docker-compose.yaml

version: "3.6"
services:
  reverse-proxy:
    image: traefik:v2.11
    expose:
      - "8080"
    ports:
      - "80:80"
    command:
      - --api.insecure=true
      - --providers.docker
      - --entryPoints.web.address=:80
      - --providers.docker.exposedbydefault=false
      #- --log.level=DEBUG
    labels:
      - "traefik.enable=true"
      - "traefik.port=8080"
      - "traefik.http.routers.traefik.rule=Host(`traefik.workadventure.localhost`)"
      - "traefik.http.routers.traefik.service=api@internal"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    networks:
      default:
        aliases:
          - "front.workadventure.localhost"
          - "play.workadventure.localhost"
          - "room-api.workadventure.localhost"
          - "maps.workadventure.localhost"
          - "oidc.workadventure.localhost"
          - "map-storage.workadventure.localhost"
          - "xmpp.workadventure.localhost"
          - "matrix.workadventure.localhost"
          - "pusher.workadventure.localhost"
  play:
    image: thecodingmachine/nodejs:v2-20-bullseye
    command: npm run dev
    # Uncomment to run the production build in dev (along STARTUP_COMMAND_4 and NODE_OPTIONS)
    #command: npm run start
    working_dir: /usr/src/app/play
    volumes:
      - .:/usr/src/app
    tmpfs: /tmp
    ports:
      - "9231:9229"
      - "9235:9235"
    environment:
      # On startup, we ask the messages container to regenerate the files.
      # Note: we need to use this "messages" container because of ARM64 processors that are not supported with protoc (used in "messages" container)
      STARTUP_COMMAND_1: ../wait-proto.sh
      STARTUP_COMMAND_2: ../npm-install.sh
      STARTUP_COMMAND_3: npm run typesafe-i18n
      # Uncomment to run the production build in dev
      #STARTUP_COMMAND_4: npm run build
      #STARTUP_COMMAND_5: npm run build-iframe-api
      #NODE_OPTIONS: --max-old-space-size=16384
      DEBUG: "socket,space"
      DEBUG_COLORS: "true"
      DEBUG_ERROR_MESSAGES: "true"
      DEBUG_MODE: "$DEBUG_MODE"
      JITSI_URL: $JITSI_URL
      JITSI_PRIVATE_MODE: "$JITSI_PRIVATE_MODE"
      ENABLE_MAP_EDITOR: "$ENABLE_MAP_EDITOR"
      HOST: "0.0.0.0"
      NODE_ENV: development
      ALLOWED_CORS_ORIGIN: "*"
      VITE_URL: "http://front.workadventure.localhost"
      PUSHER_URL: http://play.workadventure.localhost
      FRONT_URL: http://play.workadventure.localhost
      UPLOADER_URL: http://uploader.workadventure.localhost
      ICON_URL: http://icon.workadventure.localhost
      STUN_SERVER: "$STUN_SERVER"
      TURN_SERVER: "$TURN_SERVER"
      DISABLE_NOTIFICATIONS: "$DISABLE_NOTIFICATIONS"
      SKIP_RENDER_OPTIMIZATIONS: "$SKIP_RENDER_OPTIMIZATIONS"
      # Use TURN_USER/TURN_PASSWORD if your Coturn server is secured via hard coded credentials.
      # Advice: you should instead use Coturn REST API along the TURN_STATIC_AUTH_SECRET in the Back container
      TURN_USER: ""
      TURN_PASSWORD: ""
      MAX_PER_GROUP: "$MAX_PER_GROUP"
      MAX_USERNAME_LENGTH: "$MAX_USERNAME_LENGTH"
      OPENID_CLIENT_ID: "$OPENID_CLIENT_ID"
      OPENID_CLIENT_SECRET: "$OPENID_CLIENT_SECRET"
      OPENID_CLIENT_ISSUER: "https://slack.com"
      OPENID_PROFILE_SCREEN_PROVIDER: $OPENID_PROFILE_SCREEN_PROVIDER
      OPENID_SCOPE: "openid email profile"
      OPENID_PROMPT: $OPENID_PROMPT
      OPENID_USERNAME_CLAIM: "given_name"
      OPENID_LOCALE_CLAIM: $OPENID_LOCALE_CLAIM
      OPENID_WOKA_NAME_POLICY: "force_opid"
      OPENID_LOGOUT_REDIRECT_URL: "$OPENID_LOGOUT_REDIRECT_URL"

