mirror of
https://github.com/diegosouzapw/OmniRoute.git
synced 2026-10-19 13:30:37 +00:00
478e683643
Batch-merged with the owner's 2026-10-10 hold/backlog PR wave (/merge-batch). Validated in one combined tree of 43 boarded PRs on top of release/v3.8.52 (048d9e2f): typecheck:core, check:open-sse-typecheck, check-deps, check-test-discovery, changelog-integrity, complexity + cognitive ratchets, check:docs-all, i18n UI coverage, ESLint on the 142 changed source files - green; 58 changed node:test files 584/586 (2 timing flakes in video-retention-http-12150 that pass in isolation) and 3 vitest files 116/116. File-size overruns in that tree belong only to PRs held out of this wave (#16110, #16112, #16140, #15790). Warning: base-red inherited: #15306.
118 lines
4.9 KiB
YAML
118 lines
4.9 KiB
YAML
# ──────────────────────────────────────────────────────────────────────
|
|
# OmniRoute — Docker Compose (Production Snapshot)
|
|
# ──────────────────────────────────────────────────────────────────────
|
|
#
|
|
# Isolated production instance running on port 20130.
|
|
# Keeps the app running while you continue developing locally.
|
|
#
|
|
# Usage:
|
|
# docker compose -f docker-compose.prod.yml up -d --build
|
|
# docker compose -f docker-compose.prod.yml down
|
|
# docker compose -f docker-compose.prod.yml logs -f
|
|
#
|
|
# Image flavors (two Dockerfile stages):
|
|
# runner-base (default / omniroute:prod)
|
|
# Lean image — no Playwright/Chromium. Suitable for all providers
|
|
# except web-cookie ones (gemini-web, claude-web, claude-turnstile).
|
|
#
|
|
# runner-web (omniroute:prod-web) — opt-in, ~300 MB extra
|
|
# Includes Playwright + Chromium system libs. Required for web-cookie
|
|
# providers. To use this flavor, override the build target:
|
|
#
|
|
# omniroute-prod:
|
|
# build:
|
|
# context: .
|
|
# target: runner-web
|
|
# image: omniroute:prod-web
|
|
# ──────────────────────────────────────────────────────────────────────
|
|
|
|
services:
|
|
# ── Redis (Rate Limiter Backend) ──────────────────────────────────
|
|
redis:
|
|
image: redis:8.6.5-alpine
|
|
container_name: omniroute-redis-prod
|
|
restart: unless-stopped
|
|
volumes:
|
|
- redis-prod-data:/data
|
|
command: redis-server --save 60 1 --loglevel warning
|
|
healthcheck:
|
|
test: ["CMD", "redis-cli", "ping"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 3
|
|
|
|
omniroute-prod:
|
|
container_name: omniroute-prod
|
|
depends_on:
|
|
redis:
|
|
condition: service_healthy
|
|
chatgpt-web-codex-browser:
|
|
condition: service_started
|
|
build:
|
|
context: .
|
|
target: runner-cli
|
|
args:
|
|
OMNIROUTE_BASE_PATH: ${OMNIROUTE_BASE_PATH:-}
|
|
image: omniroute:prod
|
|
restart: unless-stopped
|
|
stop_grace_period: 40s
|
|
env_file: .env
|
|
environment:
|
|
- NODE_ENV=production
|
|
- PORT=${PORT:-20128}
|
|
- DASHBOARD_PORT=${DASHBOARD_PORT:-${PORT:-20128}}
|
|
- API_PORT=${API_PORT:-20129}
|
|
- LIVE_WS_PORT=${LIVE_WS_PORT:-20132}
|
|
- LIVE_WS_HOST=${LIVE_WS_HOST:-127.0.0.1}
|
|
- LIVE_WS_ALLOWED_ORIGINS=${LIVE_WS_ALLOWED_ORIGINS:-http://localhost:${PROD_DASHBOARD_PORT:-20130},http://127.0.0.1:${PROD_DASHBOARD_PORT:-20130}}
|
|
- API_HOST=${API_HOST:-127.0.0.1}
|
|
# HOSTNAME intentionally not hardcoded to 0.0.0.0 (#12568) — let the
|
|
# app's own loopback-first default apply unless the operator sets it.
|
|
- DATA_DIR=/app/data
|
|
- OMNIROUTE_BASE_PATH=${OMNIROUTE_BASE_PATH:-}
|
|
- CHATGPT_WEB_CODEX_CDP_URL=http://chatgpt-web-codex-browser:9223
|
|
- CDP_PROXY_TOKEN=${CDP_PROXY_TOKEN:-}
|
|
- CDP_PROXY_TOKEN_FILE=/cdp-token/token
|
|
ports:
|
|
# Loopback-only by default (#12568) — see docker-compose.yml's
|
|
# APP_BIND_HOST comment for the rationale. Override for a LAN/WAN prod
|
|
# deployment only once REQUIRE_API_KEY=true or a reverse proxy in front
|
|
# of this instance is confirmed to enforce its own auth.
|
|
- "${APP_BIND_HOST:-127.0.0.1}:${PROD_DASHBOARD_PORT:-20130}:${DASHBOARD_PORT:-${PORT:-20128}}"
|
|
- "${APP_BIND_HOST:-127.0.0.1}:${PROD_API_PORT:-20131}:${API_PORT:-20129}"
|
|
- "${APP_BIND_HOST:-127.0.0.1}:${PROD_LIVE_WS_PORT:-20132}:${LIVE_WS_PORT:-20132}"
|
|
volumes:
|
|
- omniroute-prod-data:/app/data
|
|
- chatgpt-web-codex-cdp-token-prod:/cdp-token:ro
|
|
healthcheck:
|
|
test: ["CMD", "node", "healthcheck.mjs"]
|
|
interval: 30s
|
|
timeout: 5s
|
|
retries: 3
|
|
start_period: 15s
|
|
|
|
chatgpt-web-codex-browser:
|
|
build:
|
|
context: .
|
|
dockerfile: docker/chatgpt-web-codex-browser/Dockerfile
|
|
image: omniroute:chatgpt-web-codex-browser
|
|
restart: unless-stopped
|
|
shm_size: "2gb"
|
|
environment:
|
|
# #14486: fail-closed. Empty CDP_PROXY_TOKEN => the proxy generates a
|
|
# secret into the shared cdp-token volume that omniroute-prod reads.
|
|
- CDP_PROXY_TOKEN=${CDP_PROXY_TOKEN:-}
|
|
- CDP_PROXY_TOKEN_FILE=/cdp-token/token
|
|
volumes:
|
|
- chatgpt-web-codex-browser-prod-data:/browser-profile
|
|
- chatgpt-web-codex-cdp-token-prod:/cdp-token
|
|
|
|
volumes:
|
|
chatgpt-web-codex-cdp-token-prod:
|
|
name: omniroute-chatgpt-web-codex-cdp-token-prod
|
|
chatgpt-web-codex-browser-prod-data:
|
|
name: omniroute-chatgpt-web-codex-browser-prod-data
|
|
omniroute-prod-data:
|
|
name: omniroute-prod-data
|
|
redis-prod-data:
|
|
name: redis-prod-data
|