5432
|
|
# - INTERCEPT_ADSB_DB_NAME=intercept_adsb
|
|
# - INTERCEPT_ADSB_DB_USER=intercept
|
|
# - INTERCEPT_ADSB_DB_PASSWORD=intercept
|
|
# ADS-B auto-start on dashboard load (default false)
|
|
- INTERCEPT_ADSB_AUTO_START=${INTERCEPT_ADSB_AUTO_START:-false}
|
|
# Shared observer location across modules
|
|
- INTERCEPT_SHARED_OBSERVER_LOCATION=${INTERCEPT_SHARED_OBSERVER_LOCATION:-true}
|
|
# Default observer coordinates (set to your location to skip the GPS prompt)
|
|
# - INTERCEPT_DEFAULT_LAT=${INTERCEPT_DEFAULT_LAT:-0}
|
|
# - INTERCEPT_DEFAULT_LON=${INTERCEPT_DEFAULT_LON:-0}
|
|
# Network mode for WiFi scanning (requires host network)
|
|
# network_mode: host
|
|
restart: unless-stopped
|
|
healthcheck:
|
|
test: ["CMD", "curl", "-sf", "http://localhost:5050/health"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 10s
|
|
|
|
# ADS-B history with Postgres persistence
|
|
# Enable with: docker compose --profile history up -d
|
|
intercept-history:
|
|
# Same image/build fallback pattern as above
|
|
image: ${INTERCEPT_IMAGE:-intercept:latest}
|
|
build: .
|
|
container_name: intercept-history
|
|
profiles:
|
|
- history
|
|
depends_on:
|
|
- adsb_db
|
|
ports:
|
|
- "5050:5050"
|
|
# Uncomment for HTTPS support (set INTERCEPT_HTTPS=true below)
|
|
# - "5443:5443"
|
|
# Privileged mode required for USB SDR device access
|
|
privileged: true
|
|
# USB device mapping for all USB devices
|
|
devices:
|
|
- /dev/bus/usb:/dev/bus/usb
|
|
volumes:
|
|
- ./data:/app/data
|
|
environment:
|
|
- INTERCEPT_HOST=0.0.0.0
|
|
- INTERCEPT_PORT=5050
|
|
- INTERCEPT_LOG_LEVEL=INFO
|
|
# HTTPS support (auto-generates self-signed cert)
|
|
# - INTERCEPT_HTTPS=true
|
|
# - INTERCEPT_PORT=5443
|
|
- INTERCEPT_ADSB_HISTORY_ENABLED=true
|
|
- INTERCEPT_ADSB_DB_HOST=adsb_db
|
|
- INTERCEPT_ADSB_DB_PORT=5432
|
|
- INTERCEPT_ADSB_DB_NAME=intercept_adsb
|
|
- INTERCEPT_ADSB_DB_USER=intercept
|
|
- INTERCEPT_ADSB_DB_PASSWORD=intercept
|
|
# ADS-B auto-start on dashboard load (default false)
|
|
- INTERCEPT_ADSB_AUTO_START=${INTERCEPT_ADSB_AUTO_START:-false}
|
|
# Shared observer location across modules
|
|
- INTERCEPT_SHARED_OBSERVER_LOCATION=${INTERCEPT_SHARED_OBSERVER_LOCATION:-true}
|
|
# Default observer coordinates (set to your location to skip the GPS prompt)
|
|
# - INTERCEPT_DEFAULT_LAT=${INTERCEPT_DEFAULT_LAT:-0}
|
|
# - INTERCEPT_DEFAULT_LON=${INTERCEPT_DEFAULT_LON:-0}
|
|
restart: unless-stopped
|
|
healthcheck:
|
|
test: ["CMD", "curl", "-sf", "http://localhost:5050/health"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 10s
|
|
|
|
adsb_db:
|
|
image: postgres:16-alpine
|
|
container_name: intercept-adsb-db
|
|
profiles:
|
|
- history
|
|
environment:
|
|
- POSTGRES_DB=intercept_adsb
|
|
- POSTGRES_USER=intercept
|
|
- POSTGRES_PASSWORD=intercept
|
|
volumes:
|
|
# Default local path (override with PGDATA_PATH for external storage)
|
|
- ${PGDATA_PATH:-./pgdata}:/var/lib/postgresql/data
|
|
restart: unless-stopped
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U intercept -d intercept_adsb"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 5
|
|
|
|
# Optional: Add volume for persistent SQLite database
|
|
# volumes:
|
|
# intercept-data:
|