      SECRET_KEY: "$SECRET_KEY"
      ADMIN_API_URL: "$ADMIN_API_URL"
      ADMIN_API_TOKEN: "$ADMIN_API_TOKEN"
      MAP_STORAGE_API_TOKEN: "FFVSGBSGBSGFB23SFGBSFG4BS"
      API_URL: back:50051
      DISABLE_ANONYMOUS: false
      #Map editor
      PUBLIC_MAP_STORAGE_URL: "http://map-storage.workadventure.localhost"
      INTERNAL_MAP_STORAGE_URL: "http://map-storage:3000"
      ENABLE_OPENAPI_ENDPOINT: "true"
      START_ROOM_URL: "${START_ROOM_URL:-/_/global/maps.workadventure.localhost/flavor/UI.tmj}"
      ENABLE_CHAT: "${ENABLE_CHAT:-false}"
      ENABLE_CHAT_UPLOAD: "${ENABLE_CHAT_UPLOAD:-false}"
      ENABLE_CHAT_ONLINE_LIST: "${ENABLE_CHAT_ONLINE_LIST:-false}"
      ENABLE_CHAT_DISCONNECTED_LIST: "${ENABLE_CHAT_DISCONNECTED_LIST:-false}"
      # Chat logging
      CHAT_LOG_SECRET: "${CHAT_LOG_SECRET:-your-secret-token-here}"
      # Slack bot token for fetching usernames from Slack API
      SLACK_BOT_TOKEN: "${SLACK_BOT_TOKEN:-}"
      # PostgreSQL database for chat logs (use DATABASE_URL or individual vars)
      DATABASE_URL: "${DATABASE_URL:-}"
      POSTGRES_HOST: "${POSTGRES_HOST:-}"
      POSTGRES_PORT: "${POSTGRES_PORT:-5432}"
      POSTGRES_DATABASE: "${POSTGRES_DATABASE:-}"
      POSTGRES_USER: "${POSTGRES_USER:-}"
      POSTGRES_PASSWORD: "${POSTGRES_PASSWORD:-}"
      PROMETHEUS_AUTHORIZATION_TOKEN: "$PROMETHEUS_AUTHORIZATION_TOKEN"
      SERVER_NAME: $SERVER_NAME
      SERVER_MOTD: $SERVER_MOTD
      SERVER_ICON: $SERVER_ICON
      # Report issues menu
      ENABLE_REPORT_ISSUES_MENU: $ENABLE_REPORT_ISSUES_MENU
      REPORT_ISSUES_URL: $REPORT_ISSUES_URL
      # LogRocket
      LOGROCKET_ID: $LOGROCKET_ID
      # Sentry integration
      SENTRY_DSN_FRONT: $SENTRY_DSN_FRONT
      SENTRY_DSN_PUSHER: $SENTRY_DSN_PUSHER
      SENTRY_ENVIRONMENT: $SENTRY_ENVIRONMENT
      SENTRY_RELEASE: $SENTRY_RELEASE
      SENTRY_ORG: $SENTRY_ORG
      SENTRY_PROJECT: $SENTRY_PROJECT
      # Room API
      ROOM_API_PORT: "50051"
      ROOM_API_SECRET_KEY: ${ROOM_API_SECRET_KEY}
      #GRPC_VERBOSITY: DEBUG
      #GRPC_TRACE: all
      FEATURE_FLAG_BROADCAST_AREAS: "true"
      # Redis
      REDIS_HOST: redis
      KLAXOON_ENABLED: "$KLAXOON_ENABLED"
      KLAXOON_CLIENT_ID: "$KLAXOON_CLIENT_ID"
      YOUTUBE_ENABLED: "$YOUTUBE_ENABLED"
      GOOGLE_DRIVE_ENABLED: "$GOOGLE_DRIVE_ENABLED"
      GOOGLE_DOCS_ENABLED: "$GOOGLE_DOCS_ENABLED"
      GOOGLE_SHEETS_ENABLED: "$GOOGLE_SHEETS_ENABLED"
      GOOGLE_SLIDES_ENABLED: "$GOOGLE_SLIDES_ENABLED"
      ERASER_ENABLED: "$ERASER_ENABLED"
      EXCALIDRAW_ENABLED: "$EXCALIDRAW_ENABLED"
      EXCALIDRAW_DOMAINS: "$EXCALIDRAW_DOMAINS"
      EMBEDDED_DOMAINS_WHITELIST: "$EMBEDDED_DOMAINS_WHITELIST"
      CARDS_ENABLED: "$CARDS_ENABLED"
      TLDRAW_ENABLED: "$TLDRAW_ENABLED"
      # Report issues menu
      ACTIVE_REPORT_ISSUES_MENU: "true"
      URL_REPORT_ISSUES: "https://github.com/workadventure/workadventure/issues"
      PEER_VIDEO_LOW_BANDWIDTH: "$PEER_VIDEO_LOW_BANDWIDTH"
      PEER_VIDEO_RECOMMENDED_BANDWIDTH: "$PEER_VIDEO_RECOMMENDED_BANDWIDTH"
      PEER_SCREEN_SHARE_LOW_BANDWIDTH: "$PEER_SCREEN_SHARE_LOW_BANDWIDTH"
      PEER_SCREEN_SHARE_RECOMMENDED_BANDWIDTH: "$PEER_SCREEN_SHARE_RECOMMENDED_BANDWIDTH"
      # Google drive picker
      GOOGLE_DRIVE_PICKER_CLIENT_ID: "$GOOGLE_DRIVE_PICKER_CLIENT_ID"
      GOOGLE_DRIVE_PICKER_APP_ID: "$GOOGLE_DRIVE_PICKER_APP_ID"
      # Hack Club OAuth
      HACK_CLUB_CLIENT_ID: "$HACK_CLUB_CLIENT_ID"
      HACK_CLUB_CLIENT_SECRET: "$HACK_CLUB_CLIENT_SECRET"
      #Chat - DISABLED
      MATRIX_API_URI: ""
      MATRIX_PUBLIC_URI: ""
      MATRIX_ADMIN_USER: ""
      MATRIX_ADMIN_PASSWORD: ""
      MATRIX_DOMAIN: ""
      # oEmbed providers
      EMBEDLY_KEY: "$EMBEDLY_KEY"
      # Map editor restrictions (allow all users when OIDC is enabled by default)
      MAP_EDITOR_ALLOW_ALL_USERS: "false"
    labels:
      - "traefik.enable=true"

