feat: Add paperclip-docker Ansible role for RTX 3090

Deploy Paperclip AI with PostgreSQL, nginx reverse proxy, and Cloudflare SSL/TLS on illuminations.wdw-labs.cloud. Configured for local_trusted mode (LAN-only, no auth) with host networking and auto-generated secrets. Stack: PostgreSQL 16 + Paperclip + nginx + certbot Hostname: muppet-vision.wdw-labs.cloud vLLM endpoint: localhost:8000 (DeepSeek-R1-32B Q4)
2026-09-27 16:47:04 -05:00
1 parent 8778a3bbb0
commit f701ad823f
@@ -0,0 +1,90 @@
+services:
+  db:
+    image: postgres:16-alpine
+    container_name: paperclip-db
+    network_mode: host
+    environment:
+      POSTGRES_USER: paperclip
+      POSTGRES_PASSWORD: paperclip
+      POSTGRES_DB: paperclip
+    volumes:
+      - {{ paperclip_base_path }}/pgdata:/var/lib/postgresql/data
+    restart: unless-stopped
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U paperclip -d paperclip"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+  paperclip:
+    image: reeoss/paperclipai-paperclip:latest
+    container_name: paperclip
+    network_mode: host
+    env_file:
+      - {{ paperclip_base_path }}/.env
+    environment:
+      HOST: "127.0.0.1"
+      PAPERCLIP_HOME: /paperclip
+      PAPERCLIP_PORT: {{ paperclip_port }}
+      PAPERCLIP_PUBLIC_URL: "https://{{ paperclip_domain }}"
+      PAPERCLIP_DEPLOYMENT_MODE: "{{ paperclip_deployment_mode }}"
+      PAPERCLIP_DEPLOYMENT_EXPOSURE: "private"
+      PAPERCLIP_ALLOWED_HOSTNAMES: "{{ paperclip_allowed_hostnames }}"
+      DATABASE_URL: "postgresql://paperclip:paperclip@localhost:5432/paperclip"
+      BETTER_AUTH_SECRET: ${BETTER_AUTH_SECRET}
+      PAPERCLIP_AGENT_JWT_SECRET: ${PAPERCLIP_AGENT_JWT_SECRET}
+      VLLM_ENDPOINT: ${VLLM_ENDPOINT}
+      OPENAI_API_KEY: "${OPENAI_API_KEY:-}"
+      ANTHROPIC_API_KEY: "${ANTHROPIC_API_KEY:-}"
+    volumes:
+      - {{ paperclip_data_dir }}:/paperclip
+    depends_on:
+      db:
+        condition: service_healthy
+    restart: unless-stopped
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:{{ paperclip_port }}/health"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 60s
+
+  certbot:
+    image: certbot/dns-cloudflare:latest
+    container_name: paperclip-certbot
+    volumes:
+      - {{ paperclip_certs_dir }}:/etc/letsencrypt
+      - {{ paperclip_base_path }}/certbot-init.sh:/certbot-init.sh:ro
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+    environment:
+      CLOUDFLARE_API_TOKEN: ${CLOUDFLARE_API_TOKEN}
+      CERTBOT_EMAIL: ${CERTBOT_EMAIL}
+      PAPERCLIP_DOMAIN: ${PAPERCLIP_DOMAIN}
+    entrypoint: /bin/sh
+    command:
+      - -c
+      - |
+        /certbot-init.sh && while true; do certbot renew --quiet; sleep 12h; done
+    restart: unless-stopped
+
+  nginx:
+    image: nginx:latest
+    container_name: paperclip-nginx
+    network_mode: host
+    volumes:
+      - {{ paperclip_base_path }}/nginx.conf:/etc/nginx/nginx.conf:ro
+      - {{ paperclip_certs_dir }}:/etc/nginx/certs:ro
+    depends_on:
+      - certbot
+    restart: unless-stopped
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:80/"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 30s
+
+volumes:
+  paperclip_data:
+    driver: local
+