Initial project import

2026-08-14 09:40:51 +03:00
parent 00040e5ce4
commit d7099bf80d
146 changed files with 30509 additions and 1055 deletions
@@ -0,0 +1,20 @@
+ADAPTER_1C_IMAGE=adapter-1c-rest:latest
+ADAPTER_1C_CONTAINER_NAME=adapter-1c-rest
+
+# Public REST port on docker.cin.su. Change it if 8011 is occupied, then use
+# the same value in ONEC_ADAPTER_URL for MCP and the 1C agent.
+ADAPTER_1C_HOST_PORT=8011
+
+# Live SQL connections. Keep real credentials outside git.
+# Example:
+# ONEC_SQL_BASES_JSON={"upo_test":{"server":"sql-host","database":"upo_test","user":"configured_login","password_env":"ONEC_SQL_PASSWORD_UPO_TEST"}}
+# ONEC_SQL_PASSWORD_UPO_TEST=put-this-only-in-a-real-non-committed-env-file
+ONEC_SQL_BASES_JSON=
+# Optional path inside the container to a JSON file with the same shape as ONEC_SQL_BASES_JSON.
+ONEC_SQL_BASES_JSON_FILE=/data/onec-sql-bases.json
+
+# Adapter-owned local SQLite state. Never point this at the 1C database.
+ONEC_ADAPTER_STATE_DB=/data/adapter-cache.sqlite
+ONEC_ADAPTER_JOB_PROCESS_ISOLATION=true
+ONEC_ADAPTER_JOB_MEMORY_LIMIT_MB=0
+ONEC_ADAPTER_JOB_CPU_LIMIT_SECONDS=0
@@ -0,0 +1,63 @@
+name: adapter-1c
+
+services:
+  adapter-1c-rest:
+    build:
+      context: ../../../../plugins/1c
+      dockerfile: connector/Dockerfile
+    image: ${ADAPTER_1C_IMAGE:-adapter-1c-rest:latest}
+    container_name: ${ADAPTER_1C_CONTAINER_NAME:-adapter-1c-rest}
+    restart: unless-stopped
+    stop_grace_period: 5m
+    ports:
+      - "${ADAPTER_1C_HOST_PORT:-8011}:8011"
+    volumes:
+      - adapter-1c-data:/data
+    environment:
+      ONEC_ADAPTER_HOST: 0.0.0.0
+      ONEC_ADAPTER_PORT: 8011
+      ONEC_ADAPTER_SERVICE_TOKEN: ${ONEC_ADAPTER_SERVICE_TOKEN:-}
+      ONEC_ADAPTER_ALLOW_UNAUTHENTICATED_ADMIN: ${ONEC_ADAPTER_ALLOW_UNAUTHENTICATED_ADMIN:-true}
+      ONEC_SQL_BASES_JSON: ${ONEC_SQL_BASES_JSON:-}
+      ONEC_SQL_BASES_JSON_FILE: ${ONEC_SQL_BASES_JSON_FILE:-/data/onec-sql-bases.json}
+      ONEC_ADAPTER_CACHE_DB: ${ONEC_ADAPTER_CACHE_DB:-/data/adapter-cache.sqlite}
+      ONEC_ADAPTER_STATE_DB: ${ONEC_ADAPTER_STATE_DB:-/data/adapter-cache.sqlite}
+      ONEC_ADAPTER_JOB_STORE: ${ONEC_ADAPTER_JOB_STORE:-/data/adapter-jobs.json}
+      ONEC_REPOSITORY_STATE_FILE: ${ONEC_REPOSITORY_STATE_FILE:-/data/onec-repository-locks.json}
+      ONEC_ADAPTER_BACKUP_DIR: ${ONEC_ADAPTER_BACKUP_DIR:-/data/adapter-apply-backups}