      - "traefik.http.routers.front.rule=Host(`front.workadventure.localhost`)"
      - "traefik.http.routers.front.service=front"
      - "traefik.http.services.front.loadbalancer.server.port=8080"

      - "traefik.http.routers.room-api.rule=Host(`room-api.workadventure.localhost`)"
      - "traefik.http.routers.room-api.service=room-api"
      - "traefik.http.services.room-api.loadbalancer.server.port=50051"
      - "traefik.http.services.room-api.loadbalancer.server.scheme=h2c"

      - "traefik.http.routers.play.rule=HostRegexp(`{domain:.*}`)"
      - "traefik.http.routers.play.priority=1"
      - "traefik.http.routers.play.service=play"
      - "traefik.http.services.play.loadbalancer.server.port=3000"

      - "traefik.http.routers.play-ws.rule=HostRegexp(`{domain:.*}`) && PathPrefix(`/ws/`)"
      - "traefik.http.routers.play-ws.priority=2"
      - "traefik.http.routers.play-ws.service=play-ws"
      - "traefik.http.services.play-ws.loadbalancer.server.port=3001"

  maps:
    image: thecodingmachine/php:8.1-v4-apache-node12
    environment:
      DEBUG_MODE: "$DEBUG_MODE"
      HOST: "0.0.0.0"
      NODE_ENV: development
      FRONT_URL: http://play.workadventure.localhost
      #APACHE_DOCUMENT_ROOT: dist/
      #APACHE_EXTENSIONS: headers
      #APACHE_EXTENSION_HEADERS: 1
      STARTUP_COMMAND_0: sudo a2enmod headers
      STARTUP_COMMAND_1: yarn install
    volumes:
      - ./maps:/var/www/html
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.maps.rule=Host(`maps.workadventure.localhost`)"
      - "traefik.http.routers.maps.entryPoints=web,traefik"
      - "traefik.http.services.maps.loadbalancer.server.port=80"

  back:
    image: thecodingmachine/nodejs:v2-22-bullseye
    command: npm run dev
    working_dir: /usr/src/app/back
    environment:
      DEBUG: "*"
      PLAY_URL: http://play.workadventure.localhost
      # On startup, we ask the messages container to regenerate the files.
      # Note: we need to use this "messages" container because of ARM64 processors that are not supported with protoc (used in "messages" container)
      #STARTUP_COMMAND_0: touch /usr/src/app/back/src/Messages/generate_request/need_regenerate
      STARTUP_COMMAND_1: ../wait-proto.sh
      STARTUP_COMMAND_2: ../npm-install.sh
      # wait for files to be generated by "messages" container
      #STARTUP_COMMAND_2: while [ -f /usr/src/app/back/src/Messages/generate_request/need_regenerate ]; do sleep 1; done
      SECRET_KEY: "$SECRET_KEY"
      SECRET_JITSI_KEY: "$SECRET_JITSI_KEY"
      ENABLE_MAP_EDITOR: "$ENABLE_MAP_EDITOR"
      ALLOW_ARTILLERY: "true"
      ADMIN_API_URL: "$ADMIN_API_URL"
      ADMIN_API_TOKEN: "$ADMIN_API_TOKEN"
      JITSI_URL: $JITSI_URL
      JITSI_ISS: $JITSI_ISS
      BBB_URL: $BBB_URL
      BBB_SECRET: $BBB_SECRET
      TURN_STATIC_AUTH_SECRET: "$TURN_STATIC_AUTH_SECRET"
      MAX_PER_GROUP: "$MAX_PER_GROUP"
      REDIS_HOST: redis
      NODE_ENV: development
      STORE_VARIABLES_FOR_LOCAL_MAPS: "true"
      PROMETHEUS_AUTHORIZATION_TOKEN: "$PROMETHEUS_AUTHORIZATION_TOKEN"
      MAP_STORAGE_URL: "map-storage:50053"
      PUBLIC_MAP_STORAGE_URL: "http://map-storage.workadventure.localhost"
      INTERNAL_MAP_STORAGE_URL: "http://map-storage:3000"
      PLAYER_VARIABLES_MAX_TTL: $PLAYER_VARIABLES_MAX_TTL
      ENABLE_CHAT: "$ENABLE_CHAT"
      ENABLE_CHAT_UPLOAD: "$ENABLE_CHAT_UPLOAD"
      # Sentry integration
      SENTRY_DSN: $SENTRY_DSN_BACK
      SENTRY_ENVIRONMENT: $SENTRY_ENVIRONMENT
      SENTRY_RELEASE: $SENTRY_RELEASE
    volumes:
      - .:/usr/src/app
    tmpfs: /tmp
    ports:
      - "9232:9229"
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.back.rule=Host(`api.workadventure.localhost`)"
      - "traefik.http.routers.back.entryPoints=web"
      - "traefik.http.routers.back.service=back"
      - "traefik.http.services.back.loadbalancer.server.port=8080"

  map-storage:
    image: thecodingmachine/nodejs:v2-22-bullseye
    command: npm run start:dev
    #command: npm run profile
    working_dir: /usr/src/app/map-storage
    environment:
      #DEBUG: "*"
      STARTUP_COMMAND_1: ../wait-proto.sh
      STARTUP_COMMAND_2: ../npm-install.sh
      NODE_ENV: development
      PROMETHEUS_AUTHORIZATION_TOKEN: "$PROMETHEUS_AUTHORIZATION_TOKEN"
      ENABLE_BASIC_AUTHENTICATION: "true"
      AUTHENTICATION_USER: "john.doe"
      AUTHENTICATION_PASSWORD: "password"
      ENABLE_BEARER_AUTHENTICATION: "true"
      AUTHENTICATION_TOKEN: "123"
      API_URL: back:50051
      # Sentry integration
      SENTRY_DSN: $SENTRY_DSN_MAPSTORAGE
      SENTRY_ENVIRONMENT: $SENTRY_ENVIRONMENT
      SENTRY_RELEASE: $SENTRY_RELEASE
      PATH_PREFIX: ""
      MAP_STORAGE_API_TOKEN: "FFVSGBSGBSGFB23SFGBSFG4BS"
      PUSHER_URL: http://play.workadventure.localhost
      WHITELISTED_RESOURCE_URLS: ""
      SECRET_KEY: "$SECRET_KEY"
    volumes:
      - .:/usr/src/app
    tmpfs: /tmp
    ports:
      - "9233:9229"
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.map-storage.rule=Host(`map-storage.workadventure.localhost`)"
      - "traefik.http.routers.map-storage.entryPoints=web"
      - "traefik.http.routers.map-storage.service=map-storage"
      - "traefik.http.services.map-storage.loadbalancer.server.port=3000"
      - "traefik.http.routers.map-storage-ui.rule=Host(`map-storage.workadventure.localhost`) && PathPrefix(`/ui/`)"
      - "traefik.http.routers.map-storage-ui.entryPoints=web"
      - "traefik.http.routers.map-storage-ui.service=map-storage-ui"
      - "traefik.http.services.map-storage-ui.loadbalancer.server.port=8080"

