Compose topology
OIE runs in the existing Compose stack with a pinned OIE engine image, a dedicated OIE PostgreSQL service and persistent volume, and internal traffic to HMIS through the Compose network.Security requirements
- Expose analyzer listener ports only to the laboratory VLAN.
- Keep OIE administration off public networks.
- Create dedicated Sanctum tokens with minimum abilities.
- Rotate any token that has been exposed in logs, screenshots, or chat.
- Back up OIE channel exports after every tested change.