deepdata: delivery stack (docker compose, helm, CI, build scripts)

deployment/docker/deepdata/.env.example

@@ -0,0 +1,30 @@
+# DeepData Environment Variables Template
+# Copy this file to .env and fill in the values
+#   cp .env.example .env
+# IMPORTANT: Never commit .env to git! It is already in .gitignore.
+#
+# For K8s/Helm deployment: secrets are managed via Sealed Secrets.
+# For Docker deployment: use this .env file (gitignored, local only).
+
+# Database
+DB_PASSWORD=your-secure-password-here
+
+# JWT Authentication
+JWT_SECRET=your-secure-jwt-secret-here
+DEEPDATA_JWT_ENABLE=false
+
+# MinIO (for Milvus storage)
+MINIO_ACCESS_KEY=your-minio-access-key
+MINIO_SECRET_KEY=your-minio-secret-key
+
+# Label Studio
+LABEL_STUDIO_USERNAME=admin@demo.com
+LABEL_STUDIO_PASSWORD=your-labelstudio-password
+LABEL_STUDIO_USER_TOKEN=your-labelstudio-token
+LABEL_STUDIO_HOST=
+
+# Optional: SSL Certificate Password (for encrypted private keys)
+CERT_PASS=
+
+# Optional: Domain for HTTPS
+DOMAIN=

deployment/docker/deepdata/docker-compose.yml

@@ -0,0 +1,419 @@
+services:
+  # ==============================
+  # Core DeepData Services (always enabled)
+  # ==============================
+
+  deepdata-backend:
+    container_name: deepdata-backend
+    image: ${REGISTRY:-}deepdata-backend:${VERSION:-latest}
+    restart: on-failure
+    privileged: true
+    environment:
+      - DB_PASSWORD=${DB_PASSWORD:?DB_PASSWORD is required. Set in .env file}
+      - JWT_SECRET=${JWT_SECRET:?JWT_SECRET is required. Set in .env file}
+      - deepdata.jwt.enable=${DEEPDATA_JWT_ENABLE:-false}
+      - LOG_ROTATION_MAX_SIZE=${LOG_ROTATION_MAX_SIZE:-100MB}
+      - LOG_ROTATION_BACKUP_COUNT=${LOG_ROTATION_BACKUP_COUNT:-30}
+    volumes:
+      - dataset_volume:/dataset
+      - flow_volume:/flow
+      - log_volume:/var/log/deepdata
+      - operator-upload-volume:/operators/upload
+      - operator-runtime-volume:/operators/extract
+    networks: [ deepdata ]
+    depends_on:
+      - deepdata-database
+
+  deepdata-backend-python:
+    container_name: deepdata-backend-python
+    image: ${REGISTRY:-}deepdata-backend-python:${VERSION:-latest}
+    restart: on-failure
+    privileged: true
+    ports:
+      - "18000:18000"
+    environment:
+      - log_level=DEBUG
+      - LOG_ROTATION_MAX_SIZE=${LOG_ROTATION_MAX_SIZE:-100MB}
+      - LOG_ROTATION_BACKUP_COUNT=${LOG_ROTATION_BACKUP_COUNT:-30}
+      - LOG_PVC_MONITOR_ENABLED=${LOG_PVC_MONITOR_ENABLED:-true}
+      - LOG_PVC_MONITOR_PATH=${LOG_PVC_MONITOR_PATH:-/var/log/deepdata}
+      - LOG_PVC_MONITOR_THRESHOLD=${LOG_PVC_MONITOR_THRESHOLD:-0.9}
+      - LOG_PVC_MONITOR_INTERVAL_SECONDS=${LOG_PVC_MONITOR_INTERVAL_SECONDS:-300}
+      - LOG_PVC_MONITOR_DELETE_BATCH_SIZE=${LOG_PVC_MONITOR_DELETE_BATCH_SIZE:-10}
+      - LOG_PVC_MONITOR_FILE_SUFFIXES=${LOG_PVC_MONITOR_FILE_SUFFIXES:-log,out,err}
+      - PGSQL_HOST=deepdata-database
+      - PGSQL_PORT=5432
+      - pgsql_password=${DB_PASSWORD:?DB_PASSWORD is required. Set in .env file}
+      - deepdata_jwt_enable=${DEEPDATA_JWT_ENABLE:-false}
+      - milvus_uri=${MILVUS_URI:-http://milvus:19530}
+      - LABEL_STUDIO_USERNAME=${LABEL_STUDIO_USERNAME:-admin@demo.com}
+      - LABEL_STUDIO_USER_TOKEN=${LABEL_STUDIO_USER_TOKEN:-}
+      - LABEL_STUDIO_PASSWORD=${LABEL_STUDIO_PASSWORD:-}
+    volumes:
+      - dataset_volume:/dataset
+      - flow_volume:/flow
+      - log_volume:/var/log/deepdata