  uploader:
    image: thecodingmachine/nodejs:v2-20-bullseye
    command: npm run dev
    #command: npm run profile
    working_dir: /usr/src/app/uploader
    environment:
      DEBUG: "*"
      STARTUP_COMMAND_1: ../npm-install.sh
      UPLOADER_URL: http://uploader.workadventure.localhost
      #AWS
      AWS_ACCESS_KEY_ID: "$AWS_ACCESS_KEY_ID"
      AWS_SECRET_ACCESS_KEY: "$AWS_SECRET_ACCESS_KEY"
      AWS_DEFAULT_REGION: "$AWS_DEFAULT_REGION"
      AWS_BUCKET: "$AWS_BUCKET"
      AWS_ENDPOINT: "$AWS_ENDPOINT"
      UPLOADER_AWS_SIGNED_URL_EXPIRATION: "$UPLOADER_AWS_SIGNED_URL_EXPIRATION"
      #REDIS
      REDIS_HOST: "$UPLOADER_REDIS_HOST"
      REDIS_PORT: "$UPLOADER_REDIS_PORT"
      REDIS_DB_NUMBER: "$UPLOADER_REDIS_DB_NUMBER"
      ENABLE_CHAT_UPLOAD: "$ENABLE_CHAT_UPLOAD"
      UPLOAD_MAX_FILESIZE: "$UPLOAD_MAX_FILESIZE"
    volumes:
      - .:/usr/src/app
    tmpfs: /tmp
    ports:
      - "9234:9229"
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.uploader.rule=Host(`uploader.workadventure.localhost`)"
      - "traefik.http.routers.uploader.entryPoints=web"
      - "traefik.http.services.uploader.loadbalancer.server.port=8080"

  messages:
    image: thecodingmachine/nodejs:v2-20-bullseye-build
    environment:
      STARTUP_COMMAND_1: npm install
      STARTUP_COMMAND_2: npm run proto:watch
    volumes:
      - ./messages:/usr/src/app
      - ./back:/usr/src/back
      - ./play:/usr/src/play
      #- ./chat:/usr/src/chat
      - ./map-storage:/usr/src/map-storage
      - ./libs:/usr/src/libs

  redis:
    image: redis:6

  redisinsight:
    image: redislabs/redisinsight:latest
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.redisinsight.rule=Host(`redis.workadventure.localhost`)"
      - "traefik.http.routers.redisinsight.entryPoints=web"
      - "traefik.http.services.redisinsight.loadbalancer.server.port=8001"

  icon:
    image: matthiasluedtke/iconserver:v3.15.0
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.icon.rule=Host(`icon.workadventure.localhost`)"
      - "traefik.http.routers.icon.entryPoints=web"
      - "traefik.http.services.icon.loadbalancer.server.port=8080"

  prometheus:
    image: prom/prometheus:latest
    ports:
      - "9090:9090"
    volumes:
      - ./prometheus.yml:/etc/prometheus/prometheus.yml
    command:
      - '--config.file=/etc/prometheus/prometheus.yml'
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.prometheus.rule=Host(`prometheus.workadventure.localhost`)"
      - "traefik.http.routers.prometheus.entryPoints=web"
      - "traefik.http.services.prometheus.loadbalancer.server.port=9090"

  grafana:
    image: grafana/grafana:latest
    ports:
      - "3030:3000"
    environment:
      - GF_SECURITY_ADMIN_PASSWORD=admin
      - GF_AUTH_ANONYMOUS_ENABLED=true
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.grafana.rule=Host(`grafana.workadventure.localhost`)"
      - "traefik.http.routers.grafana.entryPoints=web"
      - "traefik.http.services.grafana.loadbalancer.server.port=3000"

  # A mock server to test OpenID connect connectivity
  oidc-server-mock:
    image: ghcr.io/soluto/oidc-server-mock:0.7.0
    environment:
      ASPNETCORE_ENVIRONMENT: Development
      SERVER_OPTIONS_INLINE: |
        {
          "AccessTokenJwtType": "JWT",
          "Discovery": {
            "ShowKeySet": true
          },
          "Authentication": {
            "CookieSameSiteMode": "Lax",
            "CheckSessionCookieSameSiteMode": "Lax"
          }
        }
      LOGIN_OPTIONS_INLINE: |
        {
          "AllowRememberLogin": false
        }
      LOGOUT_OPTIONS_INLINE: |
        {
          "AutomaticRedirectAfterSignOut": true
        }
      API_SCOPES_INLINE: |
        - Name: tags
          UserClaims:
            - tags-scope
      API_RESOURCES_INLINE: |
        - Name: some-app
          Scopes:
            - some-app-scope-1
            - tags-scope
          UserClaims:
            - tags
      USERS_CONFIGURATION_INLINE: |
        []
      IDENTITY_RESOURCES_INLINE: |
        [
          {
            "Name": "tags-scope",
            "ClaimTypes": ["tags"]
          }
        ]
      CLIENTS_CONFIGURATION_PATH: /tmp/config/clients-config.json
    volumes:
      - ./contrib/oidc-server-mock:/tmp/config:ro
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.oidc.rule=Host(`oidc.workadventure.localhost`)"
      - "traefik.http.routers.oidc.entryPoints=web"
    healthcheck:
      #disable: true
      timeout: 5s
    # A mock server to test OpenID connect connectivity

  synapse:
    image: matrixdotorg/synapse:v1.132.0
    entrypoint: /data/start.sh
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.matrix.rule=Host(`matrix.workadventure.localhost`)"
      - "traefik.http.routers.matrix.entryPoints=web"
      - "traefik.http.services.matrix.loadbalancer.server.port=8008"
      - "traefik.http.routers.matrix.service=matrix"
    volumes:
      - ./synapse:/data/
      #- ./synapse/homeserver.template.yaml:/data/homeserver.template.yaml
      - ./synapse/federation:/etc/nginx/vhost.d/matrix.workadventure.localhost
    environment:
      VIRTUAL_HOST: "matrix.workadventure.localhost"
      VIRTUAL_PORT: 8008
      LETSENCRYPT_HOST: "matrix.workadventure.localhost"
      SYNAPSE_SERVER_NAME: "matrix.workadventure.localhost"
      SYNAPSE_REPORT_STATS: "yes"
      MATRIX_ADMIN_USER: admin
      MATRIX_ADMIN_PASSWORD: MySecretPassword
      #this is not used
      JWT_SECRET: "$SECRET_KEY"

#  coturn:
#    image: coturn/coturn:4.5.2
#    command:
#      - turnserver
#      #- -c=/etc/coturn/turnserver.conf
#      - --log-file=stdout
#      - --external-ip=$$(detect-external-ip)
#      - --listening-port=3478
#      - --min-port=10000
#      - --max-port=10010
#      - --tls-listening-port=5349
#      - --listening-ip=0.0.0.0
#      - --realm=coturn.workadventure.localhost
#      - --server-name=coturn.workadventure.localhost
#      - --lt-cred-mech
#      # Enable Coturn "REST API" to validate temporary passwords.
#      #- --use-auth-secret
#      #- --static-auth-secret=SomeStaticAuthSecret
#      #- --userdb=/var/lib/turn/turndb
#      - --user=workadventure:WorkAdventure123
#      # use real-valid certificate/privatekey files
#      #- --cert=/root/letsencrypt/fullchain.pem
#      #- --pkey=/root/letsencrypt/privkey.pem
#    network_mode: host
#volumes:
#  synapsedata: