mirror of
https://github.com/netbirdio/netbird.git
synced 2026-04-16 07:16:38 +00:00
86a66c6202
Right now Signal Service runs the Let'sEncrypt manager on port 80 and a gRPC server on port 10000. There are two separate listeners. This PR combines these listeners into one with a cmux lib. The gRPC server runs on either 443 with TLS or 80 without TLS. Let's Encrypt manager always runs on port 80.
62 lines
1.9 KiB
Cheetah
62 lines
1.9 KiB
Cheetah
version: "3"
|
|
services:
|
|
#UI dashboard
|
|
dashboard:
|
|
image: wiretrustee/dashboard:main
|
|
restart: unless-stopped
|
|
ports:
|
|
- 80:80
|
|
- 443:443
|
|
environment:
|
|
- AUTH0_DOMAIN=$NETBIRD_AUTH0_DOMAIN
|
|
- AUTH0_CLIENT_ID=$NETBIRD_AUTH0_CLIENT_ID
|
|
- AUTH0_AUDIENCE=$NETBIRD_AUTH0_AUDIENCE
|
|
- NETBIRD_MGMT_API_ENDPOINT=$NETBIRD_MGMT_API_ENDPOINT
|
|
- NETBIRD_MGMT_GRPC_API_ENDPOINT=$NETBIRD_MGMT_GRPC_API_ENDPOINT
|
|
- NGINX_SSL_PORT=443
|
|
- LETSENCRYPT_DOMAIN=$NETBIRD_DOMAIN
|
|
- LETSENCRYPT_EMAIL=$NETBIRD_LETSENCRYPT_EMAIL
|
|
volumes:
|
|
- $LETSENCRYPT_VOLUMENAME:/etc/letsencrypt/
|
|
# Signal
|
|
signal:
|
|
image: netbirdio/signal:latest
|
|
restart: unless-stopped
|
|
volumes:
|
|
- $SIGNAL_VOLUMENAME:/var/lib/netbird
|
|
ports:
|
|
- 10000:80
|
|
# # port and command for Let's Encrypt validation
|
|
# - 443:443
|
|
# command: ["--letsencrypt-domain", "$NETBIRD_DOMAIN", "--log-file", "console"]
|
|
# Management
|
|
management:
|
|
image: netbirdio/management:latest
|
|
restart: unless-stopped
|
|
depends_on:
|
|
- dashboard
|
|
volumes:
|
|
- $MGMT_VOLUMENAME:/var/lib/netbird
|
|
- $LETSENCRYPT_VOLUMENAME:/etc/letsencrypt:ro
|
|
- ./management.json:/etc/netbird/management.json
|
|
ports:
|
|
- $NETBIRD_MGMT_GRPC_API_PORT:33073 #gRPC port
|
|
- $NETBIRD_MGMT_API_PORT:33071 #API port
|
|
# # port and command for Let's Encrypt validation without dashboard container
|
|
# - 443:443
|
|
# command: ["--letsencrypt-domain", "$NETBIRD_DOMAIN", "--log-file", "console"]
|
|
# Coturn
|
|
coturn:
|
|
image: coturn/coturn
|
|
restart: unless-stopped
|
|
domainname: $NETBIRD_DOMAIN
|
|
volumes:
|
|
- ./turnserver.conf:/etc/turnserver.conf:ro
|
|
# - ./privkey.pem:/etc/coturn/private/privkey.pem:ro
|
|
# - ./cert.pem:/etc/coturn/certs/cert.pem:ro
|
|
network_mode: host
|
|
volumes:
|
|
$MGMT_VOLUMENAME:
|
|
$SIGNAL_VOLUMENAME:
|
|
$LETSENCRYPT_VOLUMENAME:
|