generate_docs.py 23 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565
  1. # $Id$
  2. # $Author$
  3. # $log$
  4. import os
  5. import subprocess
  6. docs_dir = "docs"
  7. os.makedirs(docs_dir, exist_ok=True)
  8. docs = {
  9. "Final_Report.md": """# $Id$
  10. # Final Project Report (Living Document)
  11. ## What Has Been Done
  12. 1. **Core Architecture**: Deployed a resilient 8-container local fallback Docker Compose stack (MySQL, Streamlit UI, local Ollama LLM, anonymous SearXNG search, secure Nginx proxy, and local Zabbix Server/Web/Agent observability suite).
  13. 2. **Database Optimization**: Successfully loaded OpenFoodFacts records and utilized advanced vertical partitioning and FULLTEXT indices.
  14. 3. **Clinical Subquery Strategy**: Refactored the core Pandas/SQL query pipeline to use subquery limiting, resolving Cartesian join explosions and reducing query latency to ~0.04s.
  15. 4. **Monitoring & Security**: Nginx securely proxies traffic on Port 80. Zabbix actively monitors proxy and server health, dynamically handling SNMP/alert loops in local/offline fallback mode.
  16. 5. **Git Versioning**: Implemented Git `.gitattributes` to push `$Id$` tracking directly into the Python Application UI.
  17. ## What Needs To Be Done (Day 2 Operations)
  18. 1. **SSL/TLS Certificates**: The Nginx proxy is functional on HTTP port 80. Port 443 (HTTPS) must be configured with a Let's Encrypt certificate for true production encryption.
  19. 2. **User Acceptance Testing (UAT)**: Clinical dietitians should rigorously test the AI Chat constraints and Plate Builder to ensure edge cases are handled safely.
  20. 3. **Advanced Rate Limiting**: Limit the number of AI requests per user using a sliding window algorithm in `app.py`.
  21. ## What Is The Next Step
  22. - Execute the `data_sync.sh` cron job monthly.
  23. - Maintain the automated `backup_db.sh` 7-day retention cycle.
  24. - Begin the hand-off to the operational team for Phase 2 feature requests.
  25. """,
  26. "Backup_Procedure.md": """# $Id$
  27. # Database Backup and Restore Procedure
  28. ## 1. Overview & Policy
  29. To guarantee clinical records integrity and high availability, Local Food AI enforces a strict backup schedule.
  30. - **Scope**: Includes MySQL schemas (`food_db`), user profiles (`app_auth`), and configuration states.
  31. - **Retention Plan**: Automated daily backups with a strict 7-day rolling window purge.
  32. - **Storage Location**: Stored securely inside the persistent `/backups` directory on the host server.
  33. ---
  34. ## 2. Automated Daily Backups
  35. The automated backup mechanism runs via a host cron job pointing to `backup_db.sh`.
  36. - The script dynamically detects the active MySQL container name (`food-mysql-1` or `food_project-mysql-1`).
  37. - It executes `mysqldump` directly inside the container without exposing root passwords to shell logs.
  38. - Outputs are compressed via `gzip` and timestamped: `food_db_YYYYMMDD_HHMM.sql.gz`.
  39. ### Cron Configuration Example:
  40. To run the backup daily at 02:00 AM, add the following to `/etc/crontab`:
  41. ```bash
  42. 0 2 * * * root /bin/bash /c/Users/lanfr144/Documents/DOPRO1/Antigravity/Food/backup_db.sh >> /var/log/backup_db.log 2>&1
  43. ```
  44. ---
  45. ## 3. Manual Backup Execution
  46. If a system migration or major upgrade is scheduled, perform a manual dump using the following command:
  47. ```bash
  48. # 1. Navigate to the project directory
  49. cd /c/Users/lanfr144/Documents/DOPRO1/Antigravity/Food
  50. # 2. Run the backup wrapper
  51. bash backup_db.sh
  52. ```
  53. Verify the output exists inside the backups folder:
  54. ```bash
  55. ls -lh backups/
  56. ```
  57. ---
  58. ## 4. Step-by-Step Restore Procedure
  59. In the event of database corruption or hardware failure, follow these exact steps to restore the database.
  60. ### Step 4.1: Identify the Target Backup File
  61. List available files and pick the desired timestamp:
  62. ```bash
  63. ls -la backups/
  64. # Example Target: backups/food_db_20260521_1100.sql.gz
  65. ```
  66. ### Step 4.2: Verify MySQL Container Health
  67. Ensure the MySQL service container is running and healthy:
  68. ```bash
  69. docker ps --filter name=mysql
  70. ```
  71. ### Step 4.3: Execute Restore Stream
  72. Decompress the backup on-the-fly and pipe it directly into the running MySQL container:
  73. ```bash
  74. # Adjust the container name ('food-mysql-1' or 'food_project-mysql-1') based on active deployment
  75. gunzip < backups/food_db_20260521_1100.sql.gz | docker exec -i food-mysql-1 mysql -u root -proot_pass food_db
  76. ```
  77. ### Step 4.4: Verify Restored Tables
  78. Log in to the database and query the core table to confirm the tables are intact and populated:
  79. ```bash
  80. docker exec -it food-mysql-1 mysql -u food_reader -preader_pass food_db -e "SELECT COUNT(*) FROM products_core;"
  81. ```
  82. Expected result: A count of OpenFoodFacts entries (typically > 10,000 records).
  83. ---
  84. ## 5. Verification & Health Check Loops
  85. Operators must verify the backup archive integrity weekly:
  86. 1. Copy the `.gz` backup to a local testing workspace.
  87. 2. Run `gzip -t backups/filename.sql.gz` to ensure the archive is not corrupted.
  88. 3. Test restoring to a local fallback container instance to verify data accessibility.
  89. """,
  90. "Data_Ingestion.md": """# $Id$
  91. # Data Ingestion Pipeline
  92. ## Overview
  93. The application utilizes `data_sync.sh` to update the OpenFoodFacts dataset.
  94. ## Online Mode
  95. Run `bash data_sync.sh --online`. The script will download the latest CSV directly from the official servers and trigger the ingestion pipeline.
  96. ## Offline Mode
  97. Drop a `en.openfoodfacts.org.products.csv` file into the `/data` folder and run `bash data_sync.sh`. The script detects the file and triggers the Docker ingestion container.
  98. """,
  99. "Installation_Guide.md": """# $Id$
  100. # Installation Guide
  101. ## Requirements
  102. - Ubuntu 24.04 LTS (or WSL2)
  103. - Docker & Docker Compose
  104. - 16GB RAM Minimum
  105. ## Deployment Steps
  106. 1. **Clone the Repository**:
  107. - *Online Mode*: `git clone https://git.btshub.lu/lanfr/LocalFoodAI_lanfr144.git`
  108. - *Offline/Disconnected Mode*: Copy the repository files directly to the target environment via SCP or USB storage.
  109. 2. `cd LocalFoodAI_lanfr144`
  110. 3. `chmod +x data_sync.sh backup_db.sh`
  111. 4. **Deploy Stack**:
  112. - For regular production: `docker compose up -d --build`
  113. - For local/offline single-node fallback: `docker compose -f docker-compose_skip.yml up -d`
  114. 5. Navigate to `http://localhost` (or `http://localhost:8502` for direct Streamlit port)
  115. """,
  116. "User_Guide.md": """# $Id$
  117. # User Guide
  118. ## 1. Clinical Data Search
  119. Search for products using keywords. The system utilizes FULLTEXT matching to instantly return the top 10 relevant matches alongside macronutrient data.
  120. ## 2. My Plate Builder
  121. Add portion sizes of different foods to calculate cumulative nutritional intake. Use the 🗑️ icon to remove items.
  122. ## 3. Chat with AI
  123. Ask the `llama3.2:3b` model complex dietary questions. It natively utilizes RAG Tool Calling to silently search the database and formulate clinical answers.
  124. """,
  125. "Wiki_Home.md": """# $Id$
  126. # Documentation Home
  127. Welcome to the static documentation mirror. Please navigate the markdown files in this directory for architectural diagrams and guides.
  128. """,
  129. "Scrum_Wiki.md": """# $Id$
  130. # Scrum Wiki Master List & Index Portal
  131. Welcome to the static Scrum documentation portal. This master wiki aggregates and organizes all daily stand-up logs, planning reports, retrospectives, reviews, and velocity charts recorded during the agile development of the **Local Food AI** clinical dietetics engine.
  132. ---
  133. ## 📅 Sprint Ceremonies & Logs
  134. ### 1. [Sprint Plans (Scrum_Plan.md)](file:///c:/Users/lanfr144/Documents/DOPRO1/Antigravity/Food/docs/Scrum_Plan.md)
  135. *Contains Sprint Plan formulations, active user stories selection, scope statements, and team capacity bounds for each milestone loop.*
  136. ### 2. [Daily Scrums (Scrum_Daily.md)](file:///c:/Users/lanfr144/Documents/DOPRO1/Antigravity/Food/docs/Scrum_Daily.md)
  137. *Continuous daily stand-up summaries tracking individual task completion, blocker mitigations, and immediate day-to-day coordination.*
  138. ### 3. [Sprint Reviews (Scrum_Review.md)](file:///c:/Users/lanfr144/Documents/DOPRO1/Antigravity/Food/docs/Scrum_Review.md)
  139. *Contains sprint review logs, clinician demonstration summaries, feature validation checklists, and stakeholder feedback logs.*
  140. ### 4. [Sprint Retrospectives (Scrum_Retro.md)](file:///c:/Users/lanfr144/Documents/DOPRO1/Antigravity/Food/docs/Scrum_Retro.md)
  141. *Reviews process improvements, continuous integration learnings, and action items aimed at optimizing team operations and environment tuning.*
  142. ---
  143. ## 📊 Deliverables & Quality Assurance
  144. ### 5. [Scrum Artifacts (Scrum_Artifacts.md)](file:///c:/Users/lanfr144/Documents/DOPRO1/Antigravity/Food/docs/Scrum_Artifacts.md)
  145. *Indexes sprint velocity metrics, completed story points distributions, burndown coordinates, and final Taiga delivery milestones.*
  146. ### 6. [Sprint 8 Test Cases (Test_Cases_Sprint8.md)](file:///c:/Users/lanfr144/Documents/DOPRO1/Antigravity/Food/docs/Test_Cases_Sprint8.md)
  147. *Legacy acceptance test logs covering core NLP chat, portion converters, and initial search validations.*
  148. ---
  149. > [!NOTE]
  150. > **Operational Compliance**: All Scrum files above are synchronized with their respective Taiga milestone identifiers (`Sprint 13` and `Sprint 7`). All physical activities recorded in these markdown logs have corresponding closed tasks inside Taiga.
  151. """,
  152. "Scrum_Daily.md": """# $Id$
  153. # Daily Scrums
  154. - **26.05.07 DAILY**: Fixed time scope bug, added Nginx proxy, built sync scripts.
  155. """,
  156. "Scrum_Plan.md": """# $Id$
  157. # Sprint Plans
  158. - **Sprint 10 PLAN**: Fix LLM Tool Calling, optimize Cartesian SQL explosion, build Teams webhooks.
  159. """,
  160. "Scrum_Retro.md": """# $Id$
  161. # Sprint Retrospectives
  162. - **Sprint 10 RETROSPECTIVE**: Mitigated dirty data duplicates using SQL `GROUP BY`. Need to maintain strict Git commit tagging (`TG-XXX`).
  163. """,
  164. "Scrum_Review.md": """# $Id$
  165. # Sprint Reviews
  166. - **Sprint 10 REVIEW**: App executes sub-second searches. Nginx fully operational on Port 80.
  167. """,
  168. "Scrum_Artifacts.md": """# $Id$
  169. # Scrum Artifacts
  170. Contains User Stories, velocity tracking, and burndown charts from Taiga.
  171. """,
  172. "Test_Cases_Sprint8.md": """# $Id$
  173. # Sprint 8 Legacy Test Cases
  174. - Tested RAG AI tool integration.
  175. - Tested user authentication flows.
  176. """,
  177. "WSL_Deployment.md": """# $Id$
  178. # WSL Deployment Runbook
  179. To deploy on Windows Subsystem for Linux:
  180. 1. Ensure WSL2 backend is enabled in Docker Desktop.
  181. 2. Follow standard Installation Guide inside the WSL Ubuntu terminal.
  182. """,
  183. "User_Description.md": """# $Id$
  184. # Local Food AI - User Description & Functional Guide
  185. ## 1. System Vision
  186. The **Local Food AI** system is a strictly local, privacy-first, professional-grade clinical dietetics assistant. Developed specifically for clinics and healthcare practitioners, it provides offline nutritional analysis, meal planning, and warning flags based on dynamic patient health profiles.
