tajniak81andClaude Opus 5.5
a47e15cc1c
CI / Test (ubuntu-latest) (push) Canceled after 0s
CI / Test (windows-latest) (push) Canceled after 0s
CI / Storage tests on PostgreSQL (push) Canceled after 0s
CI / Complement (federation off) (push) Canceled after 0s
CI / golangci-lint (push) Canceled after 0s
CI / Smoke test the binary (push) Canceled after 0s
CI / Admin panel (push) Canceled after 0s
CI / Web client (push) Canceled after 0s
CI / Desktop client (ubuntu-24.04) (push) Canceled after 0s
CI / Desktop client (windows-latest) (push) Canceled after 0s
The pocketbase driver no longer embeds PocketBase: Warp keeps its data as PocketBase collections on a server of its own and reaches it only through the REST API, the way the postgres driver reaches PostgreSQL. database.connection_string is the server's URL, and Warp signs in as the superuser in WARP_PB_SUPERUSER_EMAIL / WARP_PB_SUPERUSER_PASSWORD (or a WARP_PB_SUPERUSER_FILE of the two). Every SQL table is a superuser-only collection of the same name and columns, created by warp migrate. Reads go through PocketBase's SQL endpoint with the SQL drivers' queries, via a read-only database/sql driver that inlines arguments, moves long ones into warp_params and pages past 1000 rows. Writes are record operations in batch requests under one write lock in the Warp process. Media is a protected file field in warp_media, local or in the S3 bucket Warp writes into PocketBase's settings. Search matches word prefixes with LIKE. The storage tests run against an in-process PocketBase and pass as on SQLite. Docker: the PocketBase stacks get a pocketbase service running tajniak81/pocketbase-docker-root (WARP_PB_IMAGE), with a pb-data volume and its admin UI on loopback; the AIO images run that PocketBase binary as a process beside the homeserver, making up a superuser when none is set. The .env examples, READMEs, docs and warp.yaml.example follow. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
117 lines
4.3 KiB
Docker
117 lines
4.3 KiB
Docker
# warp-aio-pocketbase — the homeserver, the admin panel and the web client
|
|
# in one image, on PocketBase. PocketBase runs as a process of its own in
|
|
# the container, on port 8070, with its pb_data — the database, and media
|
|
# in its storage — in /data/pb_data. Set WARP_PB_S3_* to keep media in an
|
|
# S3 bucket instead.
|
|
#
|
|
# Build from the repository root:
|
|
#
|
|
# docker build -t warp-aio-pocketbase -f Docker-AIO/Dockerfile.PocketBase .
|
|
# docker run -p 8008:8008 -p 8009:8009 -p 8080:8080 -v warp-data:/data \
|
|
# -e WARP_SERVER_NAME=warp.example warp-aio-pocketbase
|
|
#
|
|
# The database, signing key and media live in /data; mount a volume on it.
|
|
|
|
# PocketBase itself: the binary of this image, PocketBase 0.40 or later.
|
|
ARG PB_IMAGE=tajniak81/pocketbase-docker-root:latest
|
|
FROM ${PB_IMAGE} AS pocketbase
|
|
|
|
FROM node:22-alpine AS web
|
|
|
|
WORKDIR /src
|
|
RUN corepack enable
|
|
|
|
# Lockfile and manifests first, so the package store survives source changes.
|
|
COPY package.json pnpm-workspace.yaml pnpm-lock.yaml ./
|
|
COPY apps/ui/package.json ./apps/ui/
|
|
COPY apps/admin/package.json ./apps/admin/
|
|
COPY apps/web/package.json ./apps/web/
|
|
RUN pnpm install --frozen-lockfile --filter @warp/admin... --filter @warp/web...
|
|
|
|
COPY apps/ui ./apps/ui
|
|
COPY apps/admin ./apps/admin
|
|
COPY apps/web ./apps/web
|
|
RUN pnpm --filter @warp/admin build && pnpm --filter @warp/web build
|
|
|
|
|
|
FROM golang:1.26-alpine AS build
|
|
|
|
ARG VERSION=0.0.0-dev
|
|
ARG COMMIT=unknown
|
|
ARG BUILD_DATE=unknown
|
|
ENV CGO_ENABLED=0
|
|
|
|
WORKDIR /src
|
|
|
|
# The homeserver. Dependencies first, so the module cache survives source
|
|
# changes.
|
|
COPY server/go.mod server/go.sum ./server/
|
|
RUN cd server && go mod download
|
|
COPY server ./server
|
|
RUN cd server && go build -trimpath \
|
|
-ldflags "-s -w \
|
|
-X github.com/dariuszjaniak/warp/server/internal/buildinfo.Version=${VERSION} \
|
|
-X github.com/dariuszjaniak/warp/server/internal/buildinfo.Commit=${COMMIT} \
|
|
-X github.com/dariuszjaniak/warp/server/internal/buildinfo.BuildDate=${BUILD_DATE}" \
|
|
-o /out/warp ./cmd/warp
|
|
|
|
# The admin panel and the web client, each with its frontend embedded.
|
|
COPY apps/admin/go.mod ./apps/admin/
|
|
COPY apps/admin/cmd ./apps/admin/cmd
|
|
COPY apps/admin/internal ./apps/admin/internal
|
|
COPY --from=web /src/apps/admin/internal/panel/build/dist ./apps/admin/internal/panel/build/dist
|
|
RUN cd apps/admin && GOWORK=off go build -trimpath -ldflags "-s -w -X main.version=${VERSION}" \
|
|
-o /out/warp-admin ./cmd/warp-admin
|
|
|
|
COPY apps/web/go.mod ./apps/web/
|
|
COPY apps/web/cmd ./apps/web/cmd
|
|
COPY apps/web/host ./apps/web/host
|
|
COPY apps/web/client/client.go ./apps/web/client/
|
|
COPY --from=web /src/apps/web/client/build/dist ./apps/web/client/build/dist
|
|
RUN cd apps/web && GOWORK=off go build -trimpath -ldflags "-s -w -X main.version=${VERSION}" \
|
|
-o /out/warp-web ./cmd/warp-web
|
|
|
|
|
|
FROM alpine:3.21
|
|
|
|
# tini is PID 1 so signals reach the entrypoint and zombies are reaped.
|
|
RUN apk add --no-cache ca-certificates tzdata curl tini && \
|
|
adduser -D -u 10001 -h /data warp
|
|
|
|
COPY --from=build /out/warp /out/warp-admin /out/warp-web /usr/local/bin/
|
|
# PocketBase, from the same image the separate-container stacks run.
|
|
COPY --from=pocketbase /pb/pocketbase /usr/local/bin/pocketbase
|
|
COPY warp.yaml.example /etc/warp/warp.yaml.example
|
|
COPY --chmod=755 Docker-AIO/entrypoint.sh /usr/local/bin/warp-aio
|
|
|
|
# Database, signing key and media live here; mount a volume on it.
|
|
WORKDIR /data
|
|
RUN chown warp:warp /data
|
|
USER warp
|
|
|
|
ENV WARP_LISTEN_ADDRESS=":8008" \
|
|
WARP_PRIVATE_KEY="/data/signing.key" \
|
|
WARP_DB_DRIVER="pocketbase" \
|
|
WARP_DB_CONNECTION_STRING="http://127.0.0.1:8070" \
|
|
WARP_LOG_FORMAT="json" \
|
|
WARP_ADMIN_LISTEN=":8009" \
|
|
WARP_ADMIN_HOMESERVER="http://127.0.0.1:8008" \
|
|
WARP_ADMIN_LOG_FORMAT="json" \
|
|
WARP_WEB_LISTEN=":8080" \
|
|
WARP_WEB_HOMESERVER="http://127.0.0.1:8008" \
|
|
WARP_WEB_LOG_FORMAT="json" \
|
|
WARP_AIO_ADMIN="true" \
|
|
WARP_AIO_WEB="true" \
|
|
WARP_AIO_POCKETBASE="true" \
|
|
WARP_PB_SUPERUSER_FILE="/data/pocketbase-superuser.env" \
|
|
WARP_AIO_EMBEDDED_POSTGRES="false"
|
|
|
|
EXPOSE 8008 8009 8080 8070
|
|
|
|
HEALTHCHECK --interval=30s --timeout=5s --start-period=20s --retries=3 \
|
|
CMD curl -fsS http://127.0.0.1:8008/healthz && \
|
|
{ [ "$WARP_AIO_ADMIN" != true ] || curl -fsS http://127.0.0.1:8009/healthz; } && \
|
|
{ [ "$WARP_AIO_WEB" != true ] || curl -fsS http://127.0.0.1:8080/healthz; } || exit 1
|
|
|
|
ENTRYPOINT ["/sbin/tini", "--", "warp-aio"]
|