Chris TonjesandClaude Opus 4.7
393631ad69
Scaffolding for the YPMS in-house build. Mirrors OWC's structure so future OWC framework code can be vendored in with minimal fiddling (milestone 0.2). Includes: - pyproject.toml — Python 3.12, FastAPI, SQLAlchemy 2.x, Alembic, Postgres, pydantic-settings, structlog, cryptography. Dev extras: pytest, ruff, mypy, bandit, pip-audit. - Dockerfile — multi-stage builder + slim runtime. - docker-compose.yml — app + Postgres (on 5433 to avoid clashing with OWC on 5432) + Adminer (on 8081). - alembic.ini + migrations/env.py + baseline 0001_baseline.py (empty by design; every future change is additive and immutable once merged). - src/ypms/main.py — FastAPI factory with /healthz and /readyz. - src/ypms/settings.py — pydantic-settings config (DB URL, JWT, column encryption key, log level, env, CORS). - src/ypms/logging.py — structlog + sanitize_for_log() for the sensitive-fields-never-in-logs rule from ARCHITECTURE.md §10.1. - src/ypms/db.py — SQLAlchemy Base, engine, session factory, get_db. - src/ypms/middleware.py — RequestIdMiddleware; X-Request-ID header echoed both ways. - src/ypms/framework/ and src/ypms/security/ — empty packages, to be populated in milestones 0.2 and 0.3-0.4. - tests/test_health.py — 3 smoke tests (healthz OK, header present, header honoured on incoming). - README.md — quickstart. - CONTRIBUTING.md — hard rules mirrored from OWC. - .github/workflows/ci.yml — lint (ruff), types (mypy), tests + 80% coverage floor, SAST (bandit), SCA (pip-audit), gitleaks. Green locally: ruff clean, mypy clean, pytest 3 passed. Advances YPMS-POAM-040 (architecture doc + Phase 0 kickoff). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
51 lines
1.1 KiB
YAML
51 lines
1.1 KiB
YAML
services:
|
|
db:
|
|
image: postgres:16
|
|
environment:
|
|
POSTGRES_USER: ypms
|
|
POSTGRES_PASSWORD: ypms
|
|
POSTGRES_DB: ypms
|
|
TZ: UTC
|
|
PGTZ: UTC
|
|
volumes:
|
|
- pg_data:/var/lib/postgresql/data
|
|
ports:
|
|
- "5433:5432"
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U ypms"]
|
|
interval: 3s
|
|
timeout: 3s
|
|
retries: 20
|
|
|
|
app:
|
|
build: .
|
|
depends_on:
|
|
db:
|
|
condition: service_healthy
|
|
environment:
|
|
DATABASE_URL: postgresql+psycopg://ypms:ypms@db:5432/ypms
|
|
JWT_SECRET: dev-secret-change-me
|
|
JWT_ALG: HS256
|
|
ACCESS_TOKEN_TTL_MINUTES: 60
|
|
COLUMN_ENCRYPTION_KEY: dev-col-enc-key-change-me-32bytes-______
|
|
LOG_LEVEL: INFO
|
|
ENV: dev
|
|
ports:
|
|
- "8000:8000"
|
|
command: >
|
|
sh -c "alembic upgrade head &&
|
|
uvicorn ypms.main:app --host 0.0.0.0 --port 8000 --reload"
|
|
volumes:
|
|
- ./src:/app/src
|
|
- ./migrations:/app/migrations
|
|
|
|
adminer:
|
|
image: adminer:4
|
|
depends_on:
|
|
- db
|
|
ports:
|
|
- "8081:8080"
|
|
|
|
volumes:
|
|
pg_data:
|