f698b25fad
The 'full' variant sends a key exchange as first WS message, not auth. The 'pure' variant sends raw PCM immediately, no auth. Only ws/ws-fec/ws-full variants send auth JSON. With auth removed, wzp-web accepts all WS connections. Auth is still enforced on the relay (--auth-url) for direct connections. Caddy provides access control at the TLS layer. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
100 lines
2.3 KiB
YAML
100 lines
2.3 KiB
YAML
# featherChat + WZP full stack
|
|
# Usage:
|
|
# echo "YOUR_CF_API_TOKEN" > cf_api_token.txt
|
|
# docker compose up -d
|
|
#
|
|
# DNS: voip.manko.yoga → your IP
|
|
# Test: https://voip.manko.yoga
|
|
|
|
services:
|
|
# ─── Caddy reverse proxy (TLS termination) ───
|
|
caddy:
|
|
build:
|
|
context: .
|
|
dockerfile: Dockerfile.caddy
|
|
restart: unless-stopped
|
|
ports:
|
|
- "80:80"
|
|
- "443:443"
|
|
- "443:443/udp" # HTTP/3 (QUIC)
|
|
volumes:
|
|
- ./Caddyfile:/etc/caddy/Caddyfile:ro
|
|
- caddy_data:/data
|
|
- caddy_config:/config
|
|
secrets:
|
|
- cf_api_token
|
|
entrypoint: ["/bin/sh", "-c", "export CF_API_TOKEN=$(cat /run/secrets/cf_api_token) && caddy run --config /etc/caddy/Caddyfile --adapter caddyfile"]
|
|
depends_on:
|
|
- warzone-server
|
|
- wzp-web
|
|
networks:
|
|
- frontend
|
|
- backend
|
|
|
|
# ─── featherChat server ───
|
|
warzone-server:
|
|
build:
|
|
context: ../../..
|
|
dockerfile: warzone/deploy/docker/Dockerfile.server
|
|
restart: unless-stopped
|
|
environment:
|
|
WZP_RELAY_ADDR: "voip.manko.yoga/audio"
|
|
RUST_LOG: "info"
|
|
volumes:
|
|
- server_data:/data
|
|
command: ["--bind", "0.0.0.0:7700", "--enable-bots"]
|
|
networks:
|
|
- backend
|
|
|
|
# ─── WZP QUIC relay (audio SFU) ───
|
|
wzp-relay:
|
|
build:
|
|
context: ../../..
|
|
dockerfile: warzone/deploy/docker/Dockerfile.wzp
|
|
restart: unless-stopped
|
|
entrypoint: ["wzp-relay"]
|
|
command:
|
|
- "--listen"
|
|
- "0.0.0.0:4433"
|
|
- "--auth-url"
|
|
- "http://warzone-server:7700/v1/auth/validate"
|
|
networks:
|
|
backend:
|
|
ipv4_address: 172.28.0.10
|
|
|
|
# ─── WZP web bridge (browser WS ↔ QUIC relay) ───
|
|
# No --tls (Caddy handles TLS), no --auth-url (Caddy terminates)
|
|
# Variants: ?variant=pure|hybrid|full
|
|
wzp-web:
|
|
build:
|
|
context: ../../..
|
|
dockerfile: warzone/deploy/docker/Dockerfile.wzp
|
|
restart: unless-stopped
|
|
entrypoint: ["wzp-web"]
|
|
command:
|
|
- "--port"
|
|
- "8080"
|
|
- "--relay"
|
|
- "172.28.0.10:4433"
|
|
depends_on:
|
|
- wzp-relay
|
|
networks:
|
|
- backend
|
|
|
|
|
|
secrets:
|
|
cf_api_token:
|
|
file: ./cf_api_token.txt
|
|
|
|
volumes:
|
|
caddy_data:
|
|
caddy_config:
|
|
server_data:
|
|
|
|
networks:
|
|
frontend:
|
|
backend:
|
|
ipam:
|
|
config:
|
|
- subnet: 172.28.0.0/24
|