slh/infra
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

limit Mem0 env file to runtime secrets

Browse Source
This commit is contained in:
git-bridge 2026-07-17 05:49:19 +00:00
parent 33e7440342
commit 7fe78a06e9
2 changed files with 19 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
docker-compose.yaml
View File

@ -162,6 +162,21 @@ services:
stop_grace_period: 30s stop_grace_period: 30s
env_file: env_file:
- ./mem0/.env - ./mem0/.env
environment:
POSTGRES_HOST: postgres
POSTGRES_PORT: "5432"
POSTGRES_DB: mem0
POSTGRES_USER: mem0
POSTGRES_COLLECTION_NAME: mem0_bootstrap_unused
APP_DB_NAME: mem0_app
OPENAI_API_KEY: internal-litellm
OPENAI_BASE_URL: http://host.docker.internal:4000/v1
MEM0_DEFAULT_LLM_MODEL: grok-fast
MEM0_DEFAULT_EMBEDDER_MODEL: voyage-4
AUTH_DISABLED: "false"
MEM0_TELEMETRY: "false"
DASHBOARD_URL: http://127.0.0.1:8888
HISTORY_DB_PATH: /app/history/history.db
depends_on: depends_on:
postgres: postgres:
condition: service_healthy condition: service_healthy

7
mem0/README.md
View File

@ -8,6 +8,7 @@ Neo4j, or Qdrant. PostgreSQL/pgvector stores data in isolated `mem0` and
- embeddings: `voyage-4`, 1024 dimensions - embeddings: `voyage-4`, 1024 dimensions
The service is bound to `127.0.0.1:8888`. The OSS API paths do not use `/v1`. The service is bound to `127.0.0.1:8888`. The OSS API paths do not use `/v1`.
Runtime secrets live in ignored `mem0/.env` with mode `0600`; no model-provider Only `POSTGRES_PASSWORD`, `JWT_SECRET`, and `ADMIN_API_KEY` live in the ignored
credential is copied into Mem0. The image source is pinned to the upstream Mem0 `mem0/.env` with mode `0600`. Non-secret runtime settings stay in Compose, and no
`v2.0.12` release commit. model-provider credential is copied into Mem0. The image source is pinned to the
upstream Mem0 `v2.0.12` release commit.