  187. Since the system operates entirely locally on local hypervisors, **zero patient medical data or search queries ever leave the server boundary**, ensuring 100% HIPAA compliance and data sovereignty.
  188. ---
  189. ## 2. Core Functional Pillars
  190. ### 📊 tab 1: Clinical Data Search (🔬 Clinical Search)
  191. Allows practitioners to search the 24GB OpenFoodFacts dataset in real time (average query response time < 0.04 seconds).
  192. - **Dynamic Medical Warnings**: Based on the active patient profile, foods are immediately flagged in the search results:
  193. - ⚠️ **Red Warning Flags**: Highlight high-risk ingredients (e.g. Unpasteurized dairy or raw fish for pregnant patients, high-sodium foods for hypertensive patients, or high-sugar foods for diabetic patients).
  194. - 💚 **Green Recommendations**: Highlight recommended dietary components (e.g. High iron/calcium for pregnant or breastfeeding mothers, high Vitamin C for scurvy prevention, or high iron for anemia).
  195. - **Flexible Column Customization**: Multi-select column headers to inspect specific macro and micro-nutrients.
  196. ### 💬 tab 2: AI Clinical Chat (💬 AI Chat)
  197. An interactive NLP dialogue interface powered by a local lightweight LLM (**Llama3.2:3b**).
  198. - **RAG-Driven Precision**: The AI dietitian automatically retrieves and reviews local database records and private meta-search results before formulating an answer.
  199. - **Dynamic Medical Guardrails**: The user's active illnesses, diets, and conditions are injected into the AI's system prompt in the background, forcing the AI to strictly enforce clinical safety constraints.
  200. ### 🍽️ tab 3: My Plate Builder (🍽️ My Plate Builder)
  201. A recipe formulation utility to calculate combined nutritional intake.
  202. - **Natural Language Parsing**: Enables entering quantities in natural units (e.g., "1.5 cups", "2 tablespoons", "150g").
  203. - **Exact Conversion**: The system translates these custom units into metric grams based on product density metrics.
  204. - **Macro Summaries**: Instantly calculates and displays the total combined Protein, Fat, and Carbohydrates.
  205. ### 🤖 tab 4: AI Meal Planner (🤖 AI Meal Planner)
  206. An automated clinical diet planner.
  207. - Generates a multi-meal daily menu formatted strictly as a Markdown table.
  208. - Dynamically enforces user-defined calorie limits and active medical restrictions.
  209. ---
  210. ## 3. Supported Health & Medical Profiles
  211. - **Conditions**: Pregnant, Breastfeeding, Low Fat, Osteoporosis.
  212. - **Illnesses**: Diabetes, Hypertension, Kidney Disease, Scurvy, Anemia.
  213. - **Diets**: Vegan, Vegetarian, Kosher, Halal, Keto, Paleo, Christian (Lent/Good Friday).
  214. """,
  215. "Start_Stop_Procedures.md": """# $Id$
  216. # Infrastructure Stop & Start Operational Procedures
  217. This runbook outlines the exact sequence and commands to start, stop, and verify each microservice in the Local Food AI environment.
