callis/docker-compose.dev.yml at main · pacnpal/callis · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
# Requires Docker Compose v2.24.0+ for env_file required:false syntax.
# See: https://docs.docker.com/compose/compose-file/05-services/#env_file
services:
  callis:
    build: .
    restart: unless-stopped
    ports:
      - "${WEB_PORT:-8080}:8080"
      - "${SSH_PORT:-2222}:22"
    volumes:
      - callis_db:/data
      - callis_hostkeys:/etc/ssh/host_keys
      - callis_sshd_logs:/var/log/callis
    env_file:
      - path: .env
        required: false
    develop:
      watch:
        - action: sync+restart
          path: ./api
          target: /app
          ignore:
            - __pycache__/
            - "*.pyc"
            - uv.lock
        - action: rebuild
          path: ./api/pyproject.toml
        # The frontend is compiled at image build time; rebuild on change.
        # (For fast iteration, run `npm run dev` in frontend/ against a
        # locally running API instead — see docs/DEVELOPMENT.md.)
        - action: rebuild
          path: ./frontend
          ignore:
            - node_modules/
            - .svelte-kit/
            - build/

  fