fix: boot the Go backend cleanly under the installer compose

Author: Kbayero

backend/modules.go

@@ -75,8 +75,11 @@ type modules struct {
 
 func initModules(db *gorm.DB, cfg *config) *modules {
 	if cfg.jwtSecret == "" {
-		_ = catcher.Error("JWT_SECRET is not set — refusing to start", nil, nil)
-		panic("JWT_SECRET is required")
+		cfg.jwtSecret = cfg.internalKey
+	}
+	if cfg.jwtSecret == "" {
+		_ = catcher.Error("JWT_SECRET (or INTERNAL_KEY) is not set — refusing to start", nil, nil)
+		panic("JWT_SECRET or INTERNAL_KEY is required")
 	}
 	if cfg.encryptionKey == "" {
 		_ = catcher.Error("ENCRYPTION_KEY is not set — refusing to start", nil, nil)

installer/docker/compose.go

@@ -234,6 +234,12 @@ func (c *Compose) Populate(conf *config.Config, stack *StackConfig) error {
 			stack.DataSources + ":/etc/utmstack",
 			conf.UpdatesFolder + ":/updates",
 			utils.MakeDir(0777, conf.DataDir, "uploads") + ":/uploads",
+			utils.MakeDir(0777, stack.EventsEngineWorkdir, "soar") + ":/workdir/soar",
+			utils.MakeDir(0777, stack.EventsEngineWorkdir, "compliance") + ":/workdir/compliance",
+			// Shared with the event-processor: the backend authors the rules and
+			// pipeline (tenants/patterns/filters); the EP reads the same host dirs.
+			utils.MakeDir(0777, stack.EventsEngineWorkdir, "rules") + ":/workdir/rules",
+			utils.MakeDir(0777, stack.EventsEngineWorkdir, "pipeline") + ":/workdir/pipeline",
 		},
 		Logging: &dLogging,
 		Deploy: &Deploy{