fix(server): harden self-hosted server — pgvector upgrade, admin auth, endpoint security (#5360)

2026-06-05 16:35:12 +05:30
parent 90f2d24e83
commit ae7f406265
10 changed files with 375 additions and 31 deletions
@@ -30,16 +30,16 @@ services:
      - MEM0_TELEMETRY=${MEM0_TELEMETRY:-true}

  postgres:
-      image: ankane/pgvector:v0.5.1
+      image: pgvector/pgvector:pg17
      restart: on-failure
      shm_size: "128mb"
      networks:
        - mem0_network
      environment:
-        - POSTGRES_USER=postgres
-        - POSTGRES_PASSWORD=postgres
+        - POSTGRES_USER=${POSTGRES_USER:-postgres}
+        - POSTGRES_PASSWORD=${POSTGRES_PASSWORD:?Set POSTGRES_PASSWORD in .env}
      healthcheck:
-        test: ["CMD", "pg_isready", "-q", "-d", "postgres", "-U", "postgres"]
+        test: ["CMD-SHELL", "pg_isready -q -d postgres -U ${POSTGRES_USER:-postgres}"]
        interval: 5s
        timeout: 5s
        retries: 5