sergdudko/tabellum-worker repository overview

docker run -d --name tabellum-worker \
  -p 8788:8788 \
  -e TABELLUM_WORKER_TOKEN=<at least 32 random characters> \
  -v tabellum-data:/data \
  {{IMAGE}}:latest

docker run -d --name tabellum-worker \
  -p 127.0.0.1:8788:8788 \
  -e TABELLUM_WORKER_AUTH=none \
  -v tabellum-data:/data \
  {{IMAGE}}:latest

export TABELLUM_LICENSE_KEY='TABL1.…'   # or that line in .env beside the file
docker compose up -d                     # then open http://localhost:8788

# Tabellum in a browser on this computer, with a database the worker manages
# (https://tabellum.dudko.dev/#compose). Nothing to create beside this file:
# the connection is written below, your key comes from the environment, and
# the workspace lives in a Docker volume.
#
#   export TABELLUM_LICENSE_KEY='TABL1.…'   # or that line in .env beside this file
#   docker compose up -d
#   open http://localhost:8788
#
# The browser shows Shop locked: it browses and queries, never sees the
# password, and cannot point the connection anywhere else.
name: tabellum

services:
  # The demo shop on PostgreSQL 16 (an invented store) with a read-only login,
  # `reader`. For a database of your own, change host, port, database, and
  # user in the connection below and the password under the worker, then
  # drop this service and the worker's depends_on.
  shop-db:
    image: ghcr.io/dudko-dev/tabellum-test-postgres:latest
    volumes:
      - shop-data:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD", "pg_isready", "-h", "127.0.0.1", "-d", "shop"]
      interval: 2s
      retries: 60

  worker:
    image: ghcr.io/dudko-dev/tabellum-worker:latest
    depends_on:
      shop-db:
        condition: service_healthy
    ports:
      # This computer only: that is what lets the worker run without a token.
      - "127.0.0.1:8788:8788"
    environment:
      TABELLUM_WORKER_AUTH: none
      # Unset, the app asks for the key instead.
      TABELLUM_LICENSE_KEY: ${TABELLUM_LICENSE_KEY:-}
      TABELLUM_MANAGED_DIR: /managed
      # Answers {secret: shop/password}. A real password belongs in a Docker
      # secret or Vault: an environment variable shows in `docker inspect`.
      TABELLUM_SECRET_SHOP_PASSWORD: reader
    configs:
      - source: shop
        target: /managed/connections/shop.yaml
    volumes:
      - workspace:/data

configs:
  shop:
    content: |
      id: 01JC5M00000000000000000001
      name: Shop
      driver: postgres
      host: shop-db
      port: 5432
      database: shop
      user: reader
      password: {secret: shop/password}
      tls: {mode: disable}
      readOnly: true

volumes:
  shop-data:
  workspace: