# ops/config/service-registry.yaml # Service Registry — 服務 Stateful 分級清單 # 版本: 1.0.0 # 建立: Claude Sonnet 4.6 / 2026-04-08 Asia/Taipei # 維護: 修改需 PR + 統帥審核，禁止直接 push # 說明: # BLOCK = 系統禁止自動修復，僅告警（資料風險最高） # CRITICAL_HITL = 允許 Playbook，但需 MultiSig 2票 # STANDARD_HITL = 允許 Playbook，需 1票審核 # AUTO = 允許自動執行（無狀態服務） # 參考: ADR-062, ADR-063 services: # ─── BLOCK：系統禁止（連 Playbook 都不提供）──────────────────────────── - name: postgres display_name: "PostgreSQL 主庫 (awoooi_prod)" host: "192.168.0.188" stateful_level: BLOCK reason: "主要業務資料庫，重啟可能導致 WAL 截斷、事務回滾" alert_only: true containers: ["postgres"] - name: momo-db display_name: "PostgreSQL (momo_db)" host: "192.168.0.188" stateful_level: BLOCK reason: "momo 產品資料庫，禁止自動操作" alert_only: true containers: ["momo-db"] - name: langfuse-db display_name: "PostgreSQL (Langfuse)" host: "192.168.0.110" stateful_level: BLOCK reason: "LLM trace 資料庫，重啟導致追蹤資料遺失" alert_only: true containers: ["langfuse-db"] - name: harbor-db display_name: "PostgreSQL (Harbor Registry)" host: "192.168.0.110" stateful_level: BLOCK reason: "Harbor Registry 資料庫，重啟可能損壞 image layer 索引" alert_only: true containers: ["harbor-db"] - name: sentry-postgres display_name: "PostgreSQL (Sentry)" host: "192.168.0.110" stateful_level: BLOCK reason: "Sentry 錯誤追蹤資料庫" alert_only: true containers: ["sentry-postgres"] - name: signoz-clickhouse display_name: "ClickHouse (SignOz)" host: "192.168.0.188" stateful_level: BLOCK reason: "列欄式 OLAP 資料庫，寫入中重啟可能損壞列欄檔案" alert_only: true containers: ["signoz-clickhouse"] # ─── CRITICAL_HITL：高風險，需 MultiSig 2票 ────────────────────────── - name: redis display_name: "Redis (AWOOOI)" host: "192.168.0.188" stateful_level: CRITICAL_HITL reason: "AWOOOI 依賴 Redis 做冪等鎖與快取，重啟丟失鎖狀態" requires_pre_backup: false containers: ["redis"] - name: harbor-redis display_name: "Redis (Harbor)" host: "192.168.0.110" stateful_level: CRITICAL_HITL reason: "Harbor session 快取" containers: ["harbor-redis"] - name: sentry-redis display_name: "Redis (Sentry)" host: "192.168.0.110" stateful_level: CRITICAL_HITL reason: "Sentry 任務佇列" containers: ["sentry-redis"] - name: gitea display_name: "Gitea (程式碼倉庫)" host: "192.168.0.110" stateful_level: CRITICAL_HITL reason: "restart 會殺掉活躍 SSH session，Git push 中斷可能損壞 working copy" requires_pre_backup: false containers: ["gitea"] - name: harbor display_name: "Harbor (Container Registry)" host: "192.168.0.110" stateful_level: CRITICAL_HITL reason: "重啟中斷 pull/push；GC 進行中重啟可能損壞 layer" requires_pre_backup: false containers: ["harbor-core", "harbor-jobservice", "harbor-portal"] - name: minio display_name: "MinIO (物件存儲)" host: "192.168.0.188" stateful_level: CRITICAL_HITL reason: "寫入中重啟可能導致 multipart upload 中斷" requires_pre_backup: false containers: ["minio"] # ─── STANDARD_HITL：中風險，需 1票審核 ────────────────────────────── - name: prometheus display_name: "Prometheus" host: "192.168.0.110" stateful_level: STANDARD_HITL reason: "有 TSDB WAL，exited 狀態用 docker start（非 restart）" restart_command: "docker start" containers: ["prometheus"] - name: grafana display_name: "Grafana" host: "192.168.0.110" stateful_level: STANDARD_HITL reason: "有 SQLite 設定儲存，exited 用 docker start" restart_command: "docker start" containers: ["grafana"] - name: alertmanager display_name: "Alertmanager" host: "192.168.0.110" stateful_level: STANDARD_HITL reason: "有 silence 狀態，exited 用 docker start" restart_command: "docker start" containers: ["alertmanager"] # ─── AUTO：無狀態，允許自動修復 ────────────────────────────────────── - name: nginx display_name: "Nginx (反向代理)" host: "192.168.0.110" stateful_level: AUTO containers: ["nginx", "nginx-188"] - name: awoooi-api display_name: "AWOOOI API (K3s)" host: "k3s" stateful_level: AUTO containers: [] - name: awoooi-web display_name: "AWOOOI Web (K3s)" host: "k3s" stateful_level: AUTO containers: [] - name: blackbox-exporter display_name: "Blackbox Exporter" host: "192.168.0.110" stateful_level: AUTO containers: ["blackbox-exporter"] - name: sentry display_name: "Sentry (錯誤追蹤)" host: "192.168.0.110" stateful_level: AUTO reason: "Web server 無狀態，docker compose up -d 即可恢復" containers: ["sentry-web", "sentry-worker", "sentry-cron"] - name: langfuse display_name: "Langfuse (LLMOps)" host: "192.168.0.110" stateful_level: AUTO containers: ["langfuse-web", "langfuse-worker"] - name: signoz display_name: "SignOz (APM)" host: "192.168.0.188" stateful_level: AUTO reason: "APM 無狀態查詢層，docker compose up -d 可恢復（ClickHouse 資料不受影響）" containers: ["signoz"] - name: bitan-app display_name: "Bitan App" host: "192.168.0.188" stateful_level: AUTO containers: ["bitan-app"] - name: ollama display_name: "Ollama (Local LLM)" host: "192.168.0.188" stateful_level: AUTO containers: ["ollama"] - name: momo-app display_name: "momo Web App" host: "192.168.0.188" stateful_level: AUTO containers: ["momo-app"] - name: tsenyang-website display_name: "Tsenyang Website" host: "192.168.0.188" stateful_level: AUTO containers: ["tsenyang-website"] - name: stock-platform display_name: "Stock Platform" host: "192.168.0.110" stateful_level: AUTO containers: ["stock-platform"] # ─── 備份策略參考 ──────────────────────────────────────────────────────── backup_policies: velero_max_age_hours: 4 # Velero 備份過期閾值（Q2 決策） emergency_backup_timeout: 600 # 緊急備份超時秒數 block_backup_on_high_io: true # CPU/IO > 80% 時禁止觸發備份（Q4 決策） io_threshold_percent: 80 # ─── MultiSig 設定 ─────────────────────────────────────────────────────── multisig: critical_required_votes: 2 # CRITICAL_HITL 需要幾票 standard_required_votes: 1 # STANDARD_HITL 需要幾票 vote_expiry_minutes: 30 # 投票有效期