Production AI Wallet Deployment: GHCR Image with Auto-Provision and Secrets

Описание и применение

Автоматизированный развертывание AI‑кошелька WAIaaS в Docker с авто‑созданием мастер‑пароля, безопасным хранением секретов и проверкой состояния.

Задача

Deploy a self-hosted AI wallet so private keys never leave the server and avoid manual password setup.

Результат

A fully automated, self‑hosted AI wallet stack that keeps private keys local, manages secrets securely, and provides health‑check and restart capabilities.

Рабочий процесс

• Clone the WAIaaS repo
• Run docker compose up -d to start the daemon
• Retrieve the auto‑generated master password from /data/recovery.key
• Store the password securely
• Create a wallet via POST /v1/wallets with X-Master-Password header
• Configure RPC endpoints via environment variables or .env file
• Use Docker Secrets overlay to keep master password out of env vars
• Set up reverse proxy if needed, binding to 127.0.0.1:3100
• Enable restart: unless-stopped for uptime

Доказательства

The daemon generates a cryptographically random password and writes it to /data/recovery.key

Источник

WAIaaS supports Docker Secrets through a docker-compose.secrets.yml overlay file

Источник