154 lines
6.0 KiB
YAML
154 lines
6.0 KiB
YAML
# Meshnet public tracker + relay stack for Portainer without a custom image.
|
|
#
|
|
# This stack does NOT use deploy/docker/Dockerfile and does NOT require pushing an
|
|
# image to a registry. Each service starts from the public python:3.12-slim image,
|
|
# downloads a source tarball, installs the tracker/relay packages into a named
|
|
# venv volume, then starts the service.
|
|
#
|
|
# Required Portainer variables:
|
|
# SOURCE_TARBALL_URL URL to a .tar.gz archive of this repo
|
|
# PUBLIC_TRACKER_URL e.g. https://cloud.neuron.d-popov.com
|
|
# PUBLIC_PROXY_NETWORK Docker network shared with nginx/NPM, e.g. npm_proxy
|
|
#
|
|
# Optional:
|
|
# CLUSTER_PEERS e.g. https://ai.neuron.d-popov.com
|
|
# PUBLIC_RELAY_URL defaults to PUBLIC_TRACKER_URL with wss/ws + /ws
|
|
# SOURCE_STRIP_COMPONENTS defaults to 1 for GitHub/Gitea archive tarballs
|
|
|
|
services:
|
|
meshnet-tracker:
|
|
image: python:3.12-slim
|
|
container_name: meshnet-tracker
|
|
restart: unless-stopped
|
|
environment:
|
|
SOURCE_TARBALL_URL: ${SOURCE_TARBALL_URL:?set SOURCE_TARBALL_URL}
|
|
SOURCE_STRIP_COMPONENTS: ${SOURCE_STRIP_COMPONENTS:-1}
|
|
PUBLIC_TRACKER_URL: ${PUBLIC_TRACKER_URL:?set PUBLIC_TRACKER_URL, e.g. https://cloud.neuron.d-popov.com}
|
|
CLUSTER_PEERS: ${CLUSTER_PEERS:-}
|
|
PUBLIC_RELAY_URL: ${PUBLIC_RELAY_URL:-}
|
|
HEARTBEAT_TIMEOUT: ${HEARTBEAT_TIMEOUT:-30}
|
|
ENABLE_BILLING_DB: ${ENABLE_BILLING_DB:-1}
|
|
SOLANA_RPC_URL: ${SOLANA_RPC_URL:-}
|
|
USDT_MINT: ${USDT_MINT:-}
|
|
MESHNET_TREASURY_KEYPAIR_B64: ${MESHNET_TREASURY_KEYPAIR_B64:-}
|
|
SETTLE_PERIOD: ${SETTLE_PERIOD:-86400}
|
|
PAYOUT_THRESHOLD: ${PAYOUT_THRESHOLD:-5}
|
|
PAYOUT_DUST_FLOOR: ${PAYOUT_DUST_FLOOR:-0.01}
|
|
command:
|
|
- /bin/sh
|
|
- -lc
|
|
- |
|
|
set -eu
|
|
apt-get update
|
|
apt-get install -y --no-install-recommends ca-certificates curl tar
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
rm -rf /opt/meshnet-src
|
|
mkdir -p /opt/meshnet-src
|
|
curl -fsSL "$${SOURCE_TARBALL_URL}" -o /tmp/meshnet-src.tar.gz
|
|
tar -xzf /tmp/meshnet-src.tar.gz -C /opt/meshnet-src --strip-components "$${SOURCE_STRIP_COMPONENTS:-1}"
|
|
|
|
python -m venv /opt/meshnet-venv
|
|
/opt/meshnet-venv/bin/python -m pip install --upgrade pip setuptools wheel
|
|
/opt/meshnet-venv/bin/pip install \
|
|
-e /opt/meshnet-src/packages/contracts \
|
|
-e /opt/meshnet-src/packages/tracker \
|
|
-e /opt/meshnet-src/packages/relay
|
|
|
|
PEER_ARGS=""
|
|
if [ -n "$${CLUSTER_PEERS:-}" ]; then
|
|
PEER_ARGS="--cluster-peers $${CLUSTER_PEERS}"
|
|
fi
|
|
RELAY_URL="$${PUBLIC_RELAY_URL:-}"
|
|
if [ -z "$${RELAY_URL}" ]; then
|
|
RELAY_URL="$$(printf '%s' "$${PUBLIC_TRACKER_URL}" | sed 's#^https://#wss://#; s#^http://#ws://#')/ws"
|
|
fi
|
|
BILLING_ARGS=""
|
|
if [ "$${ENABLE_BILLING_DB:-1}" = "1" ]; then
|
|
BILLING_ARGS="--billing-db /var/lib/meshnet/billing.sqlite"
|
|
fi
|
|
TREASURY_ARGS=""
|
|
