- ollama-model-init: one-shot init container that pulls qwen2.5:7b-instruct-q4_K_M into the ollama_models volume on first start - ollama: main inference service on archiv-net (expose: only, no public port) - ollama_models named volume for persistent model storage - APP_OLLAMA_BASE_URL + APP_OLLAMA_API_KEY added to backend env - Both services: cap_drop ALL, no-new-privileges, read_only+tmpfs (ADR-019 + ADR-028) - start_period: 60s — model pre-pulled by init container Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
11 KiB
11 KiB