ZacharyZhang-NYandClaude Opus 4.6
e390e68594
Full self-hosted port of the Elydora tamper-evident audit protocol: - Hono API server with PostgreSQL, Redis, MinIO adapters - Ed25519 signed operations, chain hashing, Merkle epoch rollups - PBKDF2 password hashing, HMAC-SHA256 JWT, 5-role RBAC - Next.js management console - Node.js, Python, and Go SDKs - Docker Compose for local deployment - Helm chart for Kubernetes - Comprehensive security hardening and audit fixes applied Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
103 lines
1.6 KiB
YAML
103 lines
1.6 KiB
YAML
global:
|
|
imageRegistry: ""
|
|
|
|
image:
|
|
api:
|
|
repository: elydora/api
|
|
tag: latest
|
|
pullPolicy: IfNotPresent
|
|
console:
|
|
repository: elydora/console
|
|
tag: latest
|
|
pullPolicy: IfNotPresent
|
|
|
|
namespace: elydora
|
|
|
|
replicaCount:
|
|
api: 2
|
|
worker: 2
|
|
scheduler: 1
|
|
console: 2
|
|
|
|
resources:
|
|
api:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: 500m
|
|
memory: 512Mi
|
|
worker:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: 500m
|
|
memory: 512Mi
|
|
scheduler:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
limits:
|
|
cpu: 250m
|
|
memory: 256Mi
|
|
console:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
limits:
|
|
cpu: 250m
|
|
memory: 256Mi
|
|
|
|
# PostgreSQL
|
|
postgres:
|
|
host: postgres
|
|
port: 5432
|
|
user: elydora
|
|
password: elydora-secret-change-me
|
|
database: elydora
|
|
storage: 10Gi
|
|
|
|
# Redis
|
|
redis:
|
|
host: redis
|
|
port: 6379
|
|
storage: 2Gi
|
|
|
|
# MinIO
|
|
minio:
|
|
host: minio
|
|
port: 9000
|
|
rootUser: elydora
|
|
rootPassword: elydora-minio-secret-change-me
|
|
bucket: elydora-evidence
|
|
storage: 50Gi
|
|
|
|
# Elydora API config
|
|
api:
|
|
port: 8787
|
|
environment: production
|
|
jwtSecret: change-me-to-a-random-string-at-least-32-chars
|
|
signingKey: change-me-base64url-ed25519-private-key
|
|
allowedOrigins: "https://console.example.com"
|
|
tsaUrl: "http://timestamp.sectigo.com"
|
|
|
|
# Console
|
|
console:
|
|
port: 3000
|
|
apiBaseUrl: "https://api.example.com"
|
|
|
|
# Ingress
|
|
ingress:
|
|
enabled: true
|
|
className: nginx
|
|
annotations: {}
|
|
api:
|
|
host: api.example.com
|
|
tls: true
|
|
tlsSecret: elydora-api-tls
|
|
console:
|
|
host: console.example.com
|
|
tls: true
|
|
tlsSecret: elydora-console-tls
|