Fix startup path for local docker run

Author: however-yir

Dockerfile

@@ -1,19 +1,21 @@
-FROM eclipse-temurin:17-jdk-alpine AS builder
+FROM maven:3.9.9-eclipse-temurin-17 AS builder
 WORKDIR /app
 
 COPY pom.xml .
 COPY src ./src
 
-RUN apk add --no-cache maven && \
-    mvn -DskipTests package -q && \
+RUN mvn -DskipTests package -q && \
     mkdir -p deps && \
     cp target/*.jar deps/app.jar
 
-FROM eclipse-temurin:17-jre-alpine
+FROM eclipse-temurin:17-jre
 WORKDIR /app
 
-# Security baseline: run app as non-root user.
-RUN addgroup -S appgroup && adduser -S appuser -G appgroup && \
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends wget && \
+    rm -rf /var/lib/apt/lists/* && \
+    groupadd --system appgroup && \
+    useradd --system --gid appgroup appuser && \
     chown -R appuser:appgroup /app
 
 USER appuser

docker-compose.yml

@@ -7,15 +7,15 @@ services:
       - "8080:8080"
     environment:
       SPRING_PROFILES_ACTIVE: prod
-      DB_URL: jdbc:mysql://mysql:3306/knowledgeops_agent?useUnicode=true&characterEncoding=utf8&useSSL=false&serverTimezone=UTC
+      DB_URL: jdbc:mysql://mysql:3306/knowledgeops_agent?useUnicode=true&characterEncoding=utf8&useSSL=false&allowPublicKeyRetrieval=true&serverTimezone=UTC
       DB_USERNAME: root
       DB_PASSWORD: root
-      OPENAI_API_KEY: ${OPENAI_API_KEY:-}
+      OPENAI_API_KEY: ${OPENAI_API_KEY:-sk-local-dev-placeholder}
       OPENAI_BASE_URL: ${OPENAI_BASE_URL:-https://dashscope.aliyuncs.com/compatible-mode}
       APP_SECURITY_ENABLED: "true"
       APP_JWT_SECRET: ${APP_JWT_SECRET:-dev-jwt-secret-change-this-in-prod-123456}
-      APP_VECTOR_STORE_BACKEND: pgvector
-      APP_REQUIRE_PGVECTOR: "false"
+      APP_VECTOR_STORE_BACKEND: simple
+      APP_VECTOR_STORE_REQUIRE_PGVECTOR: "false"
       APP_INGESTION_QUEUE_BACKEND: redis_stream
       REDIS_HOST: redis
       RABBITMQ_HOST: rabbitmq
@@ -37,7 +37,7 @@ services:
       retries: 5
 
   mysql:
-    image: mysql:8.4
+    image: mysql:8.0.36
     container_name: knowledgeops-agent-mysql
     environment:
       MYSQL_ROOT_PASSWORD: root
@@ -81,7 +81,7 @@ services:
     volumes:
       - ./observability/tempo/tempo.yml:/etc/tempo/tempo.yml:ro
     ports:
-      - "4318:4318"
+      - "4319:4318"
 
   web:
     build:
@@ -93,9 +93,9 @@ services:
       app:
         condition: service_healthy
     ports:
-      - "80:80"
+      - "8088:80"
     healthcheck:
-      test: ["CMD", "wget", "-q", "-O", "-", "http://localhost/"]
+      test: ["CMD", "wget", "-q", "-O", "-", "http://127.0.0.1/"]
       interval: 20s
       timeout: 5s
       retries: 5

pom.xml

@@ -63,6 +63,10 @@
             <groupId>org.flywaydb</groupId>
             <artifactId>flyway-core</artifactId>
         </dependency>
+        <dependency>
+            <groupId>org.flywaydb</groupId>
+            <artifactId>flyway-mysql</artifactId>
+        </dependency>
         <dependency>
             <groupId>com.bucket4j</groupId>
             <artifactId>bucket4j-core</artifactId>

src/main/resources/application.yml

@@ -8,6 +8,9 @@ spring:
     name: knowledgeops-agent
   profiles:
     active: ${SPRING_PROFILES_ACTIVE:dev}
+  autoconfigure:
+    exclude:
+      - org.springframework.ai.autoconfigure.vectorstore.pgvector.PgVectorStoreAutoConfiguration
   ai:
     ollama:
       base-url: http://localhost:11434
@@ -37,7 +40,7 @@ spring:
   flyway:
     enabled: true
     baseline-on-migrate: true
-    locations: classpath:db/migration,classpath:db/migration/{vendor}
+    locations: classpath:db/migration,classpath:db/vendor/{vendor}
   data:
     redis:
       host: ${REDIS_HOST:localhost}

src/main/resources/db/migration/V1__init_core_and_platform_tables.sql

@@ -30,7 +30,7 @@ CREATE TABLE IF NOT EXISTS conversation (
   create_time DATETIME NOT NULL
 );
 
