docker-compose.yaml

version: '3.8'

services:
  krawl:
    build:
      context: .
      dockerfile: Dockerfile
    container_name: krawl-server
    ports:
      - "5000:5000"
    volumes:
      - ./wordlists.json:/app/wordlists.json:ro
      - ./config.yaml:/app/config.yaml:ro
      - ./logs:/app/logs
      - ./exports:/app/exports
    environment:
      - CONFIG_LOCATION=config.yaml
    restart: unless-stopped
First commit 2025-12-14 19:08:01 +01:00			`version: '3.8'`

			`services:`
			`krawl:`
			`build:`
			`context: .`
			`dockerfile: Dockerfile`
			`container_name: krawl-server`
			`ports:`
			`- "5000:5000"`
			`volumes:`
			`- ./wordlists.json:/app/wordlists.json:ro`
Migrate configuration from environment variables to YAML file - Add YAML-based configuration loaded from config.yaml (CONFIG_LOCATION env var) - Add PyYAML dependency and install requirements in Dockerfile - Replace Config.from_env() with get_config() singleton pattern - Remove server_header from config (now randomized from wordlists only) - Update docker-compose.yaml to mount config.yaml read-only - Update Helm chart: restructure values.yaml, generate config.yaml in ConfigMap - Update Kubernetes manifests: ConfigMap now contains config.yaml, deployments mount it - Remove Helm secret.yaml (dashboard path now auto-generated in config.yaml) 2026-01-02 13:39:54 -06:00			`- ./config.yaml:/app/config.yaml:ro`
Add logs directory bind mount with entrypoint permission fix - Add ./logs:/app/logs volume mount to docker-compose.yaml for log access - Create entrypoint.sh script that fixes directory ownership at startup - Install gosu in Dockerfile for secure privilege dropping - Use ENTRYPOINT to run permission fix as root, then drop to krawl user This ensures bind-mounted directories have correct permissions even when Docker creates them as root on the host. 2026-01-02 13:52:51 -06:00			`- ./logs:/app/logs`
Add background task to export suspicious IPs to text file - Implement export-malicious-ips task that queries distinct IPs flagged as is_suspicious from database and writes to exports/malicious_ips.txt - Add exports volume mount to docker-compose.yaml for host persistence - Update entrypoint.sh to fix ownership of exports directory for krawl user - Update Dockerfile to create /app/exports directory during build Other tasks can be added by creating them in the tasks dir using the same setup as this task. All tasks MUST include a TASK_CONFIG dict and a main method in the file to work correctly. 2026-01-05 11:54:02 -06:00			`- ./exports:/app/exports`
First commit 2025-12-14 19:08:01 +01:00			`environment:`
Migrate configuration from environment variables to YAML file - Add YAML-based configuration loaded from config.yaml (CONFIG_LOCATION env var) - Add PyYAML dependency and install requirements in Dockerfile - Replace Config.from_env() with get_config() singleton pattern - Remove server_header from config (now randomized from wordlists only) - Update docker-compose.yaml to mount config.yaml read-only - Update Helm chart: restructure values.yaml, generate config.yaml in ConfigMap - Update Kubernetes manifests: ConfigMap now contains config.yaml, deployments mount it - Remove Helm secret.yaml (dashboard path now auto-generated in config.yaml) 2026-01-02 13:39:54 -06:00			`- CONFIG_LOCATION=config.yaml`
First commit 2025-12-14 19:08:01 +01:00			`restart: unless-stopped`