byerlikaya/septum-gateway
Septum cloud LLM forwarder — internet-facing zone. Never imports septum-core by invariant.
1.1K
byerlikaya/septum-gateway repository overview
Septum Gateway — cloud LLM forwarder (internet-facing zone)
Stateless bridge between the air-gapped Septum backend and cloud LLM providers (Anthropic / OpenAI / OpenRouter). Consumes already-masked requests from septum-queue, forwards them, publishes masked responses back.
Security invariant. The image does not contain septum-core and cannot import it — enforced at the Dockerfile layer (the COPY step never references packages/core/). The gateway only sees placeholder-masked text; raw PII never crosses the zone boundary.
Pair with septum-audit for compliance logging.
Quick start
docker compose -f docker-compose.gateway.yml up
Brings up the gateway worker + health endpoint + audit worker + audit API + Redis. Requires .env with REDIS_PASSWORD and your cloud LLM provider keys.
Two containers from the same image
| Command | Role |
|---|---|
python -m septum_gateway | Stdio worker — pulls off the queue, forwards to the LLM, publishes the answer envelope |
uvicorn septum_gateway.main:create_app --factory | HTTP server — exposes /health for orchestrators (K8s, compose healthcheck) |
Tags
| Tag | Contents |
|---|---|
latest, 1, 1.0, 1.0.0 | Multi-arch (amd64 + arm64), ~100 MB — no torch, no Presidio, no spaCy |
Links
- Source: github.com/byerlikaya/Septum
- Architecture (zones): docs/ARCHITECTURE.md
- Deployment topologies: docs/ARCHITECTURE.md#deployment-topologies
Tag summary
Content type
Image
Digest
sha256:85561598a…
Size
51.3 MB
Last updated
3 months ago
docker pull byerlikaya/septum-gateway