-CREATE INDEX IF NOT EXISTS idx_conversation_id_create_time
+CREATE INDEX idx_conversation_id_create_time
   ON conversation (conversation_id, create_time);
 
 CREATE TABLE IF NOT EXISTS ingestion_job (
@@ -53,10 +53,10 @@ CREATE TABLE IF NOT EXISTS ingestion_job (
   updated_at DATETIME NOT NULL
 );
 
-CREATE INDEX IF NOT EXISTS idx_ingestion_status_next_retry
+CREATE INDEX idx_ingestion_status_next_retry
   ON ingestion_job (status, next_retry_at);
 
-CREATE INDEX IF NOT EXISTS idx_ingestion_chat_created
+CREATE INDEX idx_ingestion_chat_created
   ON ingestion_job (chat_id, created_at);
 
 CREATE TABLE IF NOT EXISTS users (
@@ -122,7 +122,7 @@ CREATE TABLE IF NOT EXISTS audit_log (
   created_at DATETIME NOT NULL
 );
 
-CREATE INDEX IF NOT EXISTS idx_audit_created
+CREATE INDEX idx_audit_created
   ON audit_log (created_at);
 
 INSERT IGNORE INTO roles (id, role_name, created_at) VALUES

src/main/resources/db/migration/V2__security_lifecycle_and_audit_retention.sql

@@ -1,10 +1,10 @@
 ALTER TABLE api_keys
-  ADD COLUMN IF NOT EXISTS expires_at DATETIME NULL,
-  ADD COLUMN IF NOT EXISTS revoked_at DATETIME NULL,
-  ADD COLUMN IF NOT EXISTS revoked_reason VARCHAR(255) NULL,
-  ADD COLUMN IF NOT EXISTS rotated_from_id BIGINT NULL;
+  ADD COLUMN expires_at DATETIME NULL,
+  ADD COLUMN revoked_at DATETIME NULL,
+  ADD COLUMN revoked_reason VARCHAR(255) NULL,
+  ADD COLUMN rotated_from_id BIGINT NULL;
 
-CREATE INDEX IF NOT EXISTS idx_api_keys_expire_revoke
+CREATE INDEX idx_api_keys_expire_revoke
   ON api_keys (enabled, expires_at, revoked_at);
 
 CREATE TABLE IF NOT EXISTS refresh_tokens (
@@ -17,5 +17,5 @@ CREATE TABLE IF NOT EXISTS refresh_tokens (
   created_at DATETIME NOT NULL
 );
 
-CREATE INDEX IF NOT EXISTS idx_refresh_tokens_principal
+CREATE INDEX idx_refresh_tokens_principal
   ON refresh_tokens (principal, expires_at);

src/main/resources/db/migration/V5__route_level_permissions_and_api_key_index.sql

@@ -1,4 +1,4 @@
-CREATE INDEX IF NOT EXISTS idx_api_keys_key_name_active
+CREATE INDEX idx_api_keys_key_name_active
   ON api_keys (key_name, enabled, revoked_at, expires_at);
 
 INSERT IGNORE INTO permissions (permission_name, created_at) VALUES

src/main/resources/db/migration/V6__tenant_isolation.sql

@@ -1,17 +1,17 @@
 ALTER TABLE api_keys
-  ADD COLUMN IF NOT EXISTS tenant_id VARCHAR(64) NOT NULL DEFAULT 'public';
+  ADD COLUMN tenant_id VARCHAR(64) NOT NULL DEFAULT 'public';
 
-CREATE INDEX IF NOT EXISTS idx_api_keys_tenant_key_name_active
+CREATE INDEX idx_api_keys_tenant_key_name_active
   ON api_keys (tenant_id, key_name, enabled, revoked_at, expires_at);
 
 ALTER TABLE refresh_tokens
-  ADD COLUMN IF NOT EXISTS tenant_id VARCHAR(64) NOT NULL DEFAULT 'public';
+  ADD COLUMN tenant_id VARCHAR(64) NOT NULL DEFAULT 'public';
 
-CREATE INDEX IF NOT EXISTS idx_refresh_tokens_tenant_principal
+CREATE INDEX idx_refresh_tokens_tenant_principal
   ON refresh_tokens (tenant_id, principal, expires_at);
 
 ALTER TABLE audit_log
-  ADD COLUMN IF NOT EXISTS tenant_id VARCHAR(64) NOT NULL DEFAULT 'public';
+  ADD COLUMN tenant_id VARCHAR(64) NOT NULL DEFAULT 'public';
 
-CREATE INDEX IF NOT EXISTS idx_audit_tenant_created
+CREATE INDEX idx_audit_tenant_created
   ON audit_log (tenant_id, created_at);