jbc.lol
unoffical wafrn mirror
wafrn.net
atproto
social-network
activitypub
1services:
2 backend: &default_backend
3 build:
4 context: .
5 dockerfile: packages/backend/Dockerfile
6 # these args configure private env vars for the backend and public env vars for the frontend
7 args:
8 ADMIN_USER: ${ADMIN_USER}
9 ADMIN_EMAIL: ${ADMIN_EMAIL}
10 ADMIN_PASSWORD: ${ADMIN_PASSWORD}
11 JWT_SECRET: ${JWT_SECRET}
12 DOMAIN_NAME: ${DOMAIN_NAME}
13
14 CACHE_DOMAIN: ${CACHE_DOMAIN}
15 MEDIA_DOMAIN: ${MEDIA_DOMAIN}
16
17 SMTP_HOST: ${SMTP_HOST}
18 SMTP_USER: ${SMTP_USER}
19 SMTP_PORT: ${SMTP_PORT}
20 SMTP_PASSWORD: ${SMTP_PASSWORD}
21 SMTP_FROM: ${SMTP_FROM}
22
23 POSTGRES_USER: ${POSTGRES_USER}
24 POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
25 POSTGRES_DBNAME: ${POSTGRES_DBNAME}
26
27 WEBPUSH_EMAIL: ${WEBPUSH_EMAIL}
28 WEBPUSH_PRIVATE: ${WEBPUSH_PRIVATE}
29 WEBPUSH_PUBLIC: ${WEBPUSH_PUBLIC}
30
31 ENABLE_BSKY: ${ENABLE_BSKY}
32 PDS_DOMAIN_NAME: ${PDS_DOMAIN_NAME}
33 PDS_JWT_SECRET: ${PDS_JWT_SECRET}
34 PDS_ADMIN_PASSWORD: ${PDS_ADMIN_PASSWORD}
35
36 USE_WORKERS: true
37 LOG_SQL_QUERIES: ${LOG_SQL_QUERIES:-}
38 UPLOAD_LIMIT: ${UPLOAD_LIMIT:-}
39 POSTS_PER_PAGE: ${POSTS_PER_PAGE:-}
40 LOG_LEVEL: ${LOG_LEVEL:-}
41 BLOCKLIST_URI: ${BLOCKLIST_URI:-}
42 FRONTEND_PATH: ${FRONTEND_PATH:-}
43 DISABLE_REQUIRE_SEND_EMAIL: ${DISABLE_REQUIRE_SEND_EMAIL:-}
44 BLOCKED_IPS: ${BLOCKED_IPS:-}
45 REVIEW_REGISTRATIONS: ${REVIEW_REGISTRATIONS:-}
46 IGNORE_BLOCK_HOSTS: ${IGNORE_BLOCK_HOSTS:-}
47
48 FRONTEND_LOGO: ${FRONTEND_LOGO:-}
49 FRONTEND_API_URL: ${FRONTEND_API_URL:-}
50 FRONTEND_MEDIA_URL: ${FRONTEND_MEDIA_URL:-}
51 FRONTEND_CACHE_URL: ${FRONTEND_CACHE_URL:-}
52 FRONTEND_CACHE_BACKUP_URLS: ${FRONTEND_CACHE_BACKUP_URLS:-}
53 FRONTEND_SHORTEN_POSTS: ${FRONTEND_SHORTEN_POSTS:-}
54 FRONTEND_DISABLE_PWA: ${FRONTEND_DISABLE_PWA:-}
55 FRONTEND_MAINTENANCE: ${FRONTEND_MAINTENANCE:-}
56 FRONTEND_SHORT_TITLE: ${FRONTEND_SHORT_TITLE:-}
57 FRONTEND_LONG_TITLE: ${FRONTEND_LONG_TITLE:-}
58 FRONTEND_DESCRIPTION: ${FRONTEND_DESCRIPTION:-}
59 depends_on:
60 db:
61 condition: service_healthy
62 redis:
63 condition: service_started
64 frontend:
65 condition: service_started
66 migration:
67 condition: service_completed_successfully
68 restart: unless-stopped
69 environment:
70 - NODE_ENV=production
71 volumes:
72 - ./packages/backend/uploads:/app/packages/backend/uploads
73 - ./packages/backend/cache:/app/packages/backend/cache
74 - frontend:/app/packages/frontend:ro
75
76 migration:
77 <<: *default_backend
78 depends_on:
79 db:
80 condition: service_healthy
81 redis:
82 condition: service_started
83 frontend:
84 condition: service_started
85 restart: no
86 command: "npm exec tsx migrate.ts init-container"
87
88 frontend:
89 restart: unless-stopped
90 build:
91 context: .
92 dockerfile: packages/frontend/Dockerfile
93 args:
94 DOMAIN_NAME: ${DOMAIN_NAME}
95 PDS_DOMAIN_NAME: ${PDS_DOMAIN_NAME}
96 CACHE_DOMAIN: ${CACHE_DOMAIN}
97 MEDIA_DOMAIN: ${MEDIA_DOMAIN}
98 ACME_EMAIL: ${ACME_EMAIL}
99 FRONTEND_SHORT_TITLE: ${FRONTEND_SHORT_TITLE:-}
100 FRONTEND_LONG_TITLE: ${FRONTEND_LONG_TITLE:-}
101 FRONTEND_DESCRIPTION: ${FRONTEND_DESCRIPTION:-}
102 ports:
103 - 80:80
104 - 443:443
105 volumes:
106 - "caddy:/data"
107 - "frontend:/var/www/html/frontend"
108 - ./packages/backend/uploads:/var/www/html/uploads
109 - ./packages/caddy:/etc/caddy/config
110
111 db:
112 build:
113 context: monitoring/database
114 dockerfile: Dockerfile
115 restart: unless-stopped
116 shm_size: '2gb'
117 environment:
118 POSTGRES_USER: ${POSTGRES_USER}
119 POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
120 POSTGRES_DB: ${POSTGRES_DBNAME}
121 POSTGRES_METRICS_USER: ${POSTGRES_METRICS_USER}
122 POSTGRES_METRICS_PASSWORD: ${POSTGRES_METRICS_PASSWORD}
123 POSTGRES_METRICS_DBNAME: ${POSTGRES_METRICS_DBNAME}
124 volumes:
125 - dbpg:/var/lib/postgresql/data
126
127 adminer:
128 image: adminer
129 restart: unless-stopped
130
131 redis:
132 image: redis:7.2.4
133 restart: unless-stopped
134 volumes:
135 - redis:/data
136
137 pds:
138 image: ghcr.io/bluesky-social/pds:0.4
139 restart: unless-stopped
140 profiles:
141 - bluesky
142 environment:
143 PDS_HOSTNAME: ${PDS_DOMAIN_NAME}
144 PDS_JWT_SECRET: ${PDS_JWT_SECRET}
145 PDS_ADMIN_PASSWORD: ${PDS_ADMIN_PASSWORD}
146 PDS_PLC_ROTATION_KEY_K256_PRIVATE_KEY_HEX: ${PDS_PLC_ROTATION_KEY_K256_PRIVATE_KEY_HEX}
147 PDS_DATA_DIRECTORY: /pds
148 PDS_BLOBSTORE_DISK_LOCATION: /pds/blocks
149 PDS_BLOB_UPLOAD_LIMIT: 52428800
150 PDS_DID_PLC_URL: "https://plc.directory"
151 PDS_BSKY_APP_VIEW_URL: "https://api.bsky.app"
152 PDS_BSKY_APP_VIEW_DID: "did:web:api.bsky.app"
153 PDS_REPORT_SERVICE_URL: "https://mod.bsky.app"
154 PDS_REPORT_SERVICE_DID: "did:plc:ar7c4by46qjdydhdevvrndac"
155 PDS_CRAWLERS: "https://bsky.network, https://atproto.africa"
156 PDS_EMAIL_SMTP_URL: "smtps://${SMTP_USER}:${SMTP_PASSWORD}@${SMTP_HOST}:${SMTP_PORT}"
157 PDS_EMAIL_FROM_ADDRESS: "${SMTP_USER}"
158 LOG_ENABLED: true
159 volumes:
160 - pds:/pds
161
162 pds_worker:
163 <<: *default_backend
164 profiles:
165 - bluesky
166 command: "npm exec tsx atproto.ts"
167
168 prometheus:
169 restart: unless-stopped
170 image: prom/prometheus:latest
171 volumes:
172 - ./monitoring/prometheus.yml:/etc/prometheus/prometheus.yml
173 - prometheus_data:/prometheus
174 command:
175 - '--config.file=/etc/prometheus/prometheus.yml'
176 - '--storage.tsdb.path=/prometheus'
177 - '--web.console.libraries=/usr/share/prometheus/console_libraries'
178 - '--web.console.templates=/usr/share/prometheus/consoles'
179
180 cadvisor:
181 restart: unless-stopped
182 image: gcr.io/cadvisor/cadvisor:latest
183 command:
184 - '-port=8081'
185 environment:
186 CADVISOR_HEALTHCHECK_URL: http://localhost:8081/healthz
187 volumes:
188 - /:/rootfs:ro
189 - /var/run:/var/run:rw
190 - /sys:/sys:ro
191 - /var/lib/docker/:/var/lib/docker:ro
192
193 node-exporter:
194 restart: unless-stopped
195 image: prom/node-exporter:latest
196 volumes:
197 - /proc:/host/proc:ro
198 - /sys:/host/sys:ro
199 - /:/rootfs:ro
200 command:
201 - '--path.procfs=/host/proc'
202 - '--path.sysfs=/host/sys'
203 - '--collector.filesystem.ignored-mount-points="^/(sys|proc|dev|host|etc)($$|/)"'
204
205 grafana:
206 build:
207 context: monitoring/grafana
208 dockerfile: Dockerfile
209 volumes:
210 - grafana_data:/var/lib/grafana
211 restart: unless-stopped
212 environment:
213 GF_SERVER_HTTP_PORT: 2345
214 GF_SECURITY_ADMIN_PASSWORD: ${GF_SECURITY_ADMIN_PASSWORD}
215 GF_USERS_ALLOW_SIGN_UP: false
216
217 GF_SMTP_ENABLED: true
218 GF_SMTP_HOST: ${SMTP_HOST}:${SMTP_PORT}
219 GF_SMTP_FROM_ADDRESS: ${SMTP_FROM}
220 GF_SERVER_DOMAIN: ${DOMAIN_NAME}
221 GF_SMTP_FROM_NAME: ${SMTP_FROM}
222 GF_SMTP_USER: "${SMTP_USER}"
223 GF_SMTP_PASSWORD: "${SMTP_PASSWORD}"
224
225 POSTGRES_METRICS_USER: ${POSTGRES_METRICS_USER}
226 POSTGRES_METRICS_PASSWORD: ${POSTGRES_METRICS_PASSWORD}
227 POSTGRES_METRICS_DBNAME: ${POSTGRES_METRICS_DBNAME}
228
229 pgwatch:
230 build:
231 context: monitoring/pgwatch
232 dockerfile: Dockerfile
233 args:
234 POSTGRES_USER: ${POSTGRES_USER}
235 POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
236 POSTGRES_DB: ${POSTGRES_DBNAME}
237 restart: unless-stopped
238 environment:
239 POSTGRES_METRICS_USER: ${POSTGRES_METRICS_USER}
240 POSTGRES_METRICS_PASSWORD: ${POSTGRES_METRICS_PASSWORD}
241 POSTGRES_METRICS_DBNAME: ${POSTGRES_METRICS_DBNAME}
242 command:
243 - "--web-disable=all"
244 - "--sources=/sources.yaml"
245 - "--sink=postgresql://${POSTGRES_METRICS_USER}:${POSTGRES_METRICS_PASSWORD}@db:5432/${POSTGRES_METRICS_DBNAME}"
246 depends_on:
247 db:
248 condition: service_healthy
249
250volumes:
251 dbpg:
252 caddy:
253 pds:
254 frontend:
255 redis:
256 prometheus_data:
257 grafana_data: