decodingtrust-agent-sdk 0.1.0__py3-none-any.whl

dt_arena/envs/paypal/docker-compose-hub.yml

@@ -0,0 +1,48 @@
+version: "3.8"
+
+services:
+  paypal-pg:
+    image: postgres:16
+    network_mode: host
+    security_opt:
+      - seccomp=unconfined
+    environment:
+      POSTGRES_DB: paypal_sandbox
+      POSTGRES_USER: sandbox
+      POSTGRES_PASSWORD: sandbox
+    command: ["-p", "${PAYPAL_PG_PORT:-5544}"]
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -h 127.0.0.1 -p ${PAYPAL_PG_PORT:-5544} -U sandbox -d paypal_sandbox"]
+      interval: 5s
+      timeout: 3s
+      retries: 30
+
+  paypal-api:
+    image: decodingtrustagent/paypal:api-latest
+    network_mode: host
+    depends_on:
+      paypal-pg:
+        condition: service_healthy
+    environment:
+      PAYPAL_PG_HOST: 127.0.0.1
+      PAYPAL_PG_PORT: ${PAYPAL_PG_PORT:-5544}
+      PAYPAL_PG_DB: paypal_sandbox
+      PAYPAL_PG_USER: sandbox
+      PAYPAL_PG_PASSWORD: sandbox
+      PAYPAL_API_PORT: ${PAYPAL_API_PORT:-8035}
+      PAYPAL_STARTING_BALANCE: "100000"
+    healthcheck:
+      test: ["CMD-SHELL", "python -c \"import urllib.request,sys,os; urllib.request.urlopen('http://127.0.0.1:'+os.environ.get('PAYPAL_API_PORT','8035')+'/health', timeout=2); sys.exit(0)\" || exit 1"]
+      interval: 3s
+      timeout: 3s
+      retries: 40
+    restart: unless-stopped
+
+  paypal-ui:
+    image: decodingtrustagent/paypal:ui-latest
+    network_mode: host
+    depends_on:
+      - paypal-api
+    environment:
+      PAYPAL_API_PORT: ${PAYPAL_API_PORT:-8035}
+      PAYPAL_UI_PORT: ${PAYPAL_UI_PORT:-8029}

dt_arena/envs/paypal/docker-compose.yml

@@ -0,0 +1,63 @@
+version: "3.8"
+services:
+  paypal-pg:
+    image: postgres:16
+    network_mode: host
+    security_opt:
+      - seccomp=unconfined
+    environment:
+      POSTGRES_DB: paypal_sandbox
+      POSTGRES_USER: sandbox
+      POSTGRES_PASSWORD: sandbox
+    command: ["-p", "${PAYPAL_PG_PORT:-5544}"]
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -h 127.0.0.1 -p ${PAYPAL_PG_PORT:-5544} -U sandbox -d paypal_sandbox"]
+      interval: 5s
+      timeout: 3s
+      retries: 30
+
+  paypal-api:
+    image: python:3.12-slim
+    network_mode: host
+    depends_on:
+      paypal-pg:
+        condition: service_healthy
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+    working_dir: /app
+    environment:
+      PAYPAL_PG_HOST: 127.0.0.1
+      PAYPAL_PG_PORT: ${PAYPAL_PG_PORT:-5544}
+      PAYPAL_PG_DB: paypal_sandbox
+      PAYPAL_PG_USER: sandbox
+      PAYPAL_PG_PASSWORD: sandbox
+      PAYPAL_API_PORT: ${PAYPAL_API_PORT:-8035}
+      PAYPAL_STARTING_BALANCE: "100000"
+    volumes:
+      - ./api:/app:ro
+      - ./init_examples:/init_examples:ro
+    command: >
+      sh -c "PIP_PROGRESS_BAR=off pip install --progress-bar off --no-cache-dir 'psycopg[binary]>=3.1' fastapi uvicorn &&
+             uvicorn main:app --host 0.0.0.0 --port $${PAYPAL_API_PORT:-8035} --loop asyncio --http h11"
+    healthcheck:
+      test: ["CMD-SHELL", "python -c \"import urllib.request,sys,os; urllib.request.urlopen('http://127.0.0.1:'+os.environ.get('PAYPAL_API_PORT','8035')+'/health', timeout=2); sys.exit(0)\" || exit 1"]
+      interval: 3s
+      timeout: 3s
+      retries: 40
+    restart: unless-stopped
+
+  paypal-ui:
+    build:
+      context: ./paypal_ui
+      dockerfile: Dockerfile
+      network: host
+    network_mode: host
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+    depends_on:
+      - paypal-api
+    environment:
+      PAYPAL_API_PORT: ${PAYPAL_API_PORT:-8035}
+      PAYPAL_UI_PORT: ${PAYPAL_UI_PORT:-8029}

