108 lines
4.1 KiB
YAML
108 lines
4.1 KiB
YAML
# Meshnet public tracker + relay stack for Portainer.
|
|
#
|
|
# Intended topology when Nginx Proxy Manager (or another nginx reverse proxy)
|
|
# runs on the same Docker host:
|
|
# https://YOUR_DOMAIN/v1/* -> meshnet-tracker:8081
|
|
# https://YOUR_DOMAIN/ws -> meshnet-relay:8765 (WebSocket)
|
|
# https://YOUR_DOMAIN/rpc/* -> meshnet-relay:8765 (WebSocket)
|
|
#
|
|
# Before deploying, create or identify the Docker network shared with nginx/NPM,
|
|
# then set PUBLIC_PROXY_NETWORK to its name in Portainer environment variables.
|
|
|
|
services:
|
|
meshnet-tracker:
|
|
build:
|
|
context: ../..
|
|
dockerfile: deploy/docker/Dockerfile
|
|
image: meshnet-tracker-relay:local
|
|
container_name: meshnet-tracker
|
|
restart: unless-stopped
|
|
environment:
|
|
PUBLIC_TRACKER_URL: ${PUBLIC_TRACKER_URL:?set PUBLIC_TRACKER_URL, e.g. https://cloud.neuron.d-popov.com}
|
|
CLUSTER_PEERS: ${CLUSTER_PEERS:-}
|
|
PUBLIC_RELAY_URL: ${PUBLIC_RELAY_URL:-}
|
|
HEARTBEAT_TIMEOUT: ${HEARTBEAT_TIMEOUT:-30}
|
|
ENABLE_BILLING_DB: ${ENABLE_BILLING_DB:-1}
|
|
SOLANA_RPC_URL: ${SOLANA_RPC_URL:-}
|
|
USDT_MINT: ${USDT_MINT:-}
|
|
MESHNET_TREASURY_KEYPAIR_B64: ${MESHNET_TREASURY_KEYPAIR_B64:-}
|
|
SETTLE_PERIOD: ${SETTLE_PERIOD:-86400}
|
|
PAYOUT_THRESHOLD: ${PAYOUT_THRESHOLD:-5}
|
|
PAYOUT_DUST_FLOOR: ${PAYOUT_DUST_FLOOR:-0.01}
|
|
command:
|
|
- /bin/sh
|
|
- -lc
|
|
- |
|
|
set -eu
|
|
PEER_ARGS=""
|
|
if [ -n "$${CLUSTER_PEERS:-}" ]; then
|
|
PEER_ARGS="--cluster-peers $${CLUSTER_PEERS}"
|
|
fi
|
|
RELAY_URL="$${PUBLIC_RELAY_URL:-}"
|
|
if [ -z "$${RELAY_URL}" ]; then
|
|
RELAY_URL="$$(printf '%s' "$${PUBLIC_TRACKER_URL}" | sed 's#^https://#wss://#; s#^http://#ws://#')/ws"
|
|
fi
|
|
BILLING_ARGS=""
|
|
if [ "$${ENABLE_BILLING_DB:-1}" = "1" ]; then
|
|
BILLING_ARGS="--billing-db /var/lib/meshnet/billing.sqlite"
|
|
fi
|
|
TREASURY_ARGS=""
|
|
if [ -n "$${SOLANA_RPC_URL:-}" ] || [ -n "$${USDT_MINT:-}" ] || [ -n "$${MESHNET_TREASURY_KEYPAIR_B64:-}" ]; then
|
|
if [ -z "$${SOLANA_RPC_URL:-}" ] || [ -z "$${USDT_MINT:-}" ] || [ -z "$${MESHNET_TREASURY_KEYPAIR_B64:-}" ]; then
|
|
echo "SOLANA_RPC_URL, USDT_MINT, and MESHNET_TREASURY_KEYPAIR_B64 must all be set together" >&2
|
|
exit 1
|
|
fi
|
|
printf '%s' "$${MESHNET_TREASURY_KEYPAIR_B64}" | base64 -d > /var/lib/meshnet/treasury-keypair.json
|
|
chmod 600 /var/lib/meshnet/treasury-keypair.json
|
|
TREASURY_ARGS="--solana-rpc-url $${SOLANA_RPC_URL} --usdt-mint $${USDT_MINT} --treasury-keypair /var/lib/meshnet/treasury-keypair.json --settle-period $${SETTLE_PERIOD} --payout-threshold $${PAYOUT_THRESHOLD} --payout-dust-floor $${PAYOUT_DUST_FLOOR}"
|
|
fi
|
|
exec meshnet-tracker start \
|
|
--host 0.0.0.0 \
|
|
--port 8081 \
|
|
--heartbeat-timeout "$${HEARTBEAT_TIMEOUT}" \
|
|
--self-url "$${PUBLIC_TRACKER_URL}" \
|
|
--relay-url "$${RELAY_URL}" \
|
|
--stats-db /var/lib/meshnet/tracker-stats.sqlite \
|
|
$${BILLING_ARGS} \
|
|
$${TREASURY_ARGS} \
|
|
$${PEER_ARGS}
|
|
volumes:
|
|
- meshnet-tracker-data:/var/lib/meshnet
|
|
expose:
|
|
- "8081"
|
|
healthcheck:
|
|
test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8081/v1/health', timeout=3).read()"]
|
|
interval: 30s
|
|
timeout: 5s
|
|
retries: 3
|
|
start_period: 10s
|
|
networks:
|
|
- public-proxy
|
|
|
|
meshnet-relay:
|
|
image: meshnet-tracker-relay:local
|
|
container_name: meshnet-relay
|
|
restart: unless-stopped
|
|
depends_on:
|
|
meshnet-tracker:
|
|
condition: service_started
|
|
command: ["meshnet-relay", "--host", "0.0.0.0", "--port", "8765", "--log-level", "INFO"]
|
|
expose:
|
|
- "8765"
|
|
healthcheck:
|
|
test: ["CMD", "python", "-c", "import socket; s=socket.create_connection(('127.0.0.1', 8765), 3); s.close()"]
|
|
interval: 30s
|
|
timeout: 5s
|
|
retries: 3
|
|
start_period: 10s
|
|
networks:
|
|
- public-proxy
|
|
|
|
volumes:
|
|
meshnet-tracker-data:
|
|
|
|
networks:
|
|
public-proxy:
|
|
external: true
|
|
name: ${PUBLIC_PROXY_NETWORK:-npm_proxy}
|