94 lines
3.6 KiB
YAML
94 lines
3.6 KiB
YAML
# Builds a minimal debian image that, on every container start, pulls the
|
|
# hbbs/hbbr/utils .deb from a Gitea Actions artifact and installs it before
|
|
# launching the binary. Both services share the same image; only the command
|
|
# differs.
|
|
#
|
|
# The .deb is fetched at runtime (not build time), so `docker compose up`
|
|
# always picks up the newest successful run on $GITEA_BRANCH. To pin a
|
|
# specific zip and skip auto-discovery, set ARTIFACT_URL in your shell or
|
|
# .env, e.g.:
|
|
# ARTIFACT_URL=https://gitea.cstudio.ch/mike/rustdesk-server/actions/runs/173/artifacts/rustdesk-server-linux-amd64-1e961cdd929f7af97148b76d9de79998a89402a3 \
|
|
# docker compose up -d
|
|
#
|
|
|
|
networks:
|
|
rustdesk-net:
|
|
external: false
|
|
|
|
# The image only needs to bundle curl/jq/unzip/tini/dpkg + the fetch scripts —
|
|
# no build args required. The actual .deb download happens at container start
|
|
# (see docker/entrypoint.sh), driven by the env vars in x-rustdesk-env below.
|
|
x-rustdesk-build: &rustdesk-build
|
|
context: ./docker
|
|
dockerfile: Dockerfile.deb
|
|
|
|
# Runtime env. Two groups:
|
|
# 1) Artifact-fetch config consumed by entrypoint.sh on every container
|
|
# start — set ARTIFACT_URL to pin a specific zip, otherwise the script
|
|
# picks the newest successful run on $GITEA_BRANCH.
|
|
# 2) hbbs/hbbr knobs. Most settings (relay, bootstrap admin, key, http
|
|
# port) are passed via CLI flags below — the binary's env-var
|
|
# convention transforms `--foo-bar` into `FOO-BAR` (literal dashes,
|
|
# uppercase), which is awkward in YAML, so flags are clearer.
|
|
x-rustdesk-env: &rustdesk-env
|
|
GITEA_URL: "${GITEA_URL:-https://gitea.cstudio.ch}"
|
|
GITEA_OWNER: "${GITEA_OWNER:-mike}"
|
|
GITEA_REPO: "${GITEA_REPO:-rustdesk-server}"
|
|
GITEA_BRANCH: "${GITEA_BRANCH:-pro-features}"
|
|
ARTIFACT_URL: "${ARTIFACT_URL:-}"
|
|
RUST_LOG: "${RUST_LOG:-info}"
|
|
# Force relay for all sessions even on LAN. Uncomment to enable.
|
|
# ALWAYS_USE_RELAY: "Y"
|
|
# Override DB path. Default: ./db_v2.sqlite3 in WORKDIR
|
|
# (= /var/lib/rustdesk-server/db_v2.sqlite3 in this image).
|
|
# DB_URL: "/var/lib/rustdesk-server/db_v2.sqlite3"
|
|
|
|
services:
|
|
hbbs:
|
|
container_name: hbbs
|
|
build: *rustdesk-build
|
|
image: rustdesk-server-cst:latest
|
|
platform: linux/amd64
|
|
command:
|
|
- hbbs
|
|
- --bootstrap-admin-username=${RUSTDESK_BOOTSTRAP_ADMIN_USERNAME:-admin}
|
|
- --bootstrap-admin-password=${RUSTDESK_BOOTSTRAP_ADMIN_PASSWORD:-changeme}
|
|
# - --key=- # "-" auto-generates a key; "_" forces encrypted-only with no explicit key
|
|
# - --http-port=21114 # admin HTTP API/UI port; 0 disables
|
|
# When the admin UI shows a device's unattended password.
|
|
# logged-out (default) = only when nobody is logged in; always = also while a user is logged in.
|
|
- --unattended-pwd-visibility=${RUSTDESK_UNATTENDED_PWD_VISIBILITY:-logged-out}
|
|
environment: *rustdesk-env
|
|
ports:
|
|
- 21114:21114
|
|
- 21115:21115
|
|
- 21116:21116
|
|
- 21116:21116/udp
|
|
- 21118:21118
|
|
volumes:
|
|
- ./data:/var/lib/rustdesk-server
|
|
networks:
|
|
- rustdesk-net
|
|
depends_on:
|
|
- hbbr
|
|
restart: unless-stopped
|
|
|
|
hbbr:
|
|
container_name: hbbr
|
|
# Same build + image tag as hbbs — compose builds once and both reuse it.
|
|
build: *rustdesk-build
|
|
image: rustdesk-server-cst:latest
|
|
platform: linux/amd64
|
|
command:
|
|
- hbbr
|
|
# - --key=- # match the key set on hbbs (if any)
|
|
environment: *rustdesk-env
|
|
ports:
|
|
- 21117:21117
|
|
- 21119:21119
|
|
volumes:
|
|
- ./data:/var/lib/rustdesk-server
|
|
networks:
|
|
- rustdesk-net
|
|
restart: unless-stopped
|