1073d9fd2c
- Upgraded Fedimint version to v0.10.0 in docker-compose.yml and manifest.yml, adding support for the built-in Guardian UI. - Modified .gitignore to exclude deploy-config.sh script. - Enhanced onboarding process in AuthManager to persist onboarding state and validate password strength during user setup. - Updated API to handle onboarding completion and password change requests, ensuring a smoother user experience. - Improved configuration management to support Nostr discovery and Tor proxy settings, enhancing node identity features.
480 lines
12 KiB
YAML
480 lines
12 KiB
YAML
services:
|
|
# Bitcoin Core - regtest mode (no blockchain sync)
|
|
bitcoin:
|
|
image: lncm/bitcoind:v27.0
|
|
container_name: archy-bitcoin
|
|
ports:
|
|
- "18443:18443" # RPC
|
|
- "18444:18444" # P2P
|
|
volumes:
|
|
- bitcoin-data:/data/.bitcoin
|
|
command: |
|
|
-regtest
|
|
-server
|
|
-rpcuser=bitcoin
|
|
-rpcpassword=bitcoinpass
|
|
-rpcallowip=0.0.0.0/0
|
|
-rpcbind=0.0.0.0
|
|
-txindex=1
|
|
-zmqpubrawblock=tcp://0.0.0.0:28332
|
|
-zmqpubrawtx=tcp://0.0.0.0:28333
|
|
restart: unless-stopped
|
|
networks:
|
|
- archy-net
|
|
|
|
# Bitcoin Core UI - Web interface
|
|
bitcoin-ui:
|
|
image: nginx:alpine
|
|
container_name: archy-bitcoin-ui
|
|
ports:
|
|
- "18445:80"
|
|
volumes:
|
|
- ./docker/bitcoin-ui:/usr/share/nginx/html:ro
|
|
restart: unless-stopped
|
|
networks:
|
|
- archy-net
|
|
|
|
# BTCPay Server
|
|
btcpay:
|
|
image: btcpayserver/btcpayserver:1.13.5
|
|
container_name: archy-btcpay
|
|
ports:
|
|
- "14142:49392"
|
|
environment:
|
|
BTCPAY_PROTOCOL: http
|
|
BTCPAY_HOST: localhost:14142
|
|
BTCPAY_CHAINS: btc
|
|
BTCPAY_BTCEXPLORERURL: http://mempool:4080
|
|
BTCPAY_BTCRPCURL: http://bitcoin:18443
|
|
BTCPAY_BTCRPCUSER: bitcoin
|
|
BTCPAY_BTCRPCPASSWORD: bitcoinpass
|
|
depends_on:
|
|
- bitcoin
|
|
- postgres-btcpay
|
|
restart: unless-stopped
|
|
networks:
|
|
- archy-net
|
|
|
|
postgres-btcpay:
|
|
image: postgres:15-alpine
|
|
container_name: archy-btcpay-db
|
|
environment:
|
|
POSTGRES_DB: btcpay
|
|
POSTGRES_USER: btcpay
|
|
POSTGRES_PASSWORD: btcpaypass
|
|
volumes:
|
|
- postgres-btcpay-data:/var/lib/postgresql/data
|
|
restart: unless-stopped
|
|
networks:
|
|
- archy-net
|
|
|
|
# Home Assistant
|
|
homeassistant:
|
|
image: homeassistant/home-assistant:2024.1
|
|
container_name: archy-homeassistant
|
|
ports:
|
|
- "8123:8123"
|
|
volumes:
|
|
- homeassistant-data:/config
|
|
environment:
|
|
TZ: America/New_York
|
|
restart: unless-stopped
|
|
networks:
|
|
- archy-net
|
|
|
|
