mrhid6
a9d602d021
- single-use session tokens (atomic ConsumeSessionToken) + user-bound tunnel (actor must match session opener) - wire VNC end-to-end (stash/consume password, connect+tunnel, frontend password field) - passphrase-protected SSH keys: passphrase_enc on Key model, capture on upload, decrypt + pass to guacd
73 lines
1.5 KiB
YAML
73 lines
1.5 KiB
YAML
services:
|
|
mongo:
|
|
image: mongo:8
|
|
restart: unless-stopped
|
|
volumes:
|
|
- mongo_data:/data/db
|
|
healthcheck:
|
|
test: ["CMD", "mongosh", "--eval", "db.adminCommand('ping')"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 5
|
|
start_period: 20s
|
|
|
|
redis:
|
|
image: redis:8
|
|
restart: unless-stopped
|
|
volumes:
|
|
- redis_data:/data
|
|
healthcheck:
|
|
test: ["CMD", "redis-cli", "ping"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 5
|
|
|
|
guacd:
|
|
image: guacamole/guacd:1.6
|
|
restart: unless-stopped
|
|
|
|
server:
|
|
build:
|
|
context: ../server
|
|
dockerfile: Dockerfile
|
|
restart: unless-stopped
|
|
ports:
|
|
- "8080:8080"
|
|
- "9090:9090"
|
|
environment:
|
|
MONGO_URI: mongodb://mongo:27017/vantage
|
|
REDIS_ADDR: redis:6379
|
|
GITEA_HOST: ${GITEA_HOST}
|
|
PUBLIC_HOST: ${PUBLIC_HOST}
|
|
GRPC_HOST: ${GRPC_HOST}
|
|
GRPC_PORT: "9090"
|
|
HTTP_PORT: "8080"
|
|
OIDC_ISSUER: ${OIDC_ISSUER:-}
|
|
OIDC_CLIENT_ID: ${OIDC_CLIENT_ID:-}
|
|
OIDC_CLIENT_SECRET: ${OIDC_CLIENT_SECRET:-}
|
|
OIDC_REDIRECT_URL: ${OIDC_REDIRECT_URL:-}
|
|
GUACD_ADDR: guacd:4822
|
|
depends_on:
|
|
mongo:
|
|
condition: service_healthy
|
|
redis:
|
|
condition: service_healthy
|
|
guacd:
|
|
condition: service_started
|
|
|
|
web:
|
|
build:
|
|
context: ../web
|
|
dockerfile: Dockerfile
|
|
args:
|
|
NEXT_PUBLIC_API_URL: http://server:8080
|
|
restart: unless-stopped
|
|
ports:
|
|
- "3000:3000"
|
|
depends_on:
|
|
- server
|
|
|
|
volumes:
|
|
mongo_data:
|
|
redis_data:
|