Option 1: Core Only (Recommended)
Deploy just the detection engine with alerts. Perfect for most users.What you get:
- Detection engine monitoring blockchain
- Real-time threat alerts (Slack, Discord, Email, etc.)
- gRPC server for internal communication
Option 2: Core + REST API
Add HTTP endpoints for dashboards, notebooks, or custom integrations.Option 3: Full Stack with Observability
Deploy Core + API + Observability stack (Vector, Loki, Grafana, Prometheus) for production monitoring.Managing Services
Common Docker Compose commands:When to Restart:
- After changing
config/config.yaml - After changing alert webhooks or network URLs
- Not needed: After adding/editing rules (hot reload handles this)