112 lines
2.7 KiB
YAML
112 lines
2.7 KiB
YAML
# featherChat + WZP full stack
|
|
# Usage:
|
|
# echo "YOUR_CF_API_TOKEN" > cf_api_token.txt
|
|
# docker compose up -d
|
|
#
|
|
# DNS: voip.manko.yoga → your IP
|
|
# Test: https://voip.manko.yoga
|
|
|
|
services:
|
|
# ─── Caddy reverse proxy (TLS termination) ───
|
|
caddy:
|
|
build:
|
|
context: .
|
|
dockerfile: Dockerfile.caddy
|
|
restart: unless-stopped
|
|
ports:
|
|
- "80:80"
|
|
- "443:443"
|
|
- "443:443/udp" # HTTP/3 (QUIC)
|
|
volumes:
|
|
- ./Caddyfile:/etc/caddy/Caddyfile:ro
|
|
- caddy_data:/data
|
|
- caddy_config:/config
|
|
secrets:
|
|
- cf_api_token
|
|
entrypoint: ["/bin/sh", "-c", "export CF_API_TOKEN=$(cat /run/secrets/cf_api_token) && caddy run --config /etc/caddy/Caddyfile --adapter caddyfile"]
|
|
depends_on:
|
|
- warzone-server
|
|
- wzp-web
|
|
networks:
|
|
- frontend
|
|
- backend
|
|
|
|
# ─── featherChat server ───
|
|
warzone-server:
|
|
build:
|
|
context: ../../..
|
|
dockerfile: warzone/deploy/docker/Dockerfile.server
|
|
restart: unless-stopped
|
|
environment:
|
|
WZP_RELAY_ADDR: "voip.manko.yoga/audio"
|
|
RUST_LOG: "info"
|
|
volumes:
|
|
- server_data:/data
|
|
command: ["--bind", "0.0.0.0:7700", "--enable-bots"]
|
|
networks:
|
|
- backend
|
|
|
|
# ─── WZP QUIC relay (audio SFU) ───
|
|
wzp-relay:
|
|
build:
|
|
context: ../../..
|
|
dockerfile: warzone/deploy/docker/Dockerfile.wzp
|
|
restart: unless-stopped
|
|
entrypoint: ["wzp-relay"]
|
|
command:
|
|
- "--listen"
|
|
- "0.0.0.0:4433"
|
|
- "--auth-url"
|
|
- "http://warzone-server:7700/v1/auth/validate"
|
|
networks:
|
|
backend:
|
|
ipv4_address: 172.28.0.10
|
|
|
|
# ─── WZP web bridge (browser WS ↔ QUIC relay) ───
|
|
wzp-web:
|
|
build:
|
|
context: ../../..
|
|
dockerfile: warzone/deploy/docker/Dockerfile.wzp
|
|
restart: unless-stopped
|
|
entrypoint: ["wzp-web"]
|
|
command:
|
|
- "--port"
|
|
- "8080"
|
|
- "--relay"
|
|
- "172.28.0.10:4433"
|
|
- "--auth-url"
|
|
- "http://warzone-server:7700/v1/auth/validate"
|
|
depends_on:
|
|
- wzp-relay
|
|
- warzone-server
|
|
networks:
|
|
- backend
|
|
|
|
# ─── Dynamic DNS updater (keeps A + AAAA current) ───
|
|
dns-updater:
|
|
image: python:3-alpine
|
|
restart: unless-stopped
|
|
volumes:
|
|
- ./update-dns.sh:/update-dns.sh:ro
|
|
secrets:
|
|
- cf_api_token
|
|
entrypoint: ["/bin/sh", "-c", "apk add --no-cache curl > /dev/null 2>&1 && /bin/sh /update-dns.sh"]
|
|
environment:
|
|
DNS_UPDATE_INTERVAL: "300" # 5 minutes
|
|
|
|
secrets:
|
|
cf_api_token:
|
|
file: ./cf_api_token.txt
|
|
|
|
volumes:
|
|
caddy_data:
|
|
caddy_config:
|
|
server_data:
|
|
|
|
networks:
|
|
frontend:
|
|
backend:
|
|
ipam:
|
|
config:
|
|
- subnet: 172.28.0.0/24
|