Merge pull request #9 from marcinkantyka/feat/docker_compose

Add NETWORK_ALLOWED_HOSTS configuration and update LLM provider logic

Author: marcinkantyka

README.md

@@ -205,6 +205,7 @@ export LLM_PROVIDER=ollama
 export LLM_API_KEY=your-key-here       # Optional
 export LLM_TIMEOUT=60000
 export LLM_SEED=42                     # Optional
+export NETWORK_ALLOWED_HOSTS=ollama,localhost,127.0.0.1,::1
 ```
 
 Run `pr-review config init` to generate a default config file with all the available options.

docker/README.md

@@ -71,6 +71,16 @@ cd /path/to/your/repo
 ./run-review.sh review --base main
 ```
 
+### Run via docker-compose (manual profile):
+
+Set `REPO_PATH` to the repository you want to scan, then run:
+
+```bash
+REPO_PATH=/path/to/your/repo docker-compose up pr-review
+```
+
+This mounts the repo read-only at `/workspace` and writes outputs to `docker/output`.
+
 ### Alternative: Manual docker run
 
 If you prefer to use docker run directly:

docker/docker-compose.yml

@@ -31,6 +31,16 @@ services:
     # Use run-review.sh script or docker run to execute commands
     profiles:
       - manual
+    volumes:
+      - ${REPO_PATH:?Set REPO_PATH to the target git repo}:/workspace:ro
+      - ./output:/output
+    environment:
+      - LLM_PROVIDER=ollama
+      - LLM_ENDPOINT=http://ollama:11434
+      - LLM_MODEL=deepseek-coder:6.7b
+      - NETWORK_ALLOWED_HOSTS=ollama,localhost,127.0.0.1,::1
+      - NETWORK_STRICT_MODE=true
+    working_dir: /workspace
 
 networks:
   pr-review-network:

docker/run-review.sh

@@ -78,6 +78,7 @@ docker run --rm -it \
     -v "$SCRIPT_DIR/output:/output" \
     -e LLM_ENDPOINT=http://ollama:11434 \
     -e LLM_MODEL=deepseek-coder:6.7b \
+    -e NETWORK_ALLOWED_HOSTS=ollama,localhost,127.0.0.1,::1 \
     -e NETWORK_STRICT_MODE=true \
     -w /workspace \
     pr-reviewer-pr-review:${VERSION} \

src/core/llm/providers.ts

@@ -358,26 +358,27 @@ export class MockProvider implements LLMProvider {
 /**
  * Provider Factory
  */
-export function createLLMProvider(config: LLMConfig): LLMProvider {
+export function createLLMProvider(config: LLMConfig, allowedHosts?: string[]): LLMProvider {
   const { provider, endpoint, apiKey } = config;
 
   if (provider === 'mock') {
     return new MockProvider();
   }
 
   // SECURITY: Validate endpoint is localhost only
-  const allowedHosts = ['localhost', '127.0.0.1', '::1'];
-  validateEndpoint(endpoint, allowedHosts);
+  const resolvedAllowedHosts =
+    allowedHosts && allowedHosts.length > 0 ? allowedHosts : ['localhost', '127.0.0.1', '::1'];
+  validateEndpoint(endpoint, resolvedAllowedHosts);
 
   switch (provider) {
     case 'ollama':
-      return new OllamaProvider(endpoint, apiKey, allowedHosts);
+      return new OllamaProvider(endpoint, apiKey, resolvedAllowedHosts);
     case 'vllm':
-      return new VLLMProvider(endpoint, apiKey, allowedHosts);
+      return new VLLMProvider(endpoint, apiKey, resolvedAllowedHosts);
     case 'llamacpp':
-      return new LlamaCppProvider(endpoint, apiKey, allowedHosts);
+      return new LlamaCppProvider(endpoint, apiKey, resolvedAllowedHosts);
     case 'openai-compatible':
-      return new OpenAICompatibleProvider(endpoint, apiKey, allowedHosts);
+      return new OpenAICompatibleProvider(endpoint, apiKey, resolvedAllowedHosts);
     default:
       throw new ConfigError(`Unknown LLM provider: ${provider}`);
   }

src/core/review/engine.ts

@@ -18,7 +18,7 @@ export class ReviewEngine {
   private analyzer: ReviewAnalyzer;
 
   constructor(private readonly config: AppConfig) {
-    const provider = createLLMProvider(config.llm);
+    const provider = createLLMProvider(config.llm, config.network.allowedHosts);
     this.llmClient = new LLMClient(
       provider,
       config.llm.timeout,

src/core/storage/config.ts

@@ -131,6 +131,11 @@ export async function loadConfig(configPath?: string): Promise<AppConfig> {
   if (process.env.LLM_SEED) {
     config.llm!.seed = parseInt(process.env.LLM_SEED, 10);
   }
+  if (process.env.NETWORK_ALLOWED_HOSTS) {
+    config.network!.allowedHosts = process.env.NETWORK_ALLOWED_HOSTS.split(',')
+      .map((host) => host.trim())
+      .filter((host) => host.length > 0);
+  }
 
   try {
     return validateConfig(config) as AppConfig;