dt_arena/envs/research/docker-compose-hub.yml

@@ -0,0 +1,13 @@
+services:
+  research-env:
+    image: decodingtrustagent/research:latest
+    restart: unless-stopped
+    volumes:
+      - ./workspace:/home/research-user/workspace
+      - ./papers:/home/research-user/papers
+      - ./notebooks:/home/research-user/notebooks
+    environment:
+      - TERM=xterm-256color
+      - SHELL=/bin/bash
+      - PYTHONUNBUFFERED=1
+    command: bash -c "while true; do sleep 30; done"

dt_arena/envs/research/docker-compose.yml

@@ -0,0 +1,24 @@
+services:
+  research-env:
+    build:
+      context: .
+      dockerfile: Dockerfile
+      network: host
+    # container_name is removed to allow multiple instances with unique names
+    # Docker Compose will auto-generate names like: {project_name}-research-env-1
+    restart: unless-stopped
+    # NOTE:
+    # Do NOT map host ports by default for this environment.
+    # Port mappings can cause conflicts when running multiple instances in parallel.
+    # The evaluation system manages instances dynamically.
+    volumes:
+      - ./workspace:/home/research-user/workspace
+      - ./papers:/home/research-user/papers
+      - ./notebooks:/home/research-user/notebooks
+    environment:
+      - TERM=xterm-256color
+      - SHELL=/bin/bash
+      - PYTHONUNBUFFERED=1
+    # Keep container running
+    command: bash -c "while true; do sleep 30; done"
+

dt_arena/envs/salesforce_crm/docker-compose-hub.yaml

@@ -0,0 +1,45 @@
+# Salesforce CRM backed entirely by prebuilt DecodingTrust images.
+
+services:
+  mariadb:
+    image: decodingtrustagent/salesforce-crm:mariadb
+    security_opt:
+      - seccomp=unconfined
+    environment:
+      - MYSQL_DATABASE=salesforce_crm
+      - MYSQL_USER=sf_user
+      - MYSQL_PASSWORD=bitnami123
+      - MYSQL_RANDOM_ROOT_PASSWORD=yes
+    volumes:
+      - "mariadb_data:/var/lib/mysql"
+    healthcheck:
+      test: ["CMD", "mysqladmin", "ping", "-h", "localhost", "-u", "sf_user", "-pbitnami123"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+  salesforce:
+    image: decodingtrustagent/salesforce-crm:latest
+    security_opt:
+      - seccomp=unconfined
+    ports:
+      - "${SALESFORCE_API_PORT:-8080}:8080"
+    environment:
+      - SALESFORCE_DATABASE_HOST=mariadb
+      - SALESFORCE_DATABASE_PORT_NUMBER=3306
+      - SALESFORCE_DATABASE_USER=sf_user
+      - SALESFORCE_DATABASE_NAME=salesforce_crm
+      - SALESFORCE_DATABASE_PASSWORD=bitnami123
+    depends_on:
+      mariadb:
+        condition: service_healthy
+    healthcheck:
+      test: ["CMD-SHELL", "php -r \"echo @file_get_contents('http://localhost:8080/') ? 'ok' : exit(1);\""]
+      interval: 5s
+      timeout: 5s
+      retries: 24
+      start_period: 15s
+
+volumes:
+  mariadb_data:
+    driver: local

dt_arena/envs/salesforce_crm/docker-compose.yaml

@@ -0,0 +1,49 @@
+# Salesforce CRM with custom Docker images (no external dependencies)
+# Build with: docker compose build
+# Run with: docker compose up -d
+
+services:
+  mariadb:
+    build:
+      context: ./docker/mariadb
+      dockerfile: Dockerfile
+    image: salesforce-mariadb:local
+    environment:
+      - MYSQL_DATABASE=salesforce_crm
+      - MYSQL_USER=sf_user
+      - MYSQL_PASSWORD=bitnami123
+      - MYSQL_RANDOM_ROOT_PASSWORD=yes
+    volumes:
+      - "mariadb_data:/var/lib/mysql"
+    healthcheck:
+      test: ["CMD", "mysqladmin", "ping", "-h", "localhost", "-u", "sf_user", "-pbitnami123"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+  salesforce:
+    build:
+      context: .
+      dockerfile: docker/salesforce/Dockerfile
+    image: salesforce-app:local
+    ports:
+      - "${SALESFORCE_API_PORT:-8080}:8080"
+    environment:
+      - SALESFORCE_DATABASE_HOST=mariadb
+      - SALESFORCE_DATABASE_PORT_NUMBER=3306
+      - SALESFORCE_DATABASE_USER=sf_user
+      - SALESFORCE_DATABASE_NAME=salesforce_crm
+      - SALESFORCE_DATABASE_PASSWORD=bitnami123
+    depends_on:
+      mariadb:
+        condition: service_healthy
+    healthcheck:
+      test: ["CMD-SHELL", "php -r \"echo @file_get_contents('http://localhost:8080/') ? 'ok' : exit(1);\""]
+      interval: 5s
+      timeout: 5s
+      retries: 24
+      start_period: 15s
+
+volumes:
+  mariadb_data:
+    driver: local

dt_arena/envs/slack/docker-compose-hub.yml

@@ -0,0 +1,28 @@
+services:
+  slack-api:
+    image: decodingtrustagent/slack:api-latest
+    network_mode: host
+    environment:
+      - SLACK_JWT_SECRET=dev-secret
+      - SLACK_DB_PATH=/app/data/slack.db
+      - SLACK_FROM_EMAIL=noreply@slack.local
+      - SLACK_API_PORT=${SLACK_API_PORT:-8034}
+    volumes:
+      - slack_data:/app/data
+    healthcheck:
+      test: ["CMD", "python3", "-c", "import sys,urllib.request; sys.exit(0 if urllib.request.urlopen('http://localhost:' + str(__import__('os').environ.get('SLACK_API_PORT','8034')) + '/health', timeout=3).status < 400 else 1)"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+  slack-ui:
+    image: decodingtrustagent/slack:ui-latest
+    network_mode: host
+    depends_on:
+      - slack-api
+    environment:
+      - SLACK_API_URL=http://127.0.0.1:${SLACK_API_PORT:-8034}
+      - SLACK_UI_PORT=${SLACK_UI_PORT:-8028}
+
+volumes:
+  slack_data:

dt_arena/envs/slack/docker-compose.yml

@@ -0,0 +1,41 @@
+services:
+  slack-api:
+    build:
+      context: ./slack_api
+      dockerfile: Dockerfile
+      network: host
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+    network_mode: host
+    environment:
+      - SLACK_JWT_SECRET=dev-secret
+      - SLACK_DB_PATH=/app/data/slack.db
+      - SLACK_FROM_EMAIL=noreply@slack.local
+      - SLACK_API_PORT=${SLACK_API_PORT:-8034}
+    volumes:
+      - slack_data:/app/data  # Named volume - each project gets its own
+    healthcheck:
+      # Use Python stdlib to avoid requiring curl in the image.
+      test: ["CMD", "python3", "-c", "import sys,urllib.request; sys.exit(0 if urllib.request.urlopen('http://localhost:' + str(__import__('os').environ.get('SLACK_API_PORT','8034')) + '/health', timeout=3).status < 400 else 1)"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+  slack-ui:
+    build:
+      context: ./slack_ui
+      dockerfile: Dockerfile
+      network: host
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+    network_mode: host
+    depends_on:
+      - slack-api
+    environment:
+      - SLACK_API_URL=http://127.0.0.1:${SLACK_API_PORT:-8034}
+      - SLACK_UI_PORT=${SLACK_UI_PORT:-8028}
+
+volumes:
+  slack_data:

dt_arena/envs/snowflake/docker-compose-hub.yml

@@ -0,0 +1,41 @@
+version: "3.8"
+
+services:
+  snowflake-pg:
+    image: decodingtrustagent/snowflake:latest
+    network_mode: host
+    security_opt:
+      - seccomp=unconfined
+    environment:
+      POSTGRES_DB: snowdb
+      POSTGRES_USER: snow
+      POSTGRES_PASSWORD: snow
+      PGPORT: ${SNOWFLAKE_PG_PORT:-5454}
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U snow -d snowdb -p ${SNOWFLAKE_PG_PORT:-5454}"]
+      interval: 5s
+      timeout: 3s
+      retries: 20
+
+  snowflake-admin:
+    image: decodingtrustagent/snowflake:admin
+    network_mode: host
+    security_opt:
+      - seccomp=unconfined
+    depends_on:
+      snowflake-pg:
+        condition: service_healthy
+    environment:
+      SNOWFLAKE_PG_HOST: 127.0.0.1
+      SNOWFLAKE_PG_PORT: ${SNOWFLAKE_PG_PORT:-5454}
+      SNOWFLAKE_PG_DB: snowdb
+      SNOWFLAKE_PG_USER: snow
+      SNOWFLAKE_PG_PASSWORD: snow
+      SNOWFLAKE_ADMIN_PORT: ${SNOWFLAKE_ADMIN_PORT:-8454}
+      SNOWFLAKE_INIT_SQL_DIR: /init-sql
+    healthcheck:
+      test: ["CMD-SHELL", "python -c \"import urllib.request,os; urllib.request.urlopen('http://127.0.0.1:'+os.environ.get('SNOWFLAKE_ADMIN_PORT','8454')+'/health', timeout=2)\" || exit 1"]
+      interval: 3s
+      timeout: 3s
+      retries: 30
+    restart: unless-stopped

dt_arena/envs/snowflake/docker-compose.yml

@@ -0,0 +1,44 @@
+version: "3.8"
+
+services:
+  snowflake-pg:
+    image: decodingtrustagent/snowflake:latest
+    network_mode: host
+    security_opt:
+      - seccomp=unconfined
+    environment:
+      POSTGRES_DB: snowdb
+      POSTGRES_USER: snow
+      POSTGRES_PASSWORD: snow
+      PGPORT: ${SNOWFLAKE_PG_PORT:-5454}
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U snow -d snowdb -p ${SNOWFLAKE_PG_PORT:-5454}"]
+      interval: 5s
+      timeout: 3s
+      retries: 20
+
+  snowflake-admin:
+    build: ./admin_api
+    image: decodingtrustagent/snowflake:admin
+    network_mode: host
+    security_opt:
+      - seccomp=unconfined
+    depends_on:
+      snowflake-pg:
+        condition: service_healthy
+    volumes:
+      - ./init:/init-sql:ro
+    environment:
+      SNOWFLAKE_PG_HOST: 127.0.0.1
+      SNOWFLAKE_PG_PORT: ${SNOWFLAKE_PG_PORT:-5454}
+      SNOWFLAKE_PG_DB: snowdb
+      SNOWFLAKE_PG_USER: snow
+      SNOWFLAKE_PG_PASSWORD: snow
+      SNOWFLAKE_ADMIN_PORT: ${SNOWFLAKE_ADMIN_PORT:-8454}
+      SNOWFLAKE_INIT_SQL_DIR: /init-sql
+    healthcheck:
+      test: ["CMD-SHELL", "python -c \"import urllib.request,os; urllib.request.urlopen('http://127.0.0.1:'+os.environ.get('SNOWFLAKE_ADMIN_PORT','8454')+'/health', timeout=2)\" || exit 1"]
+      interval: 3s
+      timeout: 3s
+      retries: 30
+    restart: unless-stopped

dt_arena/envs/telecom/docker-compose-hub.yml

@@ -0,0 +1,16 @@
+version: "3.9"
+
+services:
+  telecom-server:
+    image: decodingtrustagent/telecom:latest
+    environment:
+      - TELECOM_HOST=0.0.0.0
+      - TELECOM_PORT=17501
+    ports:
+      - "${TELECOM_PORT:-17501}:17501"
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:17501/"]
+      interval: 10s
+      timeout: 5s
+      retries: 3
+      start_period: 10s

dt_arena/envs/telecom/docker-compose.yml

@@ -0,0 +1,17 @@
+version: "3.9"
+
+services:
+  telecom-server:
+    build: .
+    image: decodingtrustagent/telecom:latest
+    environment:
+      - TELECOM_HOST=0.0.0.0
+      - TELECOM_PORT=17501  # Always use 17501 inside container (matches port mapping)
+    ports:
+      - "${TELECOM_PORT:-17501}:17501"
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:17501/"]
+      interval: 10s
+      timeout: 5s
+      retries: 3
+      start_period: 10s

dt_arena/envs/telegram/docker-compose-hub.yml

@@ -0,0 +1,57 @@
+services:
+  telegram-pg:
+    image: decodingtrustagent/telegram:pg-latest
+    network_mode: host
+    privileged: true
+    security_opt:
+      - seccomp:unconfined
+    environment:
+      POSTGRES_DB: telegram_sandbox
+      POSTGRES_USER: sandbox
+      POSTGRES_PASSWORD: sandbox
+      PGPORT: ${TELEGRAM_PG_PORT:-5472}
+    volumes:
+      - telegram-pgdata:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U sandbox -d telegram_sandbox"]
+      interval: 5s
+      timeout: 5s
+      retries: 20
+      start_period: 30s
+    restart: unless-stopped
+
+  telegram-api:
+    image: decodingtrustagent/telegram:api-latest
+    network_mode: host
+    privileged: true
+    security_opt:
+      - seccomp:unconfined
+    ulimits:
+      nproc: 65535
+      nofile:
+        soft: 65535
+        hard: 65535
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+    depends_on:
+      telegram-pg:
+        condition: service_healthy
+    environment:
+      TELEGRAM_PG_HOST: 127.0.0.1
+      TELEGRAM_PG_PORT: ${TELEGRAM_PG_PORT:-5472}
+      TELEGRAM_PG_DB: telegram_sandbox
+      TELEGRAM_PG_USER: sandbox
+      TELEGRAM_PG_PASSWORD: sandbox
+      TELEGRAM_API_PORT: ${TELEGRAM_API_PORT:-8038}
+    command: ["uvicorn", "main:app", "--host", "0.0.0.0", "--port", "${TELEGRAM_API_PORT:-8038}"]
+    healthcheck:
+      test: ["CMD-SHELL", "python -c \"import urllib.request; urllib.request.urlopen('http://127.0.0.1:$${TELEGRAM_API_PORT:-8038}/health', timeout=5)\" || exit 1"]
+      interval: 5s
+      timeout: 10s
+      retries: 30
+      start_period: 90s
+    restart: unless-stopped
+
+volumes:
+  telegram-pgdata:

dt_arena/envs/telegram/docker-compose.yml

@@ -0,0 +1,62 @@
+version: "3.8"
+services:
+  telegram-pg:
+    build:
+      context: .
+      dockerfile: Dockerfile.pg
+    network_mode: host
+    privileged: true
+    security_opt:
+      - seccomp:unconfined
+    environment:
+      POSTGRES_DB: telegram_sandbox
+      POSTGRES_USER: sandbox
+      POSTGRES_PASSWORD: sandbox
+      PGPORT: ${TELEGRAM_PG_PORT:-5472}
+    volumes:
+      - telegram-pgdata:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U sandbox -d telegram_sandbox"]
+      interval: 5s
+      timeout: 5s
+      retries: 20
+      start_period: 30s
+    restart: unless-stopped
+
+  telegram-api:
+    build:
+      context: .
+      dockerfile: Dockerfile.api
+    network_mode: host
+    privileged: true
+    security_opt:
+      - seccomp:unconfined
+    ulimits:
+      nproc: 65535
+      nofile:
+        soft: 65535
+        hard: 65535
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+    depends_on:
+      telegram-pg:
+        condition: service_healthy
+    environment:
+      TELEGRAM_PG_HOST: 127.0.0.1
+      TELEGRAM_PG_PORT: ${TELEGRAM_PG_PORT:-5472}
+      TELEGRAM_PG_DB: telegram_sandbox
+      TELEGRAM_PG_USER: sandbox
+      TELEGRAM_PG_PASSWORD: sandbox
+      TELEGRAM_API_PORT: ${TELEGRAM_API_PORT:-8038}
+    command: ["uvicorn", "main:app", "--host", "0.0.0.0", "--port", "${TELEGRAM_API_PORT:-8038}"]
+    healthcheck:
+      test: ["CMD-SHELL", "python -c \"import urllib.request; urllib.request.urlopen('http://127.0.0.1:$${TELEGRAM_API_PORT:-8038}/health', timeout=5)\" || exit 1"]
+      interval: 5s
+      timeout: 10s
+      retries: 30
+      start_period: 90s
+    restart: unless-stopped
+
+volumes:
+  telegram-pgdata:

dt_arena/envs/terminal/docker-compose-hub.yml

@@ -0,0 +1,12 @@
+services:
+  terminal-env:
+    image: decodingtrustagent/code-terminal:latest
+    restart: unless-stopped
+    network_mode: host
+    volumes:
+      - ./workspace:/home/terminal-user/workspace
+      - ./data:/home/terminal-user/data
+    environment:
+      - TERM=xterm-256color
+      - SHELL=/bin/bash
+    command: bash -c "while true; do sleep 30; done"

dt_arena/envs/terminal/docker-compose.yml

@@ -0,0 +1,26 @@
+services:
+  terminal-env:
+    build:
+      context: .
+      dockerfile: Dockerfile
+    # container_name is removed to allow multiple instances with unique names
+    # Docker Compose will auto-generate names like: {project_name}-terminal-env-1
+    restart: unless-stopped
+    # Use host network to avoid creating a new Docker network per container
+    # (prevents "all predefined address pools have been fully subnetted" error)
+    network_mode: host
+    # NOTE:
+    # Do NOT map host ports by default for this sandbox container.
+    # The red-teaming runner expects no port mappings, and host port 8080
+    # is commonly occupied (causing "address already in use").
+    # If you need the web interface later, map a non-conflicting port, e.g.:
+    # ports:
+    #   - "18080:8080"
+    volumes:
+      - ./workspace:/home/terminal-user/workspace
+      - ./data:/home/terminal-user/data
+    environment:
+      - TERM=xterm-256color
+      - SHELL=/bin/bash
+    # Keep container running
+    command: bash -c "while true; do sleep 30; done"

dt_arena/envs/travel/docker-compose-hub.yml

@@ -0,0 +1,19 @@
+services:
+  travel-api:
+    image: decodingtrustagent/travel:latest
+    ports:
+      - "${TRAVEL_PORT:-10300}:10300"
+    environment:
+      - TRAVEL_HOST=0.0.0.0
+      - TRAVEL_PORT=10300
+    deploy:
+      resources:
+        limits:
+          memory: 5g
+          cpus: '2.0'
+    healthcheck:
+      test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:10300/')"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+      start_period: 15s

dt_arena/envs/travel/docker-compose.yml

@@ -0,0 +1,19 @@
+services:
+  travel-api:
+    image: decodingtrustagent/travel:latest
+    ports:
+      - "${TRAVEL_PORT:-10300}:10300"
+    environment:
+      - TRAVEL_HOST=0.0.0.0
+      - TRAVEL_PORT=10300
+    deploy:
+      resources:
+        limits:
+          memory: 5g
+          cpus: '2.0'
+    healthcheck:
+      test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:10300/')"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+      start_period: 15s