Shadowbroker/docker-compose.fleet-dev.yml at main · BigBodyCobain/Shadowbroker · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
# Maintainer dev-fleet overlay (opt-in). Builds from local source and pins the
# sb-testnet fleet settings, including PRIVACY_CORE_DEV_OVERRIDE, which skips
# privacy-core artifact attestation. Not for regular installs.
#
# This used to be docker-compose.override.yml, which `docker compose` loads
# automatically, so every fresh clone silently got these dev settings. Load it
# explicitly instead:
#
#   docker compose -f docker-compose.yml -f docker-compose.fleet-dev.yml up -d --build
#
# or make it sticky for your checkout by putting this in the repo-root .env
# (use ";" instead of ":" on Windows):
#
#   COMPOSE_FILE=docker-compose.yml:docker-compose.fleet-dev.yml
#
# A personal docker-compose.override.yml is still auto-loaded, and it's
# gitignored so it never gets committed.
services:
  backend:
    build:
      context: .
      dockerfile: ./backend/Dockerfile
    environment:
      # Private Infonet swarm: only the seed onion is required in config.
      # Other participants (e.g. Pete) are discovered via signed manifest pull.
      MESH_ARTI_ENABLED: "true"
      MESH_ARTI_SOCKS_PORT: "9050"
      MESH_SYNC_TIMEOUT_S: "45"
      MESH_RELAY_PUSH_TIMEOUT_S: "45"
      MESH_SYNC_MAX_PEERS_PER_CYCLE: "5"
      MESH_INFONET_ALLOW_CLEARNET_SYNC: "false"
      MESH_PUBLIC_PEER_URL: ""
      # Empty means: use the sb-testnet fleet seed list from code/config.
      # Operators can rotate/add public fleet seeds with MESH_FLEET_SEED_PEERS.
      MESH_BOOTSTRAP_SEED_PEERS: ""
      MESH_FLEET_SEED_PEERS: "${MESH_FLEET_SEED_PEERS:-}"
      MESH_RELAY_PEERS: ""
      MESH_DEFAULT_SYNC_PEERS: ""
      MESH_BOOTSTRAP_SIGNER_PUBLIC_KEY: "ul1d0kj/ODPIp0OhHzX8eLAVXzJ3CVvzW1vn2IC6q3I="
      MESH_SWARM_MANIFEST_PULL_INTERVAL_S: "300"
      # Fleet testnet HMAC — overrides stale per-node .env so announce/push auth matches seed.
      MESH_PEER_PUSH_SECRET: "b7GoqsvoUD9MV7tyt0ZOzMptLA84QG6KCfaV9nDqz5Y"
      # Dev fleet: allow wormhole child agent to start without release attestation.
      PRIVACY_CORE_DEV_OVERRIDE: "true"

  frontend:
    build:
      context: ./frontend