Something went wrong. Try again.
An atproto PDS written in Go
Something went wrong. Try again.
cocoon docker-compose.postgres.yaml
5.0 kB · 158 lines
YAML
at oauth-stuff
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159# Docker Compose with PostgreSQL# # Usage:# docker-compose -f docker-compose.postgres.yaml up -d## This file extends the base docker-compose.yaml with a PostgreSQL database.# Set the following in your .env file:# COCOON_DB_TYPE=postgres# POSTGRES_PASSWORD=your-secure-password
version: '3.8'
services: postgres: image: postgres:16-alpine container_name: cocoon-postgres environment: POSTGRES_USER: cocoon POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:?POSTGRES_PASSWORD is required} POSTGRES_DB: cocoon volumes: - postgres_data:/var/lib/postgresql/data healthcheck: test: ["CMD-SHELL", "pg_isready -U cocoon -d cocoon"] interval: 10s timeout: 5s retries: 5 restart: unless-stopped
init-keys: build: context: . dockerfile: Dockerfile image: ghcr.io/haileyok/cocoon:latest container_name: cocoon-init-keys volumes: - ./keys:/keys - ./data:/data/cocoon - ./init-keys.sh:/init-keys.sh:ro environment: COCOON_DID: ${COCOON_DID} COCOON_HOSTNAME: ${COCOON_HOSTNAME} COCOON_ROTATION_KEY_PATH: /keys/rotation.key COCOON_JWK_PATH: /keys/jwk.key COCOON_CONTACT_EMAIL: ${COCOON_CONTACT_EMAIL} COCOON_RELAYS: ${COCOON_RELAYS:-https://bsky.network} COCOON_ADMIN_PASSWORD: ${COCOON_ADMIN_PASSWORD} entrypoint: ["/bin/sh", "/init-keys.sh"] restart: "no"
cocoon: build: context: . dockerfile: Dockerfile image: ghcr.io/haileyok/cocoon:latest container_name: cocoon-pds depends_on: init-keys: condition: service_completed_successfully postgres: condition: service_healthy ports: - "8080:8080" volumes: - ./data:/data/cocoon - ./keys/rotation.key:/keys/rotation.key:ro - ./keys/jwk.key:/keys/jwk.key:ro environment: # Required settings COCOON_DID: ${COCOON_DID} COCOON_HOSTNAME: ${COCOON_HOSTNAME} COCOON_ROTATION_KEY_PATH: /keys/rotation.key COCOON_JWK_PATH: /keys/jwk.key COCOON_CONTACT_EMAIL: ${COCOON_CONTACT_EMAIL} COCOON_RELAYS: ${COCOON_RELAYS:-https://bsky.network} COCOON_ADMIN_PASSWORD: ${COCOON_ADMIN_PASSWORD} COCOON_SESSION_SECRET: ${COCOON_SESSION_SECRET}
# Database configuration - PostgreSQL COCOON_ADDR: ":8080" COCOON_DB_TYPE: postgres COCOON_DATABASE_URL: postgres://cocoon:${POSTGRES_PASSWORD}@postgres:5432/cocoon?sslmode=disable COCOON_BLOCKSTORE_VARIANT: ${COCOON_BLOCKSTORE_VARIANT:-sqlite}
# Optional: SMTP settings for email COCOON_SMTP_USER: ${COCOON_SMTP_USER:-} COCOON_SMTP_PASS: ${COCOON_SMTP_PASS:-} COCOON_SMTP_HOST: ${COCOON_SMTP_HOST:-} COCOON_SMTP_PORT: ${COCOON_SMTP_PORT:-} COCOON_SMTP_EMAIL: ${COCOON_SMTP_EMAIL:-} COCOON_SMTP_NAME: ${COCOON_SMTP_NAME:-}
# Optional: S3 configuration COCOON_S3_BACKUPS_ENABLED: ${COCOON_S3_BACKUPS_ENABLED:-false} COCOON_S3_BLOBSTORE_ENABLED: ${COCOON_S3_BLOBSTORE_ENABLED:-false} COCOON_S3_REGION: ${COCOON_S3_REGION:-} COCOON_S3_BUCKET: ${COCOON_S3_BUCKET:-} COCOON_S3_ENDPOINT: ${COCOON_S3_ENDPOINT:-} COCOON_S3_ACCESS_KEY: ${COCOON_S3_ACCESS_KEY:-} COCOON_S3_SECRET_KEY: ${COCOON_S3_SECRET_KEY:-}
# Optional: Fallback proxy COCOON_FALLBACK_PROXY: ${COCOON_FALLBACK_PROXY:-} restart: unless-stopped healthcheck: test: ["CMD", "curl", "-f", "http://localhost:8080/xrpc/_health"] interval: 30s timeout: 10s retries: 3 start_period: 40s
create-invite: build: context: . dockerfile: Dockerfile image: ghcr.io/haileyok/cocoon:latest container_name: cocoon-create-invite volumes: - ./keys:/keys - ./create-initial-invite.sh:/create-initial-invite.sh:ro environment: COCOON_DID: ${COCOON_DID} COCOON_HOSTNAME: ${COCOON_HOSTNAME} COCOON_ROTATION_KEY_PATH: /keys/rotation.key COCOON_JWK_PATH: /keys/jwk.key COCOON_CONTACT_EMAIL: ${COCOON_CONTACT_EMAIL} COCOON_RELAYS: ${COCOON_RELAYS:-https://bsky.network} COCOON_ADMIN_PASSWORD: ${COCOON_ADMIN_PASSWORD} COCOON_DB_TYPE: postgres COCOON_DATABASE_URL: postgres://cocoon:${POSTGRES_PASSWORD}@postgres:5432/cocoon?sslmode=disable depends_on: cocoon: condition: service_healthy entrypoint: ["/bin/sh", "/create-initial-invite.sh"] restart: "no"
caddy: image: caddy:2-alpine container_name: cocoon-caddy ports: - "80:80" - "443:443" volumes: - ./Caddyfile.postgres:/etc/caddy/Caddyfile:ro - caddy_data:/data - caddy_config:/config restart: unless-stopped environment: COCOON_HOSTNAME: ${COCOON_HOSTNAME} CADDY_ACME_EMAIL: ${COCOON_CONTACT_EMAIL:-}
volumes: postgres_data: driver: local caddy_data: driver: local caddy_config: driver: local