mirror of
https://github.com/lukaszraczylo/gohoarder.git
synced 2026-06-06 22:59:29 +00:00
lukaszraczylo
8a9d786b1a
- [x] Remove Docker compilation from server, scanner, migrate Dockerfiles - [x] Use pre-built binaries injected by GoReleaser instead - [x] Delete separate gateway container and merge into frontend - [x] Update .goreleaser.yaml to reference pre-built binaries - [x] Simplify Kubernetes deployment to remove gateway service - [x] Simplify docker-compose to remove gateway container - [x] Add backend proxy configuration to frontend
128 lines
3.7 KiB
YAML
128 lines
3.7 KiB
YAML
version: '3.8'
|
|
|
|
# GoHoarder - Unified Deployment Example
|
|
# This docker-compose file demonstrates deploying all GoHoarder services
|
|
# The frontend includes integrated reverse proxy to the backend
|
|
|
|
services:
|
|
# Backend - Main application server
|
|
gohoarder-server:
|
|
image: ghcr.io/lukaszraczylo/gohoarder-server:latest
|
|
container_name: gohoarder-server
|
|
restart: unless-stopped
|
|
environment:
|
|
# Application configuration
|
|
- CONFIG_FILE=/config/config.yaml
|
|
# Database
|
|
- DB_PATH=/data/metadata/gohoarder.db
|
|
# Storage
|
|
- STORAGE_BACKEND=filesystem
|
|
- STORAGE_PATH=/data/cache
|
|
# Security scanning
|
|
- ENABLE_SCANNING=true
|
|
- SCAN_ON_DOWNLOAD=true
|
|
# Logging
|
|
- LOG_LEVEL=info
|
|
- LOG_FORMAT=json
|
|
volumes:
|
|
# Configuration
|
|
- ./config.yaml:/config/config.yaml:ro
|
|
# Data persistence
|
|
- gohoarder-cache:/data/cache
|
|
- gohoarder-metadata:/data/metadata
|
|
networks:
|
|
- gohoarder-internal
|
|
healthcheck:
|
|
test: ["CMD", "/usr/local/bin/gohoarder", "version"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 5s
|
|
|
|
# Frontend - Web dashboard with integrated reverse proxy
|
|
gohoarder-frontend:
|
|
image: ghcr.io/lukaszraczylo/gohoarder-frontend:latest
|
|
container_name: gohoarder-frontend
|
|
restart: unless-stopped
|
|
environment:
|
|
# Runtime configuration - injected into /config.js
|
|
- API_BASE_URL=/api
|
|
- APP_VERSION=1.0.0
|
|
- APP_NAME=GoHoarder
|
|
# Backend proxy configuration (frontend includes nginx reverse proxy)
|
|
- BACKEND_HOST=gohoarder-server
|
|
- BACKEND_PORT=8080
|
|
- SERVER_NAME=hoarder.i.raczylo.com
|
|
ports:
|
|
# Map to host port 80 (HTTP)
|
|
- "80:80"
|
|
# Map to host port 443 (HTTPS) - uncomment if using SSL
|
|
# - "443:443"
|
|
networks:
|
|
- gohoarder-internal
|
|
depends_on:
|
|
- gohoarder-server
|
|
healthcheck:
|
|
test: ["CMD", "wget", "--quiet", "--tries=1", "--spider", "http://localhost/"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 5s
|
|
|
|
# Scanner - Background vulnerability scanner (optional)
|
|
gohoarder-scanner:
|
|
image: ghcr.io/lukaszraczylo/gohoarder-scanner:latest
|
|
container_name: gohoarder-scanner
|
|
restart: unless-stopped
|
|
environment:
|
|
- CONFIG_FILE=/config/config.yaml
|
|
- SCANNER_MODE=true
|
|
- SCANNER_WORKERS=4
|
|
- SCANNER_INTERVAL=300
|
|
- LOG_LEVEL=info
|
|
volumes:
|
|
- ./config.yaml:/config/config.yaml:ro
|
|
- gohoarder-cache:/data/cache:ro
|
|
- gohoarder-metadata:/data/metadata
|
|
networks:
|
|
- gohoarder-internal
|
|
depends_on:
|
|
- gohoarder-server
|
|
# Uncomment if you want to run scanner separately
|
|
# If commented out, scanning happens inline in the server
|
|
# profiles:
|
|
# - scanner
|
|
|
|
networks:
|
|
gohoarder-internal:
|
|
driver: bridge
|
|
|
|
volumes:
|
|
# Persistent storage for cached packages
|
|
gohoarder-cache:
|
|
driver: local
|
|
# Persistent storage for metadata and scan results
|
|
gohoarder-metadata:
|
|
driver: local
|
|
|
|
# Usage:
|
|
# 1. Copy this file: cp docker-compose.example.yaml docker-compose.yaml
|
|
# 2. Copy config: cp config.yaml.example config.yaml
|
|
# 3. Edit config.yaml with your settings
|
|
# 4. Start services: docker-compose up -d
|
|
# 5. View logs: docker-compose logs -f
|
|
# 6. Stop services: docker-compose down
|
|
#
|
|
# Access:
|
|
# - Web UI: http://localhost or http://hoarder.i.raczylo.com
|
|
# - API: http://localhost/api or http://hoarder.i.raczylo.com/api
|
|
# - Health: http://localhost/health
|
|
# - Metrics: http://localhost/metrics
|
|
#
|
|
# For production:
|
|
# - Enable HTTPS in the frontend container (add SSL certificates to nginx)
|
|
# - Set up proper SSL certificates
|
|
# - Configure firewall rules
|
|
# - Set appropriate resource limits
|
|
# - Enable monitoring and alerting
|