Giorgio Gilestro
6e7f57c6b2
Server no longer holds portfolios. Holdings live in the browser (localStorage); the server publishes an anonymous ticker_universe and a gzipped /api/universe payload identical for every authenticated user, so access patterns can't betray which tickers a user holds. AI commentary is generated ephemerally from the browser-supplied pie and the cost ledger row records no positions. Migrations 0009-0011 added the universe table and dropped positions / portfolio_snapshots / portfolios. Authentication is now e-mail OTP only. Migration 0010 dropped password_hash and email_verified (every active session is by construction proof of email control). The /signup endpoint is gone; signup and login share a single email-entry page. Email rendering is HTML+plain-text multipart with a shared brand palette (app/branding.py) asserted in sync with the CSS by a drift-detection test. LLM provider defaults to DeepSeek-direct (cheaper, api.deepseek.com) with OpenRouter as automatic fallback if DeepSeek fails. ai_log_job and indicator_summary_job now iterate the two tones (NOVICE, INTERMEDIATE) per cycle so the dashboard's tone toggle is instant; PROMPT_VERSION bumped to 6 with an educational anti-TA / anti-gambling stance baked into _CORE. NOVICE mode renders a curated glossary inline (CBOE VIX, yield curve, HY OAS, etc.) with JS-positioned tooltips that survive viewport edges and sticky bars. Model name and tokens hidden from the user UI; still recorded in StrategicLog.model and AICall for admin. Layout adds a sticky top nav, a sticky bottom markets bar (one chip per exchange with status LED + headline index + 1d change), and Phase H feedback reporting is queued in tasks/todo.md. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
95 lines
3 KiB
YAML
95 lines
3 KiB
YAML
# Cassandra — app + scheduler + MariaDB + daily backup sidecar.
|
|
# .env is mounted read-only; never bake secrets into the image.
|
|
|
|
services:
|
|
db:
|
|
image: mariadb:11
|
|
restart: unless-stopped
|
|
environment:
|
|
MARIADB_ROOT_PASSWORD: ${MARIADB_ROOT_PASSWORD:-changeme-root}
|
|
MARIADB_DATABASE: ${MARIADB_DATABASE:-cassandra}
|
|
MARIADB_USER: ${MARIADB_USER:-cassandra}
|
|
MARIADB_PASSWORD: ${MARIADB_PASSWORD:-changeme}
|
|
volumes:
|
|
- db-data:/var/lib/mysql
|
|
- ./backup:/backup
|
|
healthcheck:
|
|
test: ["CMD", "healthcheck.sh", "--connect", "--innodb_initialized"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 10
|
|
|
|
redis:
|
|
image: redis:7-alpine
|
|
restart: unless-stopped
|
|
# No volume mount: this is a cache / scratch store. Persistence would
|
|
# undercut the "ephemeral pie" property — survival across restart is a
|
|
# bug, not a feature. AOF/RDB disabled via --save "" --appendonly no.
|
|
command: ["redis-server", "--save", "", "--appendonly", "no",
|
|
"--maxmemory", "128mb", "--maxmemory-policy", "allkeys-lru"]
|
|
healthcheck:
|
|
test: ["CMD", "redis-cli", "ping"]
|
|
interval: 10s
|
|
timeout: 3s
|
|
retries: 5
|
|
|
|
app:
|
|
build: .
|
|
restart: unless-stopped
|
|
command: ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000", "--workers", "1"]
|
|
env_file: .env
|
|
environment:
|
|
DATABASE_URL: mysql+aiomysql://${MARIADB_USER:-cassandra}:${MARIADB_PASSWORD:-changeme}@db:3306/${MARIADB_DATABASE:-cassandra}
|
|
REDIS_URL: redis://redis:6379/0
|
|
volumes:
|
|
- ./config:/app/config:ro
|
|
depends_on:
|
|
db:
|
|
condition: service_healthy
|
|
redis:
|
|
condition: service_healthy
|
|
ports:
|
|
- "${CASSANDRA_PORT:-8000}:8000"
|
|
|
|
scheduler:
|
|
build: .
|
|
restart: unless-stopped
|
|
command: ["python", "-m", "app.scheduler_main"]
|
|
env_file: .env
|
|
environment:
|
|
DATABASE_URL: mysql+aiomysql://${MARIADB_USER:-cassandra}:${MARIADB_PASSWORD:-changeme}@db:3306/${MARIADB_DATABASE:-cassandra}
|
|
REDIS_URL: redis://redis:6379/0
|
|
volumes:
|
|
- ./config:/app/config:ro
|
|
depends_on:
|
|
db:
|
|
condition: service_healthy
|
|
redis:
|
|
condition: service_healthy
|
|
|
|
backup:
|
|
image: mariadb:11
|
|
restart: unless-stopped
|
|
environment:
|
|
MARIADB_HOST: db
|
|
MARIADB_USER: ${MARIADB_USER:-cassandra}
|
|
MARIADB_PASSWORD: ${MARIADB_PASSWORD:-changeme}
|
|
MARIADB_DATABASE: ${MARIADB_DATABASE:-cassandra}
|
|
entrypoint: ["/bin/sh", "-c"]
|
|
# Daily dump at 03:00 UTC; keeps last 14 days.
|
|
command: |
|
|
"while true; do
|
|
sleep $$((86400 - $$(date +%s) % 86400 + 10800));
|
|
f=/backup/cassandra-$$(date -u +%Y-%m-%d).sql.gz;
|
|
echo \"[backup] $$f\";
|
|
mariadb-dump -h $$MARIADB_HOST -u $$MARIADB_USER -p$$MARIADB_PASSWORD $$MARIADB_DATABASE | gzip > $$f || echo '[backup] FAILED';
|
|
find /backup -name 'cassandra-*.sql.gz' -mtime +14 -delete;
|
|
done"
|
|
volumes:
|
|
- ./backup:/backup
|
|
depends_on:
|
|
db:
|
|
condition: service_healthy
|
|
|
|
volumes:
|
|
db-data:
|