  218. ---
  219. ## 1. Sequence Priority Rules
  220. Due to database socket requirements and network bindings, services **must** be started and stopped in the following order:
  221. ```mermaid
  222. graph TD
  223. subgraph Startup Sequence
  224. direction TB
  225. A[1. MySQL Database] --> B[2. Ollama & SearXNG AI Services]
  226. B --> C[3. Streamlit Application & Nginx Proxy]
  227. C --> D[4. Zabbix Monitoring & Airflow Supervisor]
  228. end
  229. ```
  230. ---
  231. ## 2. Startup Procedures
  232. ### Step 2.1: Start the Core MySQL Database
  233. Verify that the database service is up and listening on port 3307:
  234. ```bash
  235. docker compose up -d mysql
  236. # Verify database logs
  237. docker compose logs -f mysql
  238. ```
  239. ### Step 2.2: Start AI Engine & SearXNG Search
  240. Deploy the AI components:
  241. ```bash
  242. docker compose up -d ollama searxng
  243. # Check that Ollama responds
  244. curl http://localhost:11434/api/tags
  245. ```
  246. ### Step 2.3: Start Streamlit App and Nginx Gateway
  247. Bring up the frontend web interface and reverse proxy:
  248. ```bash
  249. docker compose up -d app nginx
  250. # Verify Web Interface status
  251. curl -I http://localhost
  252. ```
  253. ### Step 2.4: Start Zabbix Monitoring Suite
  254. Deploy the monitoring server and agents:
  255. ```bash
  256. docker compose up -d zabbix-server zabbix-web zabbix-agent
  257. # Check dashboard availability
  258. curl -I http://localhost:8081
  259. ```
  260. ---
  261. ## 3. Shutdown Procedures
  262. To perform system maintenance or schema migration, stop services in reverse order to prevent lockups:
  263. ```bash
  264. # 1. Stop Monitoring Components
  265. docker compose stop zabbix-agent zabbix-web zabbix-server
  266. # 2. Stop Web Frontend and Proxy Gateway
  267. docker compose stop nginx app
  268. # 3. Stop NLP and Search Services
  269. docker compose stop searxng ollama
  270. # 4. Stop Database Container gracefully
  271. docker compose stop mysql
  272. ```
  273. ---
  274. ## 4. Status Verification Commands
  275. Use these commands to verify container state and port bindings:
  276. ```bash
  277. # List all running containers in the stack
  278. docker compose ps
  279. # Inspect raw container logs for error spikes
  280. docker compose logs --tail=100
  281. # Verify TCP socket listener binds
  282. netstat -tulpn | grep -E "80|3307|8081|11434"
  283. ```
  284. """,
  285. "Operator_Installation_Guide.md": """# $Id$
  286. # Local Food AI - Detailed Operator Installation Guide
  287. This document is a step-by-step installation, mapping, configuration, and verification manual for deploying the **Local Food AI** system in an enterprise environment. It covers hybrid hypervisor infrastructure (WSL2, Hyper-V, and VirtualBox), cross-node networking, SNMPv3 monitoring, alert channels, and acceptance testing.
  288. ---
  289. ## 1. Pre-Deployment Operator Survey (Pre-requisites Gathering)
  290. Before running installation scripts, the operator **must** collect the following physical/virtual infrastructure parameters and store them in the deployment matrix:
  291. | REQUIRED PARAMETER | OPERATOR INPUT / DESCRIPTION |
  292. | :--- | :--- |
  293. | **Deployment Workstation IP** | e.g., 192.168.1.50 |
  294. | **Hyper-V Host VM IP** | e.g., 192.168.130.170 |
  295. | **VirtualBox Host VM IP** | e.g., 192.168.130.161 |
  296. | **SSH Key Location (Private)** | e.g., `~/.ssh/id_rsa` |
  297. | **SMTP Relay Password** | e.g., `********` (For Zabbix/App password reset email) |
  298. | **Teams/Discord Webhook URL** | e.g., `https://discord.com/api/webhooks/...` |
  299. ---
  300. ## 2. Platform Mapping: Which Container Goes Where?
  301. To maximize CPU/GPU efficiency and secure database read/writes, services are distributed across three distinct environments:
  302. | COMPONENT CONTAINER | DEPLOYMENT ENVIRONMENT | WHY |
  303. | :--- | :--- | :--- |
  304. | **streamlit-app (app.py)** | Local WSL2 (Windows) | Low-latency rendering and direct client access |
  305. | **mysql (Database Node)** | Hyper-V VM (Server A) | Persistent enterprise-grade disk storage |
  306. | **ollama (NLP Llama3.2:3b Engine)** | VirtualBox VM (Server B) | Dedicated CPU/GPU virtualization allocation |
  307. | **zabbix-server & web (Monitoring)** | Hyper-V VM (Server A) | Centralized SNMPv3 alert processing and logs |
