0ed5e1e016
Extracted from private infra repo into standalone open-source project. Three operating modes: - Local: SQLite + FTS5 (zero dependencies) - Server: PostgreSQL via HTTP API with multi-user auth - Full: PostgreSQL + HashiCorp Vault for secret management Features: - MCP stdio server with 5 tools (store/recall/list/delete/secret_get) - FastAPI HTTP API with multi-user Bearer token auth (API_KEYS JSON map) - Regex-based credential detection with auto-redaction - AES-256-GCM encryption fallback for non-Vault deployments - Vault KV v2 client (stdlib urllib, K8s SA auto-auth) - Per-user data isolation (all queries scoped by user_id) - Secret migration endpoint for existing plain-text credentials - Backward-compatible env var aliases (CLAUDE_MEMORY_API_URL) Infrastructure: - Docker + docker-compose (API + PostgreSQL + optional Vault) - Woodpecker CI (test → build → push → kubectl deploy) - GitHub Actions CI (Python 3.11/3.12/3.13) + Release (GHCR + PyPI) - Helm chart + raw Kubernetes manifests 96 tests passing across 6 test files.
49 lines
1.1 KiB
YAML
49 lines
1.1 KiB
YAML
services:
|
|
api:
|
|
build:
|
|
context: ..
|
|
dockerfile: docker/Dockerfile
|
|
ports:
|
|
- "8000:8000"
|
|
environment:
|
|
DATABASE_URL: postgresql://claude_memory:devpassword@postgres:5432/claude_memory
|
|
API_KEY: dev-api-key
|
|
# Multi-user mode (uncomment to test):
|
|
# API_KEYS: '{"viktor": "key1", "testuser": "key2"}'
|
|
# Vault (uncomment to test):
|
|
# VAULT_ADDR: http://vault:8200
|
|
# VAULT_TOKEN: dev-root-token
|
|
depends_on:
|
|
postgres:
|
|
condition: service_healthy
|
|
|
|
postgres:
|
|
image: postgres:16-alpine
|
|
environment:
|
|
POSTGRES_DB: claude_memory
|
|
POSTGRES_USER: claude_memory
|
|
POSTGRES_PASSWORD: devpassword
|
|
ports:
|
|
- "5432:5432"
|
|
volumes:
|
|
- pgdata:/var/lib/postgresql/data
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U claude_memory"]
|
|
interval: 5s
|
|
timeout: 3s
|
|
retries: 5
|
|
|
|
vault:
|
|
image: hashicorp/vault:1.15
|
|
ports:
|
|
- "8200:8200"
|
|
environment:
|
|
VAULT_DEV_ROOT_TOKEN_ID: dev-root-token
|
|
VAULT_DEV_LISTEN_ADDRESS: 0.0.0.0:8200
|
|
cap_add:
|
|
- IPC_LOCK
|
|
profiles:
|
|
- vault
|
|
|
|
volumes:
|
|
pgdata:
|