Node and OCI container

import {
  createPactmarkNodeServer,
  installGracefulShutdown,
} from "@pactmark/node";
import { createAgentFetchHandler } from "@pactmark/http";

const handler = createAgentFetchHandler({
  basePath: "/v1",
  runtime,
  authenticate: async (request) => resolvePrincipalAndTenant(request),
});

const server = createPactmarkNodeServer(handler, {
  publicOrigin: process.env.PUBLIC_ORIGIN,
  readEnvironment: () => ({ PACTMARK_PROFILE: process.env.PACTMARK_PROFILE }),
  capabilities: runtime.getCapabilities(),
});

installGracefulShutdown(server, { signal: "SIGTERM", timeoutMs: 30_000 });

server.listen(8080);

import { createPostgresWorkerDriver } from "@pactmark/driver-postgres-worker";

const worker = createPostgresWorkerDriver({
  pool,
  leaseDurationMs: 30_000,
  claimBatchSize: 8,
});

await worker.run({ signal: shutdownController.signal });

services:
  api:
    image: your-registry/pactmark-api:1.0.0
    environment:
      PACTMARK_PROFILE: production
      DATABASE_URL: postgres://app@db:5432/pactmark?sslmode=verify-full
    read_only: true
    user: "10001:10001"
    cap_drop: ["ALL"]
    security_opt: ["no-new-privileges:true"]
    healthcheck:
      test: ["CMD", "curl", "-fsS", "http://localhost:8080/readyz"]

  worker:
    image: your-registry/pactmark-worker:1.0.0
    environment:
      PACTMARK_PROFILE: production
      DATABASE_URL: postgres://app@db:5432/pactmark?sslmode=verify-full
    read_only: true
    user: "10001:10001"
    cap_drop: ["ALL"]
    security_opt: ["no-new-privileges:true"]