FilesExpand file tree

main

/

docker-compose.yml

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

80 lines (78 loc) · 4.35 KB

main

/

docker-compose.yml

Copy path

Top

File metadata and controls

• Code
• Blame

80 lines (78 loc) · 4.35 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

services:

app:

build:

context: .

dockerfile: Dockerfile

ports:

- "8080:8080"

environment:

SPRING_PROFILES_ACTIVE: docker

DATABASE_URL: jdbc:postgresql://db:5432/giteabot

DATABASE_USERNAME: ${DATABASE_USERNAME:-giteabot}

DATABASE_PASSWORD: ${DATABASE_PASSWORD:-giteabot}

# Encryption key for API keys and SSH private keys stored in the database

# (optional for tokens, required for SSH private keys)

APP_ENCRYPTION_KEY: ${APP_ENCRYPTION_KEY:-}

APP_PUBLIC_URL: ${APP_PUBLIC_URL:-http://localhost:8080}

# Web UI login: native (default) or oauth (OAuth/OIDC discovery).

GITEABOT_SECURITY_LOGIN_METHOD: ${GITEABOT_SECURITY_LOGIN_METHOD:-native}

GITEABOT_SECURITY_OAUTH_CLIENT_ID: ${GITEABOT_SECURITY_OAUTH_CLIENT_ID:-}

GITEABOT_SECURITY_OAUTH_CLIENT_SECRET: ${GITEABOT_SECURITY_OAUTH_CLIENT_SECRET:-}

GITEABOT_SECURITY_OAUTH_ISSUER_URI: ${GITEABOT_SECURITY_OAUTH_ISSUER_URI:-}

# Environment variables that a ${env:NAME} secret reference may read (comma-separated).

GITEABOT_SECRET_ENV_WHITELIST: ${GITEABOT_SECRET_ENV_WHITELIST:-}

# Optional agent prompt context limits; reduce these for small local LLM context windows

AGENT_CONTEXT_MAX_TREE_FILES: ${AGENT_CONTEXT_MAX_TREE_FILES:-500}

AGENT_CONTEXT_MAX_ISSUE_COMMENTS: ${AGENT_CONTEXT_MAX_ISSUE_COMMENTS:-50}

AGENT_CONTEXT_MAX_ISSUE_COMMENTS_CHARS: ${AGENT_CONTEXT_MAX_ISSUE_COMMENTS_CHARS:-20000}

AGENT_CONTEXT_MAX_SINGLE_ISSUE_COMMENT_CHARS: ${AGENT_CONTEXT_MAX_SINGLE_ISSUE_COMMENT_CHARS:-4000}

AGENT_BUDGET_MAX_CONTENT_ROUNDS: 20

AGENT_BUDGET_MAX_ROUNDS: 20

AGENT_BUDGET_MAX_CONTEXT_TOOL_REQUESTS_PER_ROUND: 20

# Technical-writer agent: repository-context rounds per run; the round after

# them is the wrap-up round (tools refused, the writer must answer).

AGENT_WRITER_MAX_TOOL_ROUNDS: ${AGENT_WRITER_MAX_TOOL_ROUNDS:-5}

# Timeout (seconds) for each validation command the coding agent runs: the

# build/test tools and any repository-provided `execute` script.

AGENT_VALIDATION_TOOL_TIMEOUT_SECONDS: ${AGENT_VALIDATION_TOOL_TIMEOUT_SECONDS:-300}

# execute-code runs the model-written program as one of the identities in this pool, one slot

# per execution, switching to it with sudo before the interpreter starts. Both the pool and the

# sudo rule that allows the switch are created by the image from the same file; listed here so a

# stack can point them somewhere else. An empty pool runs the program as appuser (see

# DEPLOYMENT.md before doing that).

AGENT_CODE_EXECUTION_SANDBOX_SLOTS: ${AGENT_CODE_EXECUTION_SANDBOX_SLOTS:-/etc/execute-code/sandbox-slots}

AGENT_CODE_EXECUTION_SUDO: ${AGENT_CODE_EXECUTION_SUDO:-/usr/bin/sudo}

# Optional: capture raw AI request/response payloads in the usage audit log.

# Disabled by default because payloads can be large and may contain sensitive prompts.

AI_USAGE_RAW_PAYLOADS_ENABLED: ${AI_USAGE_RAW_PAYLOADS_ENABLED:-false}

AI_USAGE_MAX_RAW_PAYLOAD_LENGTH: ${AI_USAGE_MAX_RAW_PAYLOAD_LENGTH:-65535}

# Opt-in Anthropic adaptive extended thinking: returns the model's

# reasoning in dedicated blocks that are discarded. effort: low|medium|high|xhigh|max.

ANTHROPIC_EXTENDED_THINKING_ENABLED: ${ANTHROPIC_EXTENDED_THINKING_ENABLED:-false}

ANTHROPIC_EXTENDED_THINKING_EFFORT: ${ANTHROPIC_EXTENDED_THINKING_EFFORT:-high}

# chat_template_kwargs for the OpenAI-compatible provider (vLLM, llama.cpp server).

# JSON object sent on every request; it overrides the server's

# --default-chat-template-kwargs for this bot. Keys/value types are the served

# model template's, e.g. {"enable_thinking":true,"reasoning_effort":"low"}.

OPENAI_CHAT_TEMPLATE_KWARGS: ${OPENAI_CHAT_TEMPLATE_KWARGS:-}

PROMETHEUS_ENABLED: false

depends_on:

db:

condition: service_healthy

restart: unless-stopped

db:

image: postgres:17-alpine

environment:

POSTGRES_DB: giteabot

POSTGRES_USER: ${DATABASE_USERNAME:-giteabot}

POSTGRES_PASSWORD: ${DATABASE_PASSWORD:-giteabot}

volumes:

- pgdata:/var/lib/postgresql/data

healthcheck:

test: ["CMD-SHELL", "pg_isready -U ${DATABASE_USERNAME:-giteabot}"]

interval: 5s

timeout: 5s

retries: 5

restart: unless-stopped

volumes:

pgdata: