mirror of
https://github.com/coollabsio/coolify.git
synced 2026-10-28 17:44:36 +08:00
Andras Bacsai
e678a224fb
Allow cluster workloads to configure domains and HTTP ports, and enable individual nodes as ingress proxies. Reconcile Caddy routes and firewall rules as network revisions so domain changes apply without redeploying. Refresh ingress routing when workload placements change and merge node metadata under a row lock to preserve concurrent updates. Add ingress controls, domain links, and regression and end-to-end coverage.
107 lines
3.5 KiB
YAML
107 lines
3.5 KiB
YAML
services:
|
|
coolify:
|
|
environment:
|
|
SENTINEL_HOST_ENABLED: "true"
|
|
FLUX_PORT: "${FLUX_PORT:-7443}"
|
|
# Nodes resolve coolify-flux to the libvirt gateway and reach the published host port.
|
|
FLUX_PUBLIC_URL: "https://coolify-flux:${FLUX_PORT:-7443}"
|
|
FLUX_ISSUER: "coolify-dev"
|
|
FLUX_SIGNING_KEY_ID: "dev-key"
|
|
FLUX_SIGNING_PRIVATE_KEY: "Q0NDQ0NDQ0NDQ0NDQ0NDQ0NDQ0NDQ0NDQ0NDQ0NDQ0Mi/Cl3kvC2/8C/z9t+2wwKoU4CWjZewONC6G44Kct0tg=="
|
|
FLUX_SIGNING_PUBLIC_KEY: "Ivwpd5Lwtv/Av8/bftsMCqFOAlo2XsDjQuhuOCnLdLY="
|
|
FLUX_INTERNAL_TOKEN: "coolify-flux-development-token"
|
|
FLUX_INTERNAL_URL: "http://coolify-flux:7080"
|
|
FLUX_RUNTIME_UID: "1000"
|
|
FLUX_TLS_VERIFY_HOST: "coolify-flux"
|
|
# Host port of this instance's UI; QEMU worker Nodes reach Coolify through the libvirt gateway.
|
|
DEVELOPMENT_QEMU_COOLIFY_PORT: "${APP_PORT:-8000}"
|
|
volumes:
|
|
- dev_flux_data:/data/coolify/flux
|
|
|
|
flux-pki-init:
|
|
image: coolify:dev
|
|
pull_policy: never
|
|
restart: "no"
|
|
depends_on:
|
|
coolify:
|
|
condition: service_healthy
|
|
postgres:
|
|
condition: service_healthy
|
|
env_file:
|
|
- .env
|
|
environment:
|
|
# Same key as the coolify service; env_file alone would use the checkout .env key under scripts/dev.
|
|
APP_KEY: "${APP_KEY:-}"
|
|
BASE_CONFIG_PATH: /data/coolify
|
|
SENTINEL_HOST_ENABLED: "true"
|
|
DB_HOST: postgres
|
|
FLUX_RUNTIME_UID: "1000"
|
|
command:
|
|
- sh
|
|
- -lc
|
|
# The coolify healthcheck passes before its first composer install and migrate finish.
|
|
- >-
|
|
chown -R 1000:1000 /data/coolify/flux &&
|
|
attempt=0 &&
|
|
until /command/s6-setuidgid www-data php artisan migrate:status --pending=1 >/dev/null 2>&1; do
|
|
attempt=$$((attempt + 1));
|
|
[ "$$attempt" -lt 150 ] || { echo 'Coolify migrations did not finish within 5 minutes.' >&2; exit 1; };
|
|
sleep 2;
|
|
done &&
|
|
exec /command/s6-setuidgid www-data php artisan flux:initialize-tls --identities=flux,coolify-flux,localhost,127.0.0.1,::1
|
|
volumes:
|
|
- .:/var/www/html/:cached
|
|
- dev_flux_data:/data/coolify/flux
|
|
networks:
|
|
- coolify
|
|
|
|
flux:
|
|
image: ghcr.io/coollabsio/flux:main
|
|
# Per Compose project, so stopped dev instances (scripts/dev) do not block each other.
|
|
container_name: "${COMPOSE_PROJECT_NAME:-coolify}-flux"
|
|
user: "1000:1000"
|
|
restart: unless-stopped
|
|
environment:
|
|
FLUX_LISTEN_ADDR: "0.0.0.0:7443"
|
|
FLUX_ISSUER: "coolify-dev"
|
|
FLUX_SIGNING_KEY_ID: "dev-key"
|
|
FLUX_SIGNING_PUBLIC_KEY: "Ivwpd5Lwtv/Av8/bftsMCqFOAlo2XsDjQuhuOCnLdLY="
|
|
FLUX_INTERNAL_EVENTS_URL: "http://coolify:8080/api/v1/internal/sentinel/control/events"
|
|
FLUX_INTERNAL_TOKEN: "coolify-flux-development-token"
|
|
FLUX_TLS_CERT_PATH: "/tls/pki/server.pem"
|
|
FLUX_TLS_KEY_PATH: "/tls/pki/server-key.pem"
|
|
depends_on:
|
|
flux-pki-init:
|
|
condition: service_completed_successfully
|
|
volumes:
|
|
- dev_flux_data:/tls:ro
|
|
ports:
|
|
- "${FLUX_PORT:-7443}:7443"
|
|
networks:
|
|
coolify:
|
|
aliases:
|
|
- coolify-flux
|
|
|
|
testing-host:
|
|
image: coolify-testing-host-systemd:dev
|
|
build:
|
|
target: systemd
|
|
init: false
|
|
privileged: true
|
|
cgroup: host
|
|
stop_signal: SIGRTMIN+3
|
|
tmpfs:
|
|
- /run
|
|
- /run/lock
|
|
volumes:
|
|
- /sys/fs/cgroup:/sys/fs/cgroup:rw
|
|
- dev_flux_data:/data/coolify/flux
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "systemctl is-active --quiet ssh.service"]
|
|
interval: 5s
|
|
retries: 10
|
|
timeout: 2s
|
|
|
|
volumes:
|
|
dev_flux_data:
|