# Grafana
|
|
grafana:
|
|
image: grafana/grafana:10.2.0
|
|
container_name: archy-grafana
|
|
ports:
|
|
- "3000:3000"
|
|
volumes:
|
|
- grafana-data:/var/lib/grafana
|
|
environment:
|
|
GF_SECURITY_ADMIN_PASSWORD: admin
|
|
GF_USERS_ALLOW_SIGN_UP: "false"
|
|
restart: unless-stopped
|
|
networks:
|
|
- archy-net
|
|
|
|
# Fedimint (v0.10+ with built-in Guardian UI)
|
|
fedimint:
|
|
image: fedimint/fedimintd:v0.10.0
|
|
container_name: archy-fedimint
|
|
platform: linux/amd64 # Emulate x86 on ARM Macs
|
|
ports:
|
|
- "8173:8173" # P2P
|
|
- "8174:8174" # API (JSON-RPC)
|
|
- "8175:8175" # Built-in Guardian UI
|
|
volumes:
|
|
- fedimint-data:/data
|
|
environment:
|
|
FM_BITCOIND_URL: http://bitcoin:18443
|
|
FM_BITCOIND_USERNAME: bitcoin
|
|
FM_BITCOIND_PASSWORD: bitcoinpass
|
|
FM_BITCOIN_NETWORK: regtest
|
|
FM_BIND_P2P: 0.0.0.0:8173
|
|
FM_BIND_API: 0.0.0.0:8174
|
|
FM_BIND_UI: 0.0.0.0:8175
|
|
depends_on:
|
|
- bitcoin
|
|
restart: unless-stopped
|
|
networks:
|
|
- archy-net
|
|
|
|
# Lightning Network Daemon (LND)
|
|
lnd:
|
|
image: lightninglabs/lnd:v0.17.4-beta
|
|
container_name: archy-lnd
|
|
ports:
|
|
- "9735:9735" # P2P
|
|
- "8080:8080" # REST
|
|
- "10009:10009" # gRPC
|
|
volumes:
|
|
- lnd-data:/root/.lnd
|
|
command: |
|
|
--bitcoin.active
|
|
--bitcoin.regtest
|
|
--bitcoin.node=bitcoind
|
|
--bitcoind.rpchost=bitcoin:18443
|
|
--bitcoind.rpcuser=bitcoin
|
|
--bitcoind.rpcpass=bitcoinpass
|
|
--bitcoind.zmqpubrawblock=tcp://bitcoin:28332
|
|
--bitcoind.zmqpubrawtx=tcp://bitcoin:28333
|
|
--debuglevel=info
|
|
--rpclisten=0.0.0.0:10009
|
|
--restlisten=0.0.0.0:8080
|
|
--noseedbackup
|
|
depends_on:
|
|
- bitcoin
|
|
restart: unless-stopped
|
|
networks:
|
|
- archy-net
|
|
|
|
# LND UI - Web interface
|
|
lnd-ui:
|
|
image: nginx:alpine
|
|
container_name: archy-lnd-ui
|
|
ports:
|
|
- "8085:80"
|
|
volumes:
|
|
- ./docker/lnd-ui:/usr/share/nginx/html:ro
|
|
restart: unless-stopped
|
|
networks:
|
|
- archy-net
|
|
|
|
# Mempool Explorer
|
|
mempool-web:
|
|
image: mempool/frontend:v2.5.0
|
|
container_name: archy-mempool-web
|
|
ports:
|
|
- "4080:8080"
|
|
environment:
|
|
FRONTEND_HTTP_PORT: 8080
|
|
BACKEND_MAINNET_HTTP_HOST: mempool-api
|
|
depends_on:
|
|
- mempool-api
|
|
restart: unless-stopped
|
|
networks:
|
|
- archy-net
|
|
|
|
mempool-api:
|
|
image: mempool/backend:v2.5.0
|
|
container_name: archy-mempool-api
|
|
environment:
|
|
MEMPOOL_BACKEND: electrum
|
|
ELECTRUM_HOST: bitcoin
|
|
ELECTRUM_PORT: 50001
|
|
ELECTRUM_TLS_ENABLED: "false"
|
|
CORE_RPC_HOST: bitcoin
|
|
CORE_RPC_PORT: 18443
|
|
CORE_RPC_USERNAME: bitcoin
|
|
CORE_RPC_PASSWORD: bitcoinpass
|
|
DATABASE_ENABLED: "true"
|
|
DATABASE_HOST: mysql-mempool
|
|
DATABASE_DATABASE: mempool
|
|
DATABASE_USERNAME: mempool
|
|
DATABASE_PASSWORD: mempoolpass
|
|
depends_on:
|
|
- bitcoin
|
|
- mysql-mempool
|
|
restart: unless-stopped
|
|
networks:
|
|
- archy-net
|
|
|
|
mysql-mempool:
|
|
image: mariadb:10.11
|
|
container_name: archy-mempool-db
|
|
environment:
|
|
MYSQL_DATABASE: mempool
|
|
MYSQL_USER: mempool
|
|
MYSQL_PASSWORD: mempoolpass
|
|
MYSQL_ROOT_PASSWORD: rootpass
|
|
volumes:
|
|
- mysql-mempool-data:/var/lib/mysql
|
|
restart: unless-stopped
|
|
networks:
|
|
- archy-net
|
|
|
|
# SearXNG
|
|
searxng:
|
|
image: searxng/searxng:latest
|
|
container_name: archy-searxng
|
|
ports:
|
|
- "8082:8080"
|
|
volumes:
|
|
- searxng-data:/etc/searxng
|
|
environment:
|
|
SEARXNG_BASE_URL: http://localhost:8082/
|
|
restart: unless-stopped
|
|
networks:
|
|
- archy-net
|
|
|
|
# OnlyOffice Document Server
|
|
onlyoffice:
|
|
image: onlyoffice/documentserver:7.5.1
|
|
container_name: archy-onlyoffice
|
|
ports:
|
|
- "8083:80"
|
|
volumes:
|
|
- onlyoffice-data:/var/www/onlyoffice/Data
|
|
- onlyoffice-logs:/var/log/onlyoffice
|
|
environment:
|
|
JWT_ENABLED: "false"
|
|
restart: unless-stopped
|
|
networks:
|
|
- archy-net
|
|
|
|
# Penpot - Design and prototyping platform
|
|
penpot-frontend:
|
|
image: penpotapp/frontend:latest
|
|
container_name: archy-penpot-frontend
|
|
ports:
|
|
- "9001:8080"
|
|
volumes:
|
|
- penpot-assets:/opt/data/assets
|
|
depends_on:
|
|
- penpot-backend
|
|
- penpot-exporter
|
|
restart: unless-stopped
|
|
networks:
|
|
- archy-net
|
|
environment:
|
|
PENPOT_FLAGS: disable-email-verification enable-login-with-password enable-registration disable-secure-session-cookies
|
|
|
|
penpot-backend:
|
|
image: penpotapp/backend:latest
|
|
container_name: archy-penpot-backend
|
|
volumes:
|
|
- penpot-assets:/opt/data/assets
|
|
depends_on:
|
|
penpot-postgres:
|
|
condition: service_healthy
|
|
penpot-valkey:
|
|
condition: service_healthy
|
|
restart: unless-stopped
|
|
networks:
|
|
- archy-net
|
|
environment:
|
|
PENPOT_FLAGS: disable-email-verification enable-login-with-password enable-registration enable-smtp disable-secure-session-cookies enable-prepl-server
|
|
PENPOT_PUBLIC_URI: http://localhost:9001
|
|
PENPOT_SECRET_KEY: dev_secret_key_change_in_production_base64_512bits
|
|
PENPOT_DATABASE_URI: postgresql://penpot-postgres/penpot
|
|
PENPOT_DATABASE_USERNAME: penpot
|
|