  308. | **searxng (Meta-Search Gateway)** | Local WSL2 (Windows) | Dynamic browser-level loopbacks |
  309. ---
  310. ## 3. Platform Provisioning Commands
  311. ### 3.1: WSL2 Provisioning (Local Client Workstation)
  312. Enable WSL2 and install Ubuntu 24.04:
  313. ```powershell
  314. # Run in Administrator PowerShell
  315. dism.exe /online /enable-feature /featurename:Microsoft-Windows-Subsystem-Linux /all /norestart
  316. dism.exe /online /enable-feature /featurename:VirtualMachinePlatform /all /norestart
  317. wsl --install -d Ubuntu-24.04
  318. ```
  319. ### 3.2: Hyper-V VM Provisioning (Server A - Database & Zabbix)
  320. Deploy a dedicated Ubuntu VM on Hyper-V using PowerShell:
  321. ```powershell
  322. # Run in Administrator PowerShell on Server A
  323. New-VM -Name "FoodAI-Database-Node" -MemoryStartupBytes 8GB -Generation 2 -NewVHDPath "C:\\VMs\\FoodAI_DB.vhdx" -VHDSizeBytes 80GB -SwitchName "External Switch"
  324. Set-VMFirmware -VMName "FoodAI-Database-Node" -EnableSecureBoot Off
  325. Start-VM -Name "FoodAI-Database-Node"
  326. ```
  327. ### 3.3: VirtualBox VM Provisioning (Server B - Ollama AI Engine)
  328. Deploy a dedicated VM on VirtualBox using Command Line:
  329. ```bash
  330. # Run in Command Prompt on Server B
  331. vboxmanage createvm --name "FoodAI-AI-Node" --ostype "Ubuntu_64" --register
  332. vboxmanage modifyvm "FoodAI-AI-Node" --memory 8192 --cpus 4 --vram 128 --nic1 bridged --bridgeadapter1 "Intel Ethernet Connection"
  333. vboxmanage createhd --filename "C:\\VMs\\FoodAI_AI.vdi" --size 60000
  334. vboxmanage storagectl "FoodAI-AI-Node" --name "SATA Controller" --add sata --controller IntelAHCI
  335. vboxmanage storageattach "FoodAI-AI-Node" --storagectl "SATA Controller" --port 0 --device 0 --type hdd --medium "C:\\VMs\\FoodAI_AI.vdi"
  336. vboxmanage startvm "FoodAI-AI-Node" --type headless
  337. ```
  338. ---
  339. ## 4. Secure Authentication & SSH Exchange
  340. Exchange SSH public keys to allow automated, passwordless container management across nodes:
  341. ```bash
  342. # 1. Generate SSH Keys on WSL Client
  343. ssh-keygen -t rsa -b 4096 -f ~/.ssh/id_rsa_foodai -N ""
  344. # 2. Push Key to Database VM (Server A)
  345. ssh-copy-id -i ~/.ssh/id_rsa_foodai.pub operator@192.168.130.170
  346. # 3. Push Key to AI VM (Server B)
  347. ssh-copy-id -i ~/.ssh/id_rsa_foodai.pub operator@192.168.130.161
  348. ```
  349. ---
  350. ## 5. Multi-Node Docker Network & Configuration
  351. To allow WSL, Hyper-V, and VirtualBox nodes to communicate, update the `.env` variables and `docker-compose.yml` to use bridged network endpoints.
  352. ### Step 5.1: Configure WSL Client `.env`
  353. Update `.env` in the Streamlit workspace:
  354. ```ini
  355. DB_HOST=192.168.130.170
  356. DB_USER=food_reader
  357. DB_PASS=reader_pass
  358. APP_AUTH_USER=food_app_auth
  359. APP_AUTH_PASS=auth_pass
  360. OLLAMA_HOST=http://192.168.130.161:11434
  361. SEARXNG_HOST=http://localhost:8080
  362. ZBX_SERVER_HOST=192.168.130.170
  363. ```
  364. ### Step 5.2: Configure Ollama (VirtualBox Server B) Listening Port
  365. Ensure the Ollama daemon inside VirtualBox binds to `0.0.0.0` (all interfaces):
  366. ```bash
  367. # SSH into Server B (192.168.130.161)
  368. sudo systemctl edit ollama.service
  369. # Add the environment variables:
  370. [Service]
  371. Environment="OLLAMA_HOST=0.0.0.0"
  372. # Reload and restart service
  373. sudo systemctl daemon-reload
  374. sudo systemctl restart ollama
  375. ```
  376. ---
  377. ## 6. Zabbix Reconfiguration for Multi-Node SNMPv3 Telemetry
  378. To monitor all distributed deployment environments securely:
  379. ### Step 6.1: Deploy SNMPv3 Daemons
  380. Install and configure SNMPv3 daemons on WSL, Hyper-V Database VM, and VirtualBox AI VM:
  381. ```bash
  382. sudo apt update && sudo apt install -y snmpd
  383. ```
  384. Edit `/etc/snmp/snmpd.conf`:
  385. ```
  386. # Listen on all interfaces
  387. agentAddress udp:161
  388. # Create secure SNMPv3 User
  389. createUser securityUser SHA "securityAuthPassword" AES "securityPrivPassword"
  390. rouser securityUser authpriv
  391. ```
  392. Restart daemon:
  393. ```bash
  394. sudo systemctl restart snmpd
  395. ```
  396. ### Step 6.2: Configure Zabbix Server Dashboard (Web UI)
  397. 1. Open Zabbix in your browser at `http://192.168.130.170:8081`.
