tajniak81andClaude Opus 5
ee4ac441be
The project has no public installs, so there is nothing to migrate from. MigrateLegacyFile, the file-backed Store it read through, PLUGINS_FILE and the legacy path threaded through the Server all go. What is left is one store, PocketBase, and a plugins package that touches no filesystem at all. That was the last thing keeping api_data alive, so the volume goes too. All four compose files now declare exactly one volume, pb_data, and the standalone API Server compose declares none - it talks to an external PocketBase and has nothing of its own to keep. Backing up the stack is backing up one path again. Both images get simpler for it. The API Server image loses VOLUME /data and the su-exec entrypoint that existed only to fix a mounted volume's ownership, so it goes back to a plain USER app; its working directory is now /app and holds nothing. The AIO image loses its second volume and chowns only /pb/pb_data. One consequence worth stating plainly, because it is a small regression rather than a no-op. The panel's Settings -> PocketBase and Settings -> Web App screens write .env in the working directory, which is now ephemeral. In the multi-container stack that changes nothing: compose sets all five of those keys as container environment, and loadDotEnv only applies a key that is not already set, so the file could never win a restart there anyway. In the AIO image it did win for POCKETBASE_ADMIN_EMAIL/_PASSWORD, which are not in that container's environment - so a service account fixed from the panel now lasts only until the container is recreated. Both READMEs say so. Moving those two screens into the app_settings singleton would close it properly; the PocketBase URL and credentials cannot follow, since they are how the database is reached in the first place. go build, go vet and go test ./... pass; the compose files parse and each resolves to a single pb_data volume. Not verified: no Docker CLI here, so neither image was built. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
46 lines
2.2 KiB
YAML
46 lines
2.2 KiB
YAML
services:
|
|
api-server:
|
|
build:
|
|
context: .
|
|
dockerfile: Dockerfile
|
|
image: drivervault-api
|
|
container_name: drivervault-api
|
|
restart: unless-stopped
|
|
ports:
|
|
- "${API_PORT:-8080}:8080"
|
|
environment:
|
|
# Container always listens on 8080; map the host port above.
|
|
API_ADDR: ":8080"
|
|
# External PocketBase instance (all DB access goes through this server).
|
|
POCKETBASE_URL: "${PB_URL:-http://10.2.1.10:8027}"
|
|
# Superuser service account. Leave unset and the server still starts — a
|
|
# superadmin can configure it from the panel; management endpoints 503 until then.
|
|
POCKETBASE_ADMIN_EMAIL: "${PB_ADMIN_EMAIL}"
|
|
POCKETBASE_ADMIN_PASSWORD: "${PB_ADMIN_PASSWORD}"
|
|
# Probed by the panel status page. Point it at wherever the Web App runs
|
|
# as seen from THIS container — the default (localhost:8090) is this
|
|
# container itself, so it must be set for the status page to be accurate.
|
|
WEBAPP_URL: "${WEBAPP_URL:-http://host.docker.internal:8090}"
|
|
# Browser origins allowed by CORS (native apps are exempt). Point this at
|
|
# the Web App origin; add http://localhost:5173 when running Vite in dev.
|
|
CORS_ALLOW_ORIGINS: "${CORS_ALLOW_ORIGINS:-http://localhost:8090}"
|
|
AUTH_USERS_COLLECTION: "${AUTH_USERS_COLLECTION:-users}"
|
|
# OCPP charger control (Anker Solix). Chargers are rejected unless they
|
|
# connect over TLS; set false only when terminating TLS elsewhere or for
|
|
# local dev on a trusted network. OCPP_PUBLIC_URL overrides the ws(s)://
|
|
# base derived from request headers (set it when behind a reverse proxy).
|
|
OCPP_REQUIRE_TLS: "${OCPP_REQUIRE_TLS:-true}"
|
|
OCPP_PUBLIC_URL: "${OCPP_PUBLIC_URL:-}"
|
|
extra_hosts:
|
|
# Makes host.docker.internal resolve on Linux too (Docker Desktop provides
|
|
# it already), so the WEBAPP_URL default above can reach a Web App running
|
|
# on the host rather than in this compose file.
|
|
- "host.docker.internal:host-gateway"
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "wget -qO- http://127.0.0.1:8080/healthz || exit 1"]
|
|
interval: 10s
|
|
timeout: 3s
|
|
retries: 12
|
|
start_period: 20s
|
|
|