PENPOT_DATABASE_PASSWORD: penpot
|
|
PENPOT_REDIS_URI: redis://penpot-valkey/0
|
|
PENPOT_OBJECTS_STORAGE_BACKEND: fs
|
|
PENPOT_OBJECTS_STORAGE_FS_DIRECTORY: /opt/data/assets
|
|
PENPOT_TELEMETRY_ENABLED: false
|
|
PENPOT_SMTP_DEFAULT_FROM: no-reply@localhost
|
|
PENPOT_SMTP_DEFAULT_REPLY_TO: no-reply@localhost
|
|
PENPOT_SMTP_HOST: penpot-mailcatch
|
|
PENPOT_SMTP_PORT: 1025
|
|
PENPOT_SMTP_TLS: false
|
|
PENPOT_SMTP_SSL: false
|
|
|
|
penpot-exporter:
|
|
image: penpotapp/exporter:latest
|
|
container_name: archy-penpot-exporter
|
|
restart: unless-stopped
|
|
depends_on:
|
|
penpot-valkey:
|
|
condition: service_healthy
|
|
networks:
|
|
- archy-net
|
|
environment:
|
|
PENPOT_SECRET_KEY: dev_secret_key_change_in_production_base64_512bits
|
|
PENPOT_PUBLIC_URI: http://penpot-frontend:8080
|
|
PENPOT_REDIS_URI: redis://penpot-valkey/0
|
|
|
|
penpot-postgres:
|
|
image: postgres:15
|
|
container_name: archy-penpot-postgres
|
|
stop_signal: SIGINT
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U penpot"]
|
|
interval: 2s
|
|
timeout: 10s
|
|
retries: 5
|
|
start_period: 2s
|
|
volumes:
|
|
- penpot-postgres-data:/var/lib/postgresql/data
|
|
restart: unless-stopped
|
|
networks:
|
|
- archy-net
|
|
environment:
|
|
POSTGRES_INITDB_ARGS: --data-checksums
|
|
POSTGRES_DB: penpot
|
|
POSTGRES_USER: penpot
|
|
POSTGRES_PASSWORD: penpot
|
|
|
|
penpot-valkey:
|
|
image: valkey/valkey:8.1
|
|
container_name: archy-penpot-valkey
|
|
restart: unless-stopped
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "valkey-cli ping | grep PONG"]
|
|
interval: 1s
|
|
timeout: 3s
|
|
retries: 5
|
|
start_period: 3s
|
|
networks:
|
|
- archy-net
|
|
environment:
|
|
VALKEY_EXTRA_FLAGS: --maxmemory 128mb --maxmemory-policy volatile-lfu
|
|
|
|
penpot-mailcatch:
|
|
image: sj26/mailcatcher:latest
|
|
container_name: archy-penpot-mailcatch
|
|
restart: unless-stopped
|
|
expose:
|
|
- '1025'
|
|
ports:
|
|
- "1080:1080"
|
|
networks:
|
|
- archy-net
|
|
|
|
# Placeholder services for apps without direct Docker images
|
|
# These will show "coming soon" pages or simple status pages
|
|
|
|
# Endurain - Self-hosted fitness tracking
|
|
endurain-db:
|
|
image: postgres:17-alpine
|
|
container_name: archy-endurain-db
|
|
environment:
|
|
POSTGRES_DB: endurain
|
|
POSTGRES_USER: endurain
|
|
POSTGRES_PASSWORD: endurain_dev_password
|
|
volumes:
|
|
- endurain-db-data:/var/lib/postgresql/data
|
|
restart: unless-stopped
|
|
networks:
|
|
- archy-net
|
|
|
|
endurain:
|
|
image: ghcr.io/endurain-project/endurain:latest
|
|
