CoreGraph/docker-compose.yml at main · darshit-lagdhir/CoreGraph · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
version: "3.9"

services:
  coregraph-titan:
    build:
      context: .
      dockerfile: Dockerfile
    image: coregraph:sovereign-v5
    container_name: titan_ingestion_phalanx

    # KERNEL-LEVEL HARDENING: CPU SET PINNING
    # Core 0: HUD Rendering (144Hz)
    # Core 1-3: Ingestion Phalanx (Zero-Copy)
    # Core 4-7: Analytical Cortex & Sharding
    cpuset: "0-7"
    cpu_shares: 1024

    # MEMORY SOVEREIGNTY: 150MB HARD LIMIT
    mem_limit: 150m
    mem_reservation: 120m
    memswap_limit: 150m

    security_opt:
      - no-new-privileges:true
      - seccomp=infrastructure/seccomp_profile.json

    cap_drop:
      - ALL
    cap_add:
      - NET_RAW
      - SYS_NICE

    volumes:
      - ./vault:/app/vault
      - /dev/shm:/dev/shm

    networks:
      - sovereign_net

networks:
  sovereign_net:
    driver: bridge
    enable_ipv6: false
    internal: true # Isolate the Titan from the public web