  398. 2. Navigate to **Configuration > Hosts > Create Host**.
  399. 3. Create three distinct hosts:
  400. - **WSL-Workstation** (IP: `192.168.1.50`)
  401. - **Database-Node** (IP: `192.168.130.170`)
  402. - **AI-Node** (IP: `192.168.130.161`)
  403. 4. Add the **SNMP Interface** pointing to Port 161 for each host.
  404. 5. In the **Security Tab**, select SNMPv3, enter Username `securityUser`, select Auth Protocol `SHA` / `securityAuthPassword`, and Privacy Protocol `AES` / `securityPrivPassword`.
  405. 6. Attach the pre-installed **Local Food AI Telemetry** Template.
  406. ---
  407. ## 7. Verifying Alert Channels
  408. ### 7.1: Microsoft Teams / Discord Alert Webhook
  409. To verify Zabbix is communicating with Discord / Teams:
  410. 1. Trigger a test CPU threshold spike inside WSL:
  411. ```bash
  412. yes > /dev/null & sleep 10 ; killall yes
  413. ```
  414. 2. Verify Zabbix triggers the alert and transmits the notification.
  415. 3. Check your designated channel for the incoming payload:
  416. - Expected Output: `[PROBLEM] High CPU Utilization Detected on WSL-Workstation`.
  417. ### 7.2: Password Reset Email (SMTP Gateway)
  418. 1. In the Streamlit UI Sidebar, select **Reset Password**.
  419. 2. Trigger a reset link for user `ClinicianA`.
  420. 3. Check the inbox or SMTP system log (`tail -f /var/log/mail.log` on Server A) to verify outbound delivery.
  421. ---
  422. ## 8. Operator Post-Installation Checklist
  423. Run these test cases to verify the installation:
  424. | TEST CASE ID | ACTIONS TO PERFORM | EXPECTED RESULTS | STATUS |
  425. | :--- | :--- | :--- | :---: |
  426. | **TC-OP-01** | Search 'Cheese' on Search Tab | 10+ records returned in <0.04s. Listeria warning flags on unpasteurized. | `[ ]` |
  427. | **TC-OP-02** | Enter '1.5 cups' in Plate Tab | Parsed and converted to metric grams based on density index. | `[ ]` |
  428. | **TC-OP-03** | Ask Chat: 'Can I eat sushi?' | Llama3.2:3b retrieves database context and flags raw fish as forbidden for pregnancy. | `[ ]` |
  429. | **TC-OP-04** | Trigger manual db backup | Timestamped compressed .sql.gz created inside backups/ folder. | `[ ]` |
  430. | **TC-OP-05** | Terminate Ollama Container | Zabbix PROBLEM active alert generated on dashboard in < 30 seconds. | `[ ]` |
  431. """
  432. }
  433. import subprocess
  434. try:
  435. log_info = subprocess.check_output(['git', 'log', '-1', '--format=%H %an %ae %ad %cn %ce %cd %N %s', '--date=format:%Y/%m/%d %H:%M:%S'], encoding='utf-8').strip()
  436. try:
  437. tag_info = subprocess.check_output(['git', 'describe', '--tags', '--always'], stderr=subprocess.DEVNULL, encoding='utf-8').strip()
  438. except Exception:
  439. tag_info = ""
  440. if tag_info:
  441. git_id = f"$Id$"
  442. else:
  443. git_id = f"$Id$"
  444. except Exception:
  445. git_id = "$Id$"
  446. for filename, content in docs.items():
  447. filepath = os.path.join(docs_dir, filename)
  448. with open(filepath, "w", encoding="utf-8") as f:
  449. f.write(content.replace('$Id$', git_id))
  450. print(f"Generated {filepath}")
  451. print("\nDocs directory perfectly mirrored with operator level runbooks.")