mirror of
https://github.com/Dokploy/templates.git
synced 2026-07-16 03:15:23 +02:00
25563213f2
The template shipped rybbit v1.5.1, which is no longer supported and is vulnerable to known React2Shell exploits (see #659). Update to the latest stable release v2.7.0 and align the stack with the upstream docker-compose: - Pin ghcr.io/rybbit-io/rybbit-backend and rybbit-client to v2.7.0 - Add the redis service now required by the backend (session tracking and BullMQ queues), with password auth, AOF persistence and noeviction policy per upstream - Drop the DOMAIN_NAME env var (only used by the upstream Caddy webserver, which Dokploy replaces with Traefik) - Add DISABLE_TELEMETRY env and generate BETTER_AUTH_SECRET as base64 Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
135 lines
3.7 KiB
YAML
135 lines
3.7 KiB
YAML
# https://www.rybbit.io/docs/self-hosting-advanced
|
|
|
|
# NOTE: there are two sample HTTP traefik domain entries created:
|
|
# - rybbit_backend (port 3001, path /api),
|
|
# - rybbit_client (port 3002, path /)
|
|
#
|
|
# You should treat these as placeholders - Rybbit only supports HTTPS.
|
|
#
|
|
# You should also update the `BASE_URL` environment variable when
|
|
# updating the domain entries with your custom domain.
|
|
|
|
services:
|
|
rybbit_clickhouse:
|
|
image: clickhouse/clickhouse-server:25.5
|
|
volumes:
|
|
- clickhouse_data:/var/lib/clickhouse
|
|
- ../files/clickhouse_config:/etc/clickhouse-server/config.d
|
|
environment:
|
|
- CLICKHOUSE_DB=${CLICKHOUSE_DB}
|
|
- CLICKHOUSE_USER=${CLICKHOUSE_USER}
|
|
- CLICKHOUSE_PASSWORD=${CLICKHOUSE_PASSWORD}
|
|
healthcheck:
|
|
test:
|
|
[
|
|
"CMD",
|
|
"wget",
|
|
"--no-verbose",
|
|
"--tries=1",
|
|
"--spider",
|
|
"http://localhost:8123/ping",
|
|
]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 10s
|
|
restart: unless-stopped
|
|
|
|
rybbit_postgres:
|
|
image: postgres:17.5
|
|
environment:
|
|
- POSTGRES_DB=${POSTGRES_DB}
|
|
- POSTGRES_USER=${POSTGRES_USER}
|
|
- POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
|
|
volumes:
|
|
- postgres_data:/var/lib/postgresql/data
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U $${POSTGRES_USER} -d $${POSTGRES_DB}"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
restart: unless-stopped
|
|
|
|
rybbit_redis:
|
|
image: redis:7-alpine
|
|
volumes:
|
|
- redis_data:/data
|
|
# Backs session tracking and the BullMQ queues. noeviction is required by
|
|
# BullMQ (evicting job keys corrupts queues); AOF (everysec) keeps queues
|
|
# durable across restarts.
|
|
command:
|
|
- redis-server
|
|
- --requirepass
|
|
- ${REDIS_PASSWORD}
|
|
- --appendonly
|
|
- "yes"
|
|
- --appendfsync
|
|
- everysec
|
|
- --maxmemory-policy
|
|
- noeviction
|
|
healthcheck:
|
|
test:
|
|
[
|
|
"CMD",
|
|
"redis-cli",
|
|
"-a",
|
|
"${REDIS_PASSWORD}",
|
|
"--no-auth-warning",
|
|
"ping",
|
|
]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 5s
|
|
restart: unless-stopped
|
|
|
|
rybbit_backend:
|
|
image: ghcr.io/rybbit-io/rybbit-backend:v2.7.0
|
|
environment:
|
|
- NODE_ENV=production
|
|
- CLICKHOUSE_HOST=http://rybbit_clickhouse:8123
|
|
- CLICKHOUSE_DB=${CLICKHOUSE_DB}
|
|
- CLICKHOUSE_USER=${CLICKHOUSE_USER}
|
|
- CLICKHOUSE_PASSWORD=${CLICKHOUSE_PASSWORD}
|
|
- POSTGRES_HOST=rybbit_postgres
|
|
- POSTGRES_PORT=5432
|
|
- POSTGRES_DB=${POSTGRES_DB}
|
|
- POSTGRES_USER=${POSTGRES_USER}
|
|
- POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
|
|
- REDIS_HOST=rybbit_redis
|
|
- REDIS_PORT=6379
|
|
- REDIS_PASSWORD=${REDIS_PASSWORD}
|
|
- BETTER_AUTH_SECRET=${BETTER_AUTH_SECRET}
|
|
- BASE_URL=${BASE_URL}
|
|
- DISABLE_SIGNUP=${DISABLE_SIGNUP}
|
|
- DISABLE_TELEMETRY=${DISABLE_TELEMETRY}
|
|
depends_on:
|
|
rybbit_clickhouse:
|
|
condition: service_healthy
|
|
rybbit_postgres:
|
|
condition: service_started
|
|
rybbit_redis:
|
|
condition: service_healthy
|
|
healthcheck:
|
|
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://127.0.0.1:3001/api/health"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 10s
|
|
restart: unless-stopped
|
|
|
|
rybbit_client:
|
|
image: ghcr.io/rybbit-io/rybbit-client:v2.7.0
|
|
environment:
|
|
- NODE_ENV=production
|
|
- NEXT_PUBLIC_BACKEND_URL=${BASE_URL}
|
|
- NEXT_PUBLIC_DISABLE_SIGNUP=${DISABLE_SIGNUP}
|
|
depends_on:
|
|
- rybbit_backend
|
|
restart: unless-stopped
|
|
|
|
volumes:
|
|
clickhouse_data:
|
|
postgres_data:
|
|
redis_data:
|