StasonJatham
a366905a43
Logging: - structured slog with LOG_FORMAT=json|text and a stable key vocabulary - periodic stats record with queue depths, db pool, goroutines, memory, dns/probe - no per-certificate logging (hot path is counters only) UI (Bucketeer branding, DESIGN.md): - light+dark themes (OS default, persisted header toggle, no first-paint flash) - official mascot: lossless WebP light/dark logos + favicon, embedded and served with cache headers (1.2MB source PNGs -> ~27/22KB webp) - Assets/Contents views, pagination (offset) and native virtual scrolling (content-visibility) so large result sets do not blow up the DOM - search with debounce/abort + URL state, exposure chips, sort, summary counts Readability + indexing: - internal/index listers for S3-compatible, GCS, Azure, Firebase, OpenSearch (metadata only: keys/sizes/dates; never object contents) - asset_entries table + store write/search; readable resources are indexed and searchable in the UI - deep, unauthenticated, read-only DB probes (PROBE_DEEP): Redis PING, PostgreSQL StartupMessage, MongoDB OP_MSG listDatabases; OpenSearch/Neptune HTTP reads - Azure account-level listing fixed: 403 is reported reachable, not auth_required, since anonymous access is per-container DNS: - curated reliable resolvers by default; DNS_SERVERS=fresh adds the compiled-in Fresh-Resolvers snapshot with a bounded startup sample (warming all 6.7k at once broke the container resolver) - random healthy selection + failover + per-server cooldown Other: prober Close fixes a shutdown hang; config/README updated.
65 lines
2.0 KiB
YAML
65 lines
2.0 KiB
YAML
# Local / single-host deployment.
|
|
#
|
|
# Secrets come from .env (gitignored). Copy .env.example to .env and set a
|
|
# strong POSTGRES_PASSWORD plus a matching DATABASE_URL before `docker compose
|
|
# up`. For a production database, point DATABASE_URL at a TLS-enabled endpoint,
|
|
# e.g. postgres://user:[email protected]:5432/ctcloud?sslmode=verify-full
|
|
#
|
|
# The compose bridge network is private; sslmode=disable is only acceptable here
|
|
# because the database is not reachable from outside the stack.
|
|
services:
|
|
postgres:
|
|
image: postgres:17-alpine
|
|
environment:
|
|
POSTGRES_USER: ${POSTGRES_USER:-ctcloud}
|
|
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:?set POSTGRES_PASSWORD in .env}
|
|
POSTGRES_DB: ${POSTGRES_DB:-ctcloud}
|
|
volumes:
|
|
- pgdata:/var/lib/postgresql/data
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-ctcloud} -d ${POSTGRES_DB:-ctcloud}"]
|
|
interval: 5s
|
|
timeout: 5s
|
|
retries: 12
|
|
mem_limit: 1g
|
|
cpus: 2.0
|
|
pids_limit: 256
|
|
logging:
|
|
driver: json-file
|
|
options: { max-size: "10m", max-file: "3" }
|
|
restart: unless-stopped
|
|
|
|
ctcloud:
|
|
build: .
|
|
depends_on:
|
|
postgres:
|
|
condition: service_healthy
|
|
# All optional tuning (DNS_SERVERS, PROBE_*, UI_USER, ...) comes from .env.
|
|
# Leave DNS_SERVERS unset to use the curated + community resolver list.
|
|
env_file:
|
|
- .env
|
|
environment:
|
|
METRICS_ADDR: ":9090"
|
|
# Loopback by default. Set UI_BIND=0.0.0.0 in .env to reach the UI/metrics
|
|
# from another host (there is no auth unless UI_USER/UI_PASS is set).
|
|
ports:
|
|
- "${UI_BIND:-127.0.0.1}:9090:9090"
|
|
# No application volume: the container is stateless apart from PostgreSQL.
|
|
read_only: true
|
|
tmpfs:
|
|
- /tmp:size=16m,noexec,nosuid
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
cap_drop:
|
|
- ALL
|
|
mem_limit: 1g
|
|
cpus: 2.0
|
|
pids_limit: 512
|
|
logging:
|
|
driver: json-file
|
|
options: { max-size: "10m", max-file: "3" }
|
|
restart: unless-stopped
|
|
|
|
volumes:
|
|
pgdata:
|