container_name: archy-endurain
|
|
ports:
|
|
- "8084:8080"
|
|
environment:
|
|
DB_HOST: endurain-db
|
|
DB_PORT: 5432
|
|
DB_NAME: endurain
|
|
DB_USER: endurain
|
|
DB_PASSWORD: endurain_dev_password
|
|
POSTGRES_DB: endurain
|
|
POSTGRES_USER: endurain
|
|
POSTGRES_PASSWORD: endurain_dev_password
|
|
SECRET_KEY: dev_secret_key_change_in_production_32chars
|
|
FERNET_KEY: 7NfMMRSCWcoNDSjqBX8WoYH9nTFk1VdQOdZY13po53Y=
|
|
TZ: America/New_York
|
|
ENDURAIN_HOST: http://localhost:8084
|
|
BEHIND_PROXY: "false"
|
|
volumes:
|
|
- endurain-data:/app/backend/data
|
|
- endurain-logs:/app/backend/logs
|
|
depends_on:
|
|
- endurain-db
|
|
restart: unless-stopped
|
|
networks:
|
|
- archy-net
|
|
|
|
# Morphos - Self-hosted file converter
|
|
morphos:
|
|
image: ghcr.io/danvergara/morphos-server:latest
|
|
container_name: archy-morphos
|
|
ports:
|
|
- "8081:8080"
|
|
volumes:
|
|
- /tmp:/tmp
|
|
healthcheck:
|
|
test: timeout 10s bash -c ':> /dev/tcp/127.0.0.1/8080' || exit 1
|
|
interval: 60s
|
|
retries: 3
|
|
start_period: 20s
|
|
timeout: 30s
|
|
restart: unless-stopped
|
|
networks:
|
|
- archy-net
|
|
|
|
# Nextcloud - Cloud storage and file management
|
|
nextcloud-db:
|
|
image: mariadb:11
|
|
container_name: archy-nextcloud-db
|
|
command: --transaction-isolation=READ-COMMITTED --log-bin=binlog --binlog-format=ROW
|
|
restart: unless-stopped
|
|
volumes:
|
|
- nextcloud-db-data:/var/lib/mysql
|
|
environment:
|
|
MYSQL_ROOT_PASSWORD: nextcloud_root_pass
|
|
MYSQL_DATABASE: nextcloud
|
|
MYSQL_USER: nextcloud
|
|
MYSQL_PASSWORD: nextcloud_pass
|
|
networks:
|
|
- archy-net
|
|
|
|
nextcloud:
|
|
image: nextcloud:latest
|
|
container_name: archy-nextcloud
|
|
ports:
|
|
- "8086:80"
|
|
restart: unless-stopped
|
|
volumes:
|
|
- nextcloud-data:/var/www/html
|
|
environment:
|
|
MYSQL_HOST: nextcloud-db
|
|
MYSQL_DATABASE: nextcloud
|
|
MYSQL_USER: nextcloud
|
|
MYSQL_PASSWORD: nextcloud_pass
|
|
NEXTCLOUD_ADMIN_USER: admin
|
|
NEXTCLOUD_ADMIN_PASSWORD: admin
|
|
NEXTCLOUD_TRUSTED_DOMAINS: localhost
|
|
OVERWRITEPROTOCOL: http
|
|
depends_on:
|
|
- nextcloud-db
|
|
networks:
|
|
- archy-net
|
|
|
|
volumes:
|
|
bitcoin-data:
|
|
postgres-btcpay-data:
|
|
homeassistant-data:
|
|
grafana-data:
|
|
fedimint-data:
|
|
lnd-data:
|
|
mysql-mempool-data:
|
|
searxng-data:
|
|
onlyoffice-data:
|
|
onlyoffice-logs:
|
|
penpot-assets:
|
|
penpot-postgres-data:
|
|
endurain-db-data:
|
|
endurain-data:
|
|
endurain-logs:
|
|
nextcloud-db-data:
|
|
nextcloud-data:
|
|
|
|
networks:
|
|
archy-net:
|
|
driver: bridge
|