DeepFal
2d76ed6672
- 特征检测（规则/签名）与行为检测（24h 统计）单进程运行 - 融合名单按首次发现时间倒序，展示位置/归属（GeoIP + ASN） - 钉钉融合推送（加签、24h 节流、去重） - 页面状态灯、CSV 导出、Docker 镜像构建文件
31 lines
861 B
Docker
31 lines
861 B
Docker
FROM python:3.12-slim
|
|
|
|
ENV PYTHONUNBUFFERED=1 \
|
|
PYTHONDONTWRITEBYTECODE=1 \
|
|
DATA_DIR=/data
|
|
|
|
WORKDIR /app
|
|
|
|
# application code (no credentials, no config files)
|
|
COPY app/graylog_ops /app/graylog_ops
|
|
COPY app/bin /app/bin
|
|
COPY app/profiles /app/profiles
|
|
COPY app/allowlist.example.txt /app/allowlist.example.txt
|
|
COPY app/asn_brand_map.json /app/asn_brand_map.json
|
|
|
|
# seed data: current production snapshot (sqlite + geo + asn + blocklist)
|
|
COPY seed /app/seed
|
|
|
|
COPY entrypoint.sh /app/entrypoint.sh
|
|
RUN chmod +x /app/entrypoint.sh
|
|
|
|
VOLUME ["/data"]
|
|
EXPOSE 8088
|
|
|
|
HEALTHCHECK --interval=60s --timeout=5s --start-period=30s \
|
|
CMD python3 -c "import os,urllib.request,sys; \
|
|
url='http://127.0.0.1:%s/healthz' % os.environ.get('APP_PORT','8088'); \
|
|
sys.exit(0 if urllib.request.urlopen(url, timeout=4).status == 200 else 1)"
|
|
|
|
ENTRYPOINT ["/app/entrypoint.sh"]
|