mirror of
https://github.com/mblanke/ThreatHunt.git
synced 2026-03-01 05:50:21 -05:00
- Implemented PlaybookManager for creating and managing investigation playbooks with templates. - Added SavedSearches component for managing bookmarked queries and recurring scans. - Introduced TimelineView for visualizing forensic event timelines with zoomable charts. - Enhanced backend processing with auto-queued jobs for dataset uploads and improved database concurrency. - Updated frontend components for better user experience and performance optimizations. - Documented changes in update log for future reference.
67 lines
1.6 KiB
YAML
67 lines
1.6 KiB
YAML
services:
|
|
backend:
|
|
build:
|
|
context: .
|
|
dockerfile: Dockerfile.backend
|
|
container_name: threathunt-backend
|
|
ports:
|
|
- "8000:8000"
|
|
environment:
|
|
# ── LLM Cluster (Wile / Roadrunner via Tailscale) ──
|
|
TH_WILE_HOST: "100.110.190.12"
|
|
TH_ROADRUNNER_HOST: "100.110.190.11"
|
|
TH_OLLAMA_PORT: "11434"
|
|
TH_OPEN_WEBUI_URL: "https://ai.guapo613.beer"
|
|
|
|
# ── Database ──
|
|
TH_DATABASE_URL: "sqlite+aiosqlite:///./threathunt.db"
|
|
|
|
# ── Auth ──
|
|
TH_JWT_SECRET: "change-me-in-production"
|
|
|
|
# ── Enrichment API keys (set your own) ──
|
|
# TH_VIRUSTOTAL_API_KEY: ""
|
|
# TH_ABUSEIPDB_API_KEY: ""
|
|
# TH_SHODAN_API_KEY: ""
|
|
|
|
# ── Agent behaviour ──
|
|
TH_AGENT_MAX_TOKENS: "4096"
|
|
TH_AGENT_TEMPERATURE: "0.3"
|
|
volumes:
|
|
- ./backend:/app
|
|
- backend-data:/app/data
|
|
networks:
|
|
- threathunt
|
|
healthcheck:
|
|
test: ["CMD", "curl", "-f", "http://localhost:8000/api/agent/health"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 10s
|
|
|
|
frontend:
|
|
build:
|
|
context: .
|
|
dockerfile: Dockerfile.frontend
|
|
container_name: threathunt-frontend
|
|
ports:
|
|
- "3000:3000"
|
|
depends_on:
|
|
- backend
|
|
networks:
|
|
- threathunt
|
|
healthcheck:
|
|
test: ["CMD", "curl", "-f", "http://127.0.0.1:3000/"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 10s
|
|
|
|
networks:
|
|
threathunt:
|
|
driver: bridge
|
|
|
|
volumes:
|
|
backend-data:
|
|
driver: local
|