d79f17b3bb
Initial project structure for neuronetz-gateway per scope-docs/SPEC.md: - Python 3.12 / FastAPI / SQLAlchemy 2.0 (async) / Redis / Postgres stack managed by uv. Multi-stage non-root Dockerfile, prod + dev compose files (ollama service is NEVER published in either), Caddyfile + systemd unit, justfile, GitHub Actions CI (ruff, mypy --strict, pytest, bandit, pip-audit). - Pydantic-Settings config covering every env var from SPEC §7, including the MODEL_DISCOVERY_* keys for the dynamic-discovery feature (§4.6). - Alembic 0001_initial creates the full gateway schema (8 tables, 3 enums, notify_key_revoked() trigger), incl. allow_all_models on tenant_limits and key_limits for the per-tenant auto-grant toggle. - Working /healthz, /readyz (fail-closed when deps unreachable), and a Prometheus /metrics stub. Sanitizing error handlers that attach X-Request-ID to every response and never leak upstream internals. - SPEC + AGENT_PROMPT included under scope-docs/ (source of truth).
45 lines
695 B
Plaintext
45 lines
695 B
Plaintext
# Keep the build context lean and never ship secrets into an image layer.
|
|
|
|
# Secrets / local env
|
|
.env
|
|
.env.*
|
|
!.env.example
|
|
|
|
# VCS & CI
|
|
.git
|
|
.gitignore
|
|
.github
|
|
|
|
# Python caches & build artefacts
|
|
__pycache__/
|
|
*.py[cod]
|
|
*.egg-info/
|
|
.eggs/
|
|
build/
|
|
dist/
|
|
.venv/
|
|
venv/
|
|
.mypy_cache/
|
|
.ruff_cache/
|
|
.pytest_cache/
|
|
.coverage
|
|
htmlcov/
|
|
coverage.xml
|
|
|
|
# Tests & docs are not needed in the runtime image
|
|
tests/
|
|
docs/
|
|
scope-docs/
|
|
|
|
# Editor / OS cruft
|
|
.idea/
|
|
.vscode/
|
|
*.swp
|
|
.DS_Store
|
|
|
|
# Compose / ops files don't belong in the image
|
|
docker-compose*.yml
|
|
ops/
|
|
# NOTE: README.md and LICENSE are intentionally NOT ignored — the build backend
|
|
# (hatchling) reads `readme`/`license` from pyproject.toml at build time.
|