Production AI Wallet Deployment: GHCR Image with Auto-Provision and Secrets

说明与用途

使用 Docker 自动部署 WAIaaS AI 钱包，自动生成主密码，安全管理密钥，并集成健康检查。

问题

Deploy a self-hosted AI wallet so private keys never leave the server and avoid manual password setup.

结果

A fully automated, self‑hosted AI wallet stack that keeps private keys local, manages secrets securely, and provides health‑check and restart capabilities.

工作流

• Clone the WAIaaS repo
• Run docker compose up -d to start the daemon
• Retrieve the auto‑generated master password from /data/recovery.key
• Store the password securely
• Create a wallet via POST /v1/wallets with X-Master-Password header
• Configure RPC endpoints via environment variables or .env file
• Use Docker Secrets overlay to keep master password out of env vars
• Set up reverse proxy if needed, binding to 127.0.0.1:3100
• Enable restart: unless-stopped for uptime

证据

The daemon generates a cryptographically random password and writes it to /data/recovery.key

来源

WAIaaS supports Docker Secrets through a docker-compose.secrets.yml overlay file

来源