Files
eifeldc/infra/docker-compose.yml
root cacd2b04a7
Some checks failed
CI / Rust Format (push) Has been cancelled
CI / Clippy (push) Has been cancelled
CI / Test Server (push) Has been cancelled
CI / Frontend Check (push) Has been cancelled
CI / Tauri Client Check (push) Has been cancelled
CI / Docker Build (push) Has been cancelled
CI / Build Tauri (Linux) (push) Has been cancelled
feat: comprehensive project improvements
- Fix 14 Clippy warnings across server and bot-sdk
- Add 67 unit tests (32 bot-sdk, 34 server, 1 doctest)
- Add Prometheus metrics endpoint (/api/metrics)
- Add structured JSON logging (EIFELDC_LOG_FORMAT=json)
- Add release workflow (Docker push + GitHub Release + Tauri builds)
- Add rate limiting middleware (EIFELDC_RATE_LIMIT)
- Add CORS restriction (EIFELDC_CORS_ORIGINS)
- Add session token expiry (EIFELDC_SESSION_TTL)
- Add input validation (username/password/homeserver length limits)
- Add upload size limit (EIFELDC_MAX_UPLOAD_MB)
- Upgrade Tauri client from v1 to v2
- Add session store with SQLite persistence
- Add proper error types and cleanup across all crates
- Format all code with cargo fmt
- Update CI pipeline with fmt, clippy, test, frontend, and Tauri checks
- Add README with full API reference and setup guide
2026-04-29 13:08:01 +02:00

179 lines
4.2 KiB
YAML

services:
eifeldc:
build:
context: ..
dockerfile: Dockerfile
container_name: eifeldc-server
restart: unless-stopped
ports:
- "3000:3000"
environment:
- EIFELDC_STATIC_DIR=/usr/share/eifeldc/client
- RUST_LOG=eifeldc_server=info,tower_http=info
- LIVEKIT_API_KEY=${LIVEKIT_API_KEY:-devkey}
- LIVEKIT_API_SECRET=${LIVEKIT_API_SECRET:-devsecret}
- LIVEKIT_URL=ws://livekit:7880
- SYNAPSE_URL=http://synapse:8008
healthcheck:
test: ["CMD", "curl", "-f", "http://localhost:3000/api/current-user"]
interval: 15s
timeout: 5s
retries: 3
start_period: 10s
deploy:
resources:
limits:
memory: 512M
cpus: "1.0"
logging:
driver: json-file
options:
max-size: "10m"
max-file: "3"
networks:
- eifeldc
synapse:
image: matrixdotorg/synapse:latest
container_name: eifeldc-synapse
restart: unless-stopped
volumes:
- synapse-data:/data
- ./synapse/log.config:/data/log.config:ro
environment:
- SYNAPSE_SERVER_NAME=${DOMAIN:-eifeldc.local}
- SYNAPSE_REPORT_STATS=no
ports:
- "8008:8008"
- "8448:8448"
depends_on:
postgres:
condition: service_healthy
healthcheck:
test: ["CMD", "curl", "-f", "http://localhost:8008/_matrix/client/versions"]
interval: 15s
timeout: 5s
retries: 5
start_period: 30s
deploy:
resources:
limits:
memory: 1G
cpus: "2.0"
logging:
driver: json-file
options:
max-size: "10m"
max-file: "3"
networks:
- eifeldc
postgres:
image: postgres:16-alpine
container_name: eifeldc-postgres
restart: unless-stopped
volumes:
- postgres-data:/var/lib/postgresql/data
environment:
POSTGRES_USER: synapse
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-changeme_postgres_password}
POSTGRES_DB: synapse
POSTGRES_INITDB_ARGS: "--encoding=UTF8 --lc-collate=C --lc-ctype=C"
healthcheck:
test: ["CMD-SHELL", "pg_isready -U synapse"]
interval: 5s
timeout: 5s
retries: 5
deploy:
resources:
limits:
memory: 512M
cpus: "1.0"
logging:
driver: json-file
options:
max-size: "10m"
max-file: "3"
networks:
- eifeldc
coturn:
image: coturn/coturn:latest
container_name: eifeldc-coturn
restart: unless-stopped
network_mode: host
volumes:
- ./coturn/turnserver.conf:/etc/turnserver.conf:ro
- turn-certs:/etc/letsencrypt
command: ["-c", "/etc/turnserver.conf"]
logging:
driver: json-file
options:
max-size: "10m"
max-file: "3"
livekit:
image: livekit/livekit-server:latest
container_name: eifeldc-livekit
restart: unless-stopped
ports:
- "7880:7880"
- "7881:7881"
- "7882:7882/udp"
- "50000-50200:50000-50200/udp"
environment:
- LIVEKIT_KEYS=${LIVEKIT_API_KEY:-devkey}: ${LIVEKIT_API_SECRET:-devsecret}
command: --dev --node-ip ${LIVEKIT_NODE_IP:-127.0.0.1}
healthcheck:
test: ["CMD", "wget", "--spider", "-q", "http://localhost:7880"]
interval: 10s
timeout: 5s
retries: 3
start_period: 5s
logging:
driver: json-file
options:
max-size: "10m"
max-file: "3"
networks:
- eifeldc
nginx:
image: nginx:alpine
container_name: eifeldc-nginx
restart: unless-stopped
ports:
- "80:80"
- "443:443"
volumes:
- ./nginx/eifeldc.conf:/etc/nginx/conf.d/eifeldc.conf:ro
- nginx-certs:/etc/letsencrypt:ro
depends_on:
eifeldc:
condition: service_healthy
synapse:
condition: service_healthy
livekit:
condition: service_healthy
healthcheck:
test: ["CMD", "curl", "-f", "http://localhost:80/"]
interval: 15s
timeout: 5s
retries: 3
logging:
driver: json-file
options:
max-size: "10m"
max-file: "3"
networks:
- eifeldc
volumes:
postgres-data:
turn-certs:
nginx-certs:
synapse-data:
networks:
eifeldc:
driver: bridge