+      - graph_data_volume:/data/rag_storage
+      - operator-upload-volume:/operators/upload
+      - operator-runtime-volume:/operators/extract
+    networks: [ deepdata ]
+    depends_on:
+      - deepdata-database
+
+  deepdata-gateway:
+    container_name: deepdata-gateway
+    image: ${REGISTRY:-}deepdata-gateway:${VERSION:-latest}
+    restart: on-failure
+    privileged: true
+    ports:
+      - '8080:8080'
+    environment:
+      - JWT_SECRET=${JWT_SECRET:-}
+      - deepdata.jwt.enable=${DEEPDATA_JWT_ENABLE:-false}
+      - LOG_ROTATION_MAX_SIZE=${LOG_ROTATION_MAX_SIZE:-100MB}
+      - LOG_ROTATION_BACKUP_COUNT=${LOG_ROTATION_BACKUP_COUNT:-30}
+    volumes:
+      - log_volume:/var/log/deepdata
+    networks: [ deepdata ]
+
+  deepdata-frontend:
+    container_name: deepdata-frontend
+    image: ${REGISTRY:-}deepdata-frontend:${VERSION:-latest}
+    restart: on-failure
+    ports:
+      - "30000:3000"
+    environment:
+      - LOG_ROTATION_MAX_SIZE=${LOG_ROTATION_MAX_SIZE:-100MB}
+      - LOG_ROTATION_BACKUP_COUNT=${LOG_ROTATION_BACKUP_COUNT:-30}
+    volumes:
+      - frontend_log_volume:/var/log/deepdata/frontend
+    networks: [ deepdata ]
+    depends_on:
+      - deepdata-backend
+      - deepdata-backend-python
+
+  deepdata-database:
+    container_name: deepdata-database
+    image: ${REGISTRY:-}deepdata-database:${VERSION:-latest}
+    restart: on-failure
+    environment:
+      - POSTGRES_USER=postgres
+      - POSTGRES_PASSWORD=${DB_PASSWORD:?DB_PASSWORD is required. Set in .env file}
+      - LOG_ROTATION_BACKUP_COUNT=${LOG_ROTATION_BACKUP_COUNT:-30}
+    volumes:
+      - postgresql_volume:/var/lib/postgresql/data
+      - database_log_volume:/var/log/deepdata/database
+    ports:
+      - "5432:5432"
+    networks: [ deepdata ]
+
+  deepdata-runtime:
+    container_name: deepdata-runtime
+    image: ${REGISTRY:-}deepdata-runtime:${VERSION:-latest}
+    restart: on-failure
+    environment:
+      RAY_DEDUP_LOGS: "0"
+      RAY_TQDM_PATCH_PRINT: "0"
+      LOG_ROTATION_MAX_SIZE: ${LOG_ROTATION_MAX_SIZE:-100MB}
+      LOG_ROTATION_BACKUP_COUNT: ${LOG_ROTATION_BACKUP_COUNT:-30}
+      PG_HOST: "deepdata-database"
+      PG_PORT: "5432"
+      PG_USER: "postgres"
+      PG_PASSWORD: ${DB_PASSWORD:?DB_PASSWORD is required. Set in .env file}
+      PG_DATABASE: "deepdata"
+    command:
+      - python
+      - /opt/runtime/deepdata/operator_runtime.py
+      - --port
+      - "8081"
+    volumes:
+      - ray_log_volume:/tmp/ray
+      - log_volume:/var/log/deepdata
+      - dataset_volume:/dataset
+      - flow_volume:/flow
+      - operator-runtime-volume:/opt/runtime/deepdata/ops/user
+      - operator-packages-volume:/usr/local/lib/ops/site-packages
+    networks: [ deepdata ]
+
+  # =============================
+  # Optional: Mineru NPU Engine (profile: mineru)
+  # ==============================
+  deepdata-mineru:
+    container_name: deepdata-mineru
+    image: deepdata-mineru
+    restart: on-failure
+    environment:
+      MINERU_MODEL_SOURCE: local
+      MINERU_DEVICE_MODE: npu
+      VLLM_WORKER_MULTIPROC_METHOD: spawn
+    privileged: true
+    entrypoint: mineru-openai-server
+    command:
+      --engine vllm
+      --host 0.0.0.0
+      --port 8000
+      ${EXTRA_ARGS:-}
+    volumes:
+      - /var/log/npu/:/usr/slog
+      - /usr/local/dcmi:/usr/local/dcmi
+      - /usr/local/bin/npu-smi:/usr/local/bin/npu-smi
+      - /usr/local/Ascend/driver:/usr/local/Ascend/driver
+    networks: [ deepdata ]
+    profiles: [ mineru ]
+    devices:
+      - /dev/davinci0
+      - /dev/davinci_manager
+      - /dev/devmm_svm
+      - /dev/hisi_hdc
+
+  # ==============================
+  # Optional: Redis (profile: redis)
+  # ==============================
+  deepdata-redis:
+    container_name: deepdata-redis
+    image: redis:8.2.3
+    restart: on-failure
+    ports:
+      - "6379:6379"
+    networks: [ deepdata ]
+    profiles: [ redis ]
+
+  # ==============================
+  # Optional: Data Juicer (profile: data-juicer)
+  # ==============================
+  deepdata-data-juicer:
+    container_name: deepdata-data-juicer
+    image: datajuicer/data-juicer:v1.4.4
+    restart: on-failure
+    command:
+      - uvicorn
+      - service:app
+      - --host
+      - "0.0.0.0"
+    volumes:
+      - dataset_volume:/dataset
+      - flow_volume:/flow
+    networks: [ deepdata ]
+    profiles: [ data-juicer ]
+
+
+  # ==============================
+  # Optional: Deer Flow (profile: deepflow)
+  # ==============================
+  deepflow-backend:
+    image: ${REGISTRY:-}deepflow-backend
+    container_name: deepflow-backend
+    env_file:
+      - .env
+    volumes:
+      - ./conf.yaml:/app/conf.yaml:ro
+      - deepflow-log-volume:/var/log/deepflow
+    restart: on-failure
+    networks:
+      - deepdata
+    profiles:
+      - deepflow
+
+  deepflow-frontend:
+    image: ${REGISTRY:-}deepflow-frontend
+    container_name: deepflow-frontend
+    env_file:
+      - .env
+    depends_on:
+      - deepflow-backend
+    restart: on-failure
+    networks:
+      - deepdata
+    profiles:
+      - deepflow
+
+  # ==============================
+  # Optional: Label Studio (profile: label-studio)
+  # ==============================
+  label-studio-pgbouncer:
+    container_name: label-studio-pgbouncer
+    image: edoburu/pgbouncer:latest
+    restart: on-failure
+    environment:
+      - DB_HOST=deepdata-database
+      - DB_PORT=5432
+      - DB_NAME=labelstudio
+      - DB_USER=postgres
+      - DB_PASSWORD=${DB_PASSWORD:?DB_PASSWORD is required. Set in .env file}
+      - AUTH_TYPE=scram-sha-256
+      - POOL_MODE=transaction
+      - MAX_CLIENT_CONN=100
+      - DEFAULT_POOL_SIZE=20
+      - MAX_DB_CONNECTIONS=20
+    networks:
+      - deepdata
+    profiles: [ label-studio ]
+
+  label-studio:
+    container_name: label-studio
+    stdin_open: true
+    tty: true
+    image: heartexlabs/label-studio:latest
+    privileged: true
+    restart: on-failure
+    user: root
+    expose:
+      - "8000"
+    ports:
+      - "30001:8000"
+    depends_on:
+      - label-studio-pgbouncer
+    environment:
+      - DJANGO_DB=default
+      - POSTGRE_NAME=labelstudio
+      - POSTGRE_USER=postgres
+      - POSTGRE_PASSWORD=${DB_PASSWORD:?DB_PASSWORD is required. Set in .env file}
+      - POSTGRE_PORT=5432
+      - POSTGRE_HOST=label-studio-pgbouncer
+      - LABEL_STUDIO_HOST=${LABEL_STUDIO_HOST:-}
+      - LOCAL_FILES_SERVING_ENABLED=true
+      - LOCAL_FILES_DOCUMENT_ROOT=/label-studio/local
+      - USE_USERNAME_FOR_LOGIN=true
+      - LABEL_STUDIO_USERNAME=admin@demo.com
+      - LABEL_STUDIO_PASSWORD=${LABEL_STUDIO_PASSWORD:-}
+      - LABEL_STUDIO_ENABLE_LEGACY_API_TOKEN=true
+      - LABEL_STUDIO_USER_TOKEN=${LABEL_STUDIO_USER_TOKEN:-}
+      - LOG_LEVEL=DEBUG
+    volumes:
+      - label-studio-data:/label-studio/data:rw
+      - dataset_volume:/label-studio/local:rw
+    networks:
+      - deepdata
+    command: label-studio-uwsgi
+    profiles: [ label-studio ]
+
+  # ==============================
+  # Optional: Milvus (profile: milvus)
+  # ==============================
+  etcd:
+    container_name: milvus-etcd
+    image: quay.io/coreos/etcd:v3.5.18
+    environment:
+      - ETCD_AUTO_COMPACTION_MODE=revision
+      - ETCD_AUTO_COMPACTION_RETENTION=1000
+      - ETCD_QUOTA_BACKEND_BYTES=4294967296
+      - ETCD_SNAPSHOT_COUNT=50000
+    volumes:
+      - etcd-volume:/etcd
+    command: etcd -advertise-client-urls=http://etcd:2379 -listen-client-urls http://0.0.0.0:2379 --data-dir /etcd
+    restart: always
+    networks:
+      - deepdata
+    healthcheck:
+      test: ["CMD", "etcdctl", "endpoint", "health"]
+      interval: 30s
+      timeout: 20s
+      retries: 3
+    profiles:
+      - milvus
+
+  minio:
+    container_name: milvus-minio
+    image: minio/minio:RELEASE.2024-12-18T13-15-44Z
+    environment:
+      MINIO_ACCESS_KEY: ${MINIO_ACCESS_KEY:-}
+      MINIO_SECRET_KEY: ${MINIO_SECRET_KEY:-}
+    ports:
+      - "9001:9001"
+      - "9000:9000"
+    volumes:
+      - minio-volume:/data
+    command: minio server /data --console-address ":9001"
+    networks:
+      - deepdata
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:9000/minio/health/live"]
+      interval: 30s
+      timeout: 20s
+      retries: 3
+    profiles:
+      - milvus
+
+  milvus:
+    container_name: milvus-standalone
+    restart: on-failure
+    image: milvusdb/milvus:v2.6.5
+    command: ["milvus", "run", "standalone"]
+    security_opt:
+    - seccomp:unconfined
+    environment:
+      ETCD_ENDPOINTS: etcd:2379
+      MINIO_ADDRESS: minio:9000
+      MQ_TYPE: woodpecker
+    volumes:
+      - milvus-volume:/var/lib/milvus
+    networks:
+      - deepdata
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:9091/healthz"]
+      interval: 30s
+      start_period: 90s
+      timeout: 20s
+      retries: 3
+    ports:
+      - "19530:19530"
+      - "9091:9091"
+    depends_on:
+      - "etcd"
+      - "minio"
+    profiles:
+      - milvus
+
+# ==============================
+# Volumes
+# ==============================
+volumes:
+  dataset_volume:
+    name: deepdata-dataset-volume
+  flow_volume:
+    name: deepdata-flow-volume
+  log_volume:
+    name: deepdata-log-volume
+  postgresql_volume:
+    name: deepdata-postgresql-volume
+  ray_log_volume:
+    name: deepdata-ray-log-volume
+  frontend_log_volume:
+    name: deepdata-frontend-log-volume
+  database_log_volume:
+    name: deepdata-database-log-volume
+  operator-upload-volume:
+    name: deepdata-operator-upload-volume
+  operator-runtime-volume:
+    name: deepdata-operator-runtime-volume
+  operator-packages-volume:
+    name: deepdata-operator-packages-volume
+  graph_data_volume:
+    name: deepdata-graph-data-volume
+
+  # Deer Flow
+  deepflow-log-volume:
+    name: deepflow-log-volume
+
+  # Label Studio
+  label-studio-data:
+    name: label-studio-data-volume
+  label-studio-db:
+    name: label-studio-db-volume
+
+  # Milvus
+  etcd-volume:
+    name: milvus-etcd-volume
+  minio-volume:
+    name: milvus-minio-volume
+  milvus-volume:
+    name: milvus-milvus-volume
+
+
+# ==============================
+# Networks
+# ==============================
+networks:
+  deepdata:
+    driver: bridge
+    name: deepdata-network