+      ONEC_CONFIGURATION_ACTIVATION_STATE_FILE: ${ONEC_CONFIGURATION_ACTIVATION_STATE_FILE:-/data/onec-configuration-activation-requests.json}
+      ONEC_CONFIGURATION_ACTIVATION_REQUEST_TTL_SECONDS: ${ONEC_CONFIGURATION_ACTIVATION_REQUEST_TTL_SECONDS:-1800}
+      ONEC_ADAPTER_JOB_TIMEOUT_SECONDS: ${ONEC_ADAPTER_JOB_TIMEOUT_SECONDS:-240}
+      ONEC_ADAPTER_FULL_TIMEOUT_SECONDS: ${ONEC_ADAPTER_FULL_TIMEOUT_SECONDS:-600}
+      ONEC_ADAPTER_SECTION_TIMEOUT_SECONDS: ${ONEC_ADAPTER_SECTION_TIMEOUT_SECONDS:-180}
+      ONEC_ADAPTER_JOB_PROCESS_ISOLATION: ${ONEC_ADAPTER_JOB_PROCESS_ISOLATION:-true}
+      ONEC_ADAPTER_JOB_MEMORY_LIMIT_MB: ${ONEC_ADAPTER_JOB_MEMORY_LIMIT_MB:-0}
+      ONEC_ADAPTER_JOB_CPU_LIMIT_SECONDS: ${ONEC_ADAPTER_JOB_CPU_LIMIT_SECONDS:-0}
+      ONEC_ADAPTER_DEBUG_DIAGNOSTICS: ${ONEC_ADAPTER_DEBUG_DIAGNOSTICS:-false}
+      ONEC_INFOBASE_USER_ADMIN_BASES_JSON: ${ONEC_INFOBASE_USER_ADMIN_BASES_JSON:-}
+      ONEC_INFOBASE_USER_ADMIN_BASES_JSON_FILE: ${ONEC_INFOBASE_USER_ADMIN_BASES_JSON_FILE:-/data/onec-infobase-user-admin.json}
+      ONEC_INFOBASE_USER_ADMIN_TOKEN_UPO_TEST: ${ONEC_INFOBASE_USER_ADMIN_TOKEN_UPO_TEST:-}
+      ONEC_INFOBASE_USER_ADMIN_ALLOW_UNAUTHENTICATED: ${ONEC_INFOBASE_USER_ADMIN_ALLOW_UNAUTHENTICATED:-false}
+      ONEC_REPOSITORY_RUNNER_TOKEN: ${ONEC_REPOSITORY_RUNNER_TOKEN:-}
+      ONEC_ADAPTER_ENABLE_EXTERNAL_1C: ${ONEC_ADAPTER_ENABLE_EXTERNAL_1C:-false}
+      ONEC_REPOSITORY_REQUEST_TTL_SECONDS: ${ONEC_REPOSITORY_REQUEST_TTL_SECONDS:-86400}
+      ONEC_REPOSITORY_CONFIRMATION_TTL_SECONDS: ${ONEC_REPOSITORY_CONFIRMATION_TTL_SECONDS:-7200}
+
+  adapter-1c-audit:
+    image: ${ADAPTER_1C_IMAGE:-adapter-1c-rest:latest}
+    container_name: ${ADAPTER_1C_AUDIT_CONTAINER_NAME:-adapter-1c-audit}
+    restart: unless-stopped
+    depends_on:
+      - adapter-1c-rest
+    volumes:
+      - adapter-1c-data:/data
+    environment:
+      ONEC_ADAPTER_AUDIT_INTERVAL_SECONDS: ${ONEC_ADAPTER_AUDIT_INTERVAL_SECONDS:-900}
+    command: >-
+      sh -c 'mkdir -p /data/adapter-audit-reports;
+      while true; do python /app/analyze_audit.py --log /data/adapter-audit.jsonl > /data/adapter-audit-reports/latest.json.tmp
+      && mv /data/adapter-audit-reports/latest.json.tmp /data/adapter-audit-reports/latest.json;
+      sleep "$${ONEC_ADAPTER_AUDIT_INTERVAL_SECONDS}"; done'
+
+volumes:
+  adapter-1c-data: