hibna
130 lines
4.1 KiB
YAML
130 lines
4.1 KiB
YAML
# GamePanel — single-host deployment.
|
|
#
|
|
# ./scripts/install.sh generates .env with fresh secrets
|
|
# docker compose up -d builds and starts everything
|
|
#
|
|
# Serves plain HTTP on ${WEB_PORT} by design. Put your own reverse proxy
|
|
# (Caddy, nginx, Traefik, Cloudflare Tunnel…) in front of it for TLS and a
|
|
# domain — see INSTALLATION.md.
|
|
|
|
services:
|
|
# --- PostgreSQL ---
|
|
postgres:
|
|
image: postgres:16-alpine
|
|
container_name: gamepanel-postgres
|
|
restart: unless-stopped
|
|
environment:
|
|
POSTGRES_USER: ${DB_USER:-gamepanel}
|
|
POSTGRES_PASSWORD: ${DB_PASSWORD:-gamepanel}
|
|
POSTGRES_DB: ${DB_NAME:-gamepanel}
|
|
volumes:
|
|
- postgres_data:/var/lib/postgresql/data
|
|
# Not published by default — only the API needs it. Set DB_PORT to expose it.
|
|
expose:
|
|
- "5432"
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U ${DB_USER:-gamepanel}"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 5
|
|
|
|
# --- Redis (rate limiting, session cache) ---
|
|
redis:
|
|
image: redis:7-alpine
|
|
container_name: gamepanel-redis
|
|
restart: unless-stopped
|
|
command: redis-server --appendonly yes --requirepass ${REDIS_PASSWORD:-gamepanel}
|
|
volumes:
|
|
- redis_data:/data
|
|
expose:
|
|
- "6379"
|
|
healthcheck:
|
|
test: ["CMD", "redis-cli", "-a", "${REDIS_PASSWORD:-gamepanel}", "ping"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 5
|
|
|
|
# --- Schema migration + seed (runs to completion, then exits) ---
|
|
migrate:
|
|
build:
|
|
context: .
|
|
dockerfile: apps/api/Dockerfile
|
|
target: migrate
|
|
container_name: gamepanel-migrate
|
|
restart: "no"
|
|
depends_on:
|
|
postgres:
|
|
condition: service_healthy
|
|
environment:
|
|
DATABASE_URL: postgresql://${DB_USER:-gamepanel}:${DB_PASSWORD:-gamepanel}@postgres:5432/${DB_NAME:-gamepanel}
|
|
|
|
# --- API ---
|
|
api:
|
|
build:
|
|
context: .
|
|
dockerfile: apps/api/Dockerfile
|
|
container_name: gamepanel-api
|
|
restart: unless-stopped
|
|
depends_on:
|
|
postgres:
|
|
condition: service_healthy
|
|
redis:
|
|
condition: service_healthy
|
|
migrate:
|
|
condition: service_completed_successfully
|
|
environment:
|
|
NODE_ENV: production
|
|
DATABASE_URL: postgresql://${DB_USER:-gamepanel}:${DB_PASSWORD:-gamepanel}@postgres:5432/${DB_NAME:-gamepanel}
|
|
REDIS_URL: redis://:${REDIS_PASSWORD:-gamepanel}@redis:6379
|
|
PORT: 3000
|
|
HOST: 0.0.0.0
|
|
JWT_SECRET: ${JWT_SECRET:?set JWT_SECRET in .env — run ./scripts/install.sh}
|
|
JWT_REFRESH_SECRET: ${JWT_REFRESH_SECRET:?set JWT_REFRESH_SECRET in .env — run ./scripts/install.sh}
|
|
CORS_ORIGIN: ${CORS_ORIGIN:-http://localhost}
|
|
RATE_LIMIT_MAX: ${RATE_LIMIT_MAX:-100}
|
|
RATE_LIMIT_WINDOW_MS: ${RATE_LIMIT_WINDOW_MS:-60000}
|
|
expose:
|
|
- "3000"
|
|
|
|
# --- Web (nginx + SPA, also reverse-proxies /api and /socket.io) ---
|
|
web:
|
|
build:
|
|
context: .
|
|
dockerfile: apps/web/Dockerfile
|
|
args:
|
|
VITE_API_URL: /api
|
|
container_name: gamepanel-web
|
|
restart: unless-stopped
|
|
depends_on:
|
|
- api
|
|
ports:
|
|
- "${WEB_PORT:-80}:80"
|
|
|
|
# --- Daemon (runs on game server nodes) ---
|
|
daemon:
|
|
build:
|
|
context: .
|
|
dockerfile: apps/daemon/Dockerfile
|
|
container_name: gamepanel-daemon
|
|
restart: unless-stopped
|
|
depends_on:
|
|
- api
|
|
environment:
|
|
DAEMON_CONFIG: /etc/gamepanel/config.yml
|
|
# Game containers are created through the host's Docker socket, so their
|
|
# bind mounts are resolved by the *host*, not by this container. Without
|
|
# this the daemon and the game would end up looking at two different
|
|
# directories and every file written from the panel would vanish.
|
|
DAEMON_HOST_DATA_PATH: ${DAEMON_DATA_PATH:-/var/lib/gamepanel/servers}
|
|
volumes:
|
|
- /var/run/docker.sock:/var/run/docker.sock
|
|
- ${DAEMON_DATA_PATH:-/var/lib/gamepanel/servers}:/var/lib/gamepanel/servers
|
|
- ${DAEMON_BACKUP_PATH:-/var/lib/gamepanel/backups}:/var/lib/gamepanel/backups
|
|
- ./daemon-config.yml:/etc/gamepanel/config.yml:ro
|
|
ports:
|
|
- "${DAEMON_GRPC_PORT:-50051}:50051"
|
|
|
|
volumes:
|
|
postgres_data:
|
|
redis_data:
|