Production Docker Architecture: WAIaaS Daemon + Push-Relay for Enterprise AI Wallets

说明与用途

在 Docker 中部署 WAIaaS 为 AI 代理提供自托管钱包基础设施，私钥和策略保存在本地服务器上，可选的移动推送通知通过单独的 push‑relay 服务实现。

问题

Developers building autonomous AI agents that handle real money need secure, self‑hosted wallet infrastructure to avoid third‑party custody, rate limits, and vendor lock‑in.

结果

Deploying WAIaaS via Docker Compose yields a production‑ready, self‑hosted wallet daemon with optional mobile approvals, secure key storage, and robust health monitoring.

工作流

• Clone the WAIaaS repo
• Run docker compose up -d to start the daemon (or use docker run with auto‑provision for scripted setups)
• Retrieve the auto‑generated master password from /data/recovery.key if using auto‑provision
• Configure environment variables (e.g., RPC endpoints, port, hostname) in docker-compose.yml or via Docker secrets
• Mount a named volume (waiaas-data) to persist wallet data across restarts
• Optionally deploy the push-relay service for mobile approvals
• Set up a reverse proxy (nginx, Caddy) if external access is required, ensuring TLS termination
• Use Docker secrets overlay to keep the master password out of environment variables
• Monitor the daemon via the healthcheck endpoint and restart policy

证据

WAIaaS ships two Docker images: waiaas daemon and push‑relay

来源

The daemon is not exposed to the internet out of the box

来源