if [ -n "$${SOLANA_RPC_URL:-}" ] || [ -n "$${USDT_MINT:-}" ] || [ -n "$${MESHNET_TREASURY_KEYPAIR_B64:-}" ]; then
|
|
if [ -z "$${SOLANA_RPC_URL:-}" ] || [ -z "$${USDT_MINT:-}" ] || [ -z "$${MESHNET_TREASURY_KEYPAIR_B64:-}" ]; then
|
|
echo "SOLANA_RPC_URL, USDT_MINT, and MESHNET_TREASURY_KEYPAIR_B64 must all be set together" >&2
|
|
exit 1
|
|
fi
|
|
printf '%s' "$${MESHNET_TREASURY_KEYPAIR_B64}" | base64 -d > /var/lib/meshnet/treasury-keypair.json
|
|
chmod 600 /var/lib/meshnet/treasury-keypair.json
|
|
TREASURY_ARGS="--solana-rpc-url $${SOLANA_RPC_URL} --usdt-mint $${USDT_MINT} --treasury-keypair /var/lib/meshnet/treasury-keypair.json --settle-period $${SETTLE_PERIOD} --payout-threshold $${PAYOUT_THRESHOLD} --payout-dust-floor $${PAYOUT_DUST_FLOOR}"
|
|
fi
|
|
exec /opt/meshnet-venv/bin/meshnet-tracker start \
|
|
--host 0.0.0.0 \
|
|
--port 8081 \
|
|
--heartbeat-timeout "$${HEARTBEAT_TIMEOUT}" \
|
|
--self-url "$${PUBLIC_TRACKER_URL}" \
|
|
--relay-url "$${RELAY_URL}" \
|
|
--stats-db /var/lib/meshnet/tracker-stats.sqlite \
|
|
$${BILLING_ARGS} \
|
|
$${TREASURY_ARGS} \
|
|
$${PEER_ARGS}
|
|
volumes:
|
|
- meshnet-tracker-data:/var/lib/meshnet
|
|
- meshnet-tracker-venv:/opt/meshnet-venv
|
|
expose:
|
|
- "8081"
|
|
healthcheck:
|
|
test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8081/v1/health', timeout=3).read()"]
|
|
interval: 30s
|
|
timeout: 5s
|
|
retries: 3
|
|
start_period: 60s
|
|
networks:
|
|
- public-proxy
|
|
|
|
meshnet-relay:
|
|
image: python:3.12-slim
|
|
container_name: meshnet-relay
|
|
restart: unless-stopped
|
|
environment:
|
|
SOURCE_TARBALL_URL: ${SOURCE_TARBALL_URL:?set SOURCE_TARBALL_URL}
|
|
SOURCE_STRIP_COMPONENTS: ${SOURCE_STRIP_COMPONENTS:-1}
|
|
command:
|
|
- /bin/sh
|
|
- -lc
|
|
- |
|
|
set -eu
|
|
apt-get update
|
|
apt-get install -y --no-install-recommends ca-certificates curl tar
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
rm -rf /opt/meshnet-src
|
|
mkdir -p /opt/meshnet-src
|
|
curl -fsSL "$${SOURCE_TARBALL_URL}" -o /tmp/meshnet-src.tar.gz
|
|
tar -xzf /tmp/meshnet-src.tar.gz -C /opt/meshnet-src --strip-components "$${SOURCE_STRIP_COMPONENTS:-1}"
|
|
|
|
python -m venv /opt/meshnet-venv
|
|
/opt/meshnet-venv/bin/python -m pip install --upgrade pip setuptools wheel
|
|
/opt/meshnet-venv/bin/pip install \
|
|
-e /opt/meshnet-src/packages/tracker \
|
|
-e /opt/meshnet-src/packages/relay
|
|
|
|
exec /opt/meshnet-venv/bin/meshnet-relay --host 0.0.0.0 --port 8765 --log-level INFO
|
|
volumes:
|
|
- meshnet-relay-venv:/opt/meshnet-venv
|
|
expose:
|
|
- "8765"
|
|
healthcheck:
|
|
test: ["CMD", "python", "-c", "import socket; s=socket.create_connection(('127.0.0.1', 8765), 3); s.close()"]
|
|
interval: 30s
|
|
timeout: 5s
|
|
retries: 3
|
|
start_period: 60s
|
|
networks:
|
|
- public-proxy
|
|
|
|
volumes:
|
|
meshnet-tracker-data:
|
|
meshnet-tracker-venv:
|
|
meshnet-relay-venv:
|
|
|
|
networks:
|
|
public-proxy:
|
|
external: true
|
|
name: ${PUBLIC_PROXY_NETWORK:-npm_proxy}
|