embraceable/goldview-frontend repository overview

# ============================================================================
# GOLDview + n8n — Prebuilt Image Stack
# ============================================================================
#
# Services:
#   1. PostgreSQL 16  — Shared database for n8n + GOLDview polling source
#   2. n8n            — Workflow automation platform
#   3. GOLDview       — Governance dashboard (prebuilt, pulled from Docker Hub)
#
# Usage:
#   docker compose up -d
#
# To upgrade to a newer GOLDview release, bump GOLDVIEW_VERSION in .env and:
#   docker compose pull goldview
#   docker compose up -d goldview
#
# ============================================================================

services:
  # ── PostgreSQL Database (shared by n8n + GOLDview) ─────────────────
  postgres:
    image: postgres:16-alpine
    restart: unless-stopped
    environment:
      POSTGRES_USER: ${POSTGRES_USER:-postgres}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-postgres}
      POSTGRES_DB: ${POSTGRES_DB:-n8n}
    volumes:
      - postgres_data:/var/lib/postgresql/data
    ports:
      - ${POSTGRES_PORT:-5432}:5432
    healthcheck:
      test:
        - CMD-SHELL
        - pg_isready -h localhost -U ${POSTGRES_USER:-postgres} -d ${POSTGRES_DB:-n8n}
      interval: 5s
      timeout: 5s
      retries: 20
    networks:
      - goldview_net

  # ── n8n Workflow Automation ────────────────────────────────────────
  n8n:
    image: n8nio/n8n:${N8N_VERSION:-latest}
    restart: unless-stopped
    depends_on:
      postgres:
        condition: service_healthy
    ports:
      - ${N8N_PORT:-5678}:5678
    environment:
      DB_TYPE: postgresdb
      DB_POSTGRESDB_HOST: postgres
      DB_POSTGRESDB_PORT: 5432
      DB_POSTGRESDB_DATABASE: ${POSTGRES_DB:-n8n}
      DB_POSTGRESDB_USER: ${POSTGRES_USER:-postgres}
      DB_POSTGRESDB_PASSWORD: ${POSTGRES_PASSWORD:-postgres}
      N8N_HOST: ${N8N_HOST:-localhost}
      N8N_PORT: 5678
      N8N_PROTOCOL: http
      N8N_DIAGNOSTICS_ENABLED: "false"
      N8N_PERSONALIZATION_ENABLED: "false"
      N8N_ENCRYPTION_KEY: ${N8N_ENCRYPTION_KEY:-change-this-encryption-key-in-production}
      N8N_USER_MANAGEMENT_JWT_SECRET: ${N8N_USER_MANAGEMENT_JWT_SECRET:-change-this-jwt-secret-in-production}
      GENERIC_TIMEZONE: ${GENERIC_TIMEZONE:-Europe/Berlin}
    volumes:
      - n8n_data:/home/node/.n8n
    healthcheck:
      # n8n only exposes /healthz once bootstrap finishes (DB migrations done).
      test:
        - CMD-SHELL
        - node -e "require('http').get('http://127.0.0.1:5678/healthz',r=>process.exit(r.statusCode===200?0:1)).on('error',()=>process.exit(1))"
      interval: 10s
      timeout: 10s
      retries: 60
      start_period: 120s
    networks:
      - goldview_net

  # ── GOLDview Dashboard (prebuilt image from Docker Hub) ────────────
  goldview:
    image: embraceable/goldview-frontend:${GOLDVIEW_VERSION:-latest}
    restart: unless-stopped
    depends_on:
      postgres:
        condition: service_healthy
      n8n:
        condition: service_started
    ports:
      - ${GOLDVIEW_PORT:-3001}:3001
    environment:
      # ── n8n PostgreSQL connection + poller tuning ──
      N8N_PG_CONNECTION_STRING: postgresql://${POSTGRES_USER:-postgres}:${POSTGRES_PASSWORD:-postgres}@postgres:5432/${POSTGRES_DB:-n8n}
      N8N_PG_POLL_INTERVAL_MS: ${N8N_PG_POLL_INTERVAL_MS:-10000}
      N8N_PG_EXECUTION_LIMIT: ${N8N_PG_EXECUTION_LIMIT:-5000}
      N8N_PG_EXECUTION_DATA_LIMIT: ${N8N_PG_EXECUTION_DATA_LIMIT:-1000}
      N8N_PG_LOAD_EXECUTION_DATA: ${N8N_PG_LOAD_EXECUTION_DATA:-true}

      # ── GOLDview server ──
      PORT: 3001
      DEMO_MODE: ${DEMO_MODE:-false}
      NODE_ENV: production
      DATABASE_URL: "file:./dev.db"
      GOLDVIEW_PUBLIC_URL: ${GOLDVIEW_PUBLIC_URL:-http://localhost:3001}

      # ── Auth ──
      GOLDVIEW_LOGIN_EMAIL: ${GOLDVIEW_LOGIN_EMAIL:[email protected]}
      GOLDVIEW_LOGIN_PASSWORD: ${GOLDVIEW_LOGIN_PASSWORD:-goldview}
      BETTER_AUTH_SECRET: ${BETTER_AUTH_SECRET:-change-me-to-a-random-secret-at-least-32-chars}

      # ── n8n SSO (sign in with n8n credentials) ──
      N8N_AUTH_ENABLED: ${N8N_AUTH_ENABLED:-true}
      N8N_REST_BASE_URL: ${N8N_REST_BASE_URL:-http://n8n:5678}

      # ── AI Briefing Room Assistant ──
      # PAT is configured via the in-app UI; the server does not read
      # OPENAI_API_KEY from the environment.
      AI_ASSISTANT_ENABLED: ${AI_ASSISTANT_ENABLED:-true}
      OPENAI_BASE_URL: ${OPENAI_BASE_URL:-''}
      OPENAI_MODEL: ${OPENAI_MODEL:-auto}
      AI_ASSISTANT_MAX_TOOL_CALLS: ${AI_ASSISTANT_MAX_TOOL_CALLS:-6}
      AI_ASSISTANT_RATE_LIMIT_PER_5MIN: ${AI_ASSISTANT_RATE_LIMIT_PER_5MIN:-30}
      EMBRACEABLE_BASE_URL: https://app-preview.embraceable.ai
      INFINITY_MOCK: ${DEMO_MODE:-false}
    volumes:
      - goldview_data:/data
    networks:
      - goldview_net

networks:
  goldview_net:
    name: goldview_net

volumes:
  postgres_data:
  n8n_data:
  goldview_data:

# ── GOLDview Docker image ──
# Pinned version for reproducible deployments, or `latest` to track the
# newest release.
GOLDVIEW_VERSION=v0.4.6

# ── PostgreSQL ──
POSTGRES_USER=postgres
POSTGRES_PASSWORD=postgres
POSTGRES_DB=n8n
POSTGRES_PORT=5432

# ── n8n ──
N8N_VERSION=latest
N8N_PORT=5678
N8N_HOST=localhost
N8N_ENCRYPTION_KEY=change-this-encryption-key-in-production
N8N_USER_MANAGEMENT_JWT_SECRET=change-this-jwt-secret-in-production
GENERIC_TIMEZONE=Europe/Berlin

# ── GOLDview ──
GOLDVIEW_PORT=3001
GOLDVIEW_PUBLIC_URL=http://localhost:3001
[email protected]
GOLDVIEW_LOGIN_PASSWORD=goldview
# Generate with: openssl rand -base64 32
BETTER_AUTH_SECRET=change-me-to-a-random-secret-at-least-32-chars

# ── Demo mode ──
# When true, pre-populates the dashboard with built-in seed data and
# pre-fills demo credentials ([email protected] / demo) on the login page.
# Useful to explore the UI before you have real n8n activity.
DEMO_MODE=true

# ── PostgreSQL Poller (tune for your workload) ──
N8N_PG_POLL_INTERVAL_MS=10000
N8N_PG_EXECUTION_LIMIT=5000
N8N_PG_EXECUTION_DATA_LIMIT=1000
N8N_PG_LOAD_EXECUTION_DATA=true

# ── n8n SSO ──
# When true: GOLDview users sign in with their n8n credentials.
#   - n8n owners/admins      → full dashboard access
#   - n8n regular users      → Builder section only
#   - Built-in Better Auth   → full dashboard access
N8N_AUTH_ENABLED=true
N8N_REST_BASE_URL=http://n8n:5678

# ── AI Briefing Room Assistant ──
# The API token is configured via the in-app UI on /briefing → Settings
# (admin only) and persisted to the dashboard database. The server does
# NOT read OPENAI_API_KEY from the environment.
AI_ASSISTANT_ENABLED=true
# OpenAI-compatible endpoint. The default targets the embraceable.ai
# gateway, where GOLDview-issued PATs (epat-…) are accepted. Override
# only if you proxy through your own host or point at OpenAI directly
# (leave empty to use the official OpenAI API).
OPENAI_BASE_URL=
# OPENAI_MODEL:
#   - "auto" (default for embraceable.ai): GOLDview discovers the active
#     model by calling <baseURL origin>/api/preview/model and picking
#     the first model whose name starts with "goldview".
#   - "gpt-4o-mini" or any explicit model id: pass the value verbatim.
OPENAI_MODEL=auto
AI_ASSISTANT_MAX_TOOL_CALLS=6
AI_ASSISTANT_RATE_LIMIT_PER_5MIN=30
EMBRACEABLE_BASE_URL=https://dev.embraceable.ai
INFINITY_MOCK=false

docker compose up -d

docker run -d \
  --name goldview \
  -p 3001:3001 \
  -e N8N_PG_CONNECTION_STRING="postgresql://user:pass@host:5432/n8n" \
  -e BETTER_AUTH_SECRET="$(openssl rand -base64 32)" \
  -e DEMO_MODE=false \
  -e N8N_AUTH_ENABLED=true \
  -e N8N_REST_BASE_URL="http://your-n8n-host:5678" \
  -e OPENAI_BASE_URL="https://app-preview.embraceable.ai/api/openai-compat/v1" \
  -v goldview_data:/data \
  embraceable/goldview-frontend:latest

  ┌──────────┐     store    ┌───────────────┐    poll    ┌─────────────┐
  │   n8n    │─────────────▶│   Postgres   │◀───────────│  GOLDview  │
  │          │             │ (workflows, │     read    │ (dashboard)│
  │          │             │  executions)│             │            │
  └──────────┘              └───────────────┘             └─────┬───────┘
                                                                │
                                                         ┌──────▼──────┐
                                                         │   SQLite    │
                                                         │ (dashboard  │
                                                         │   state)    │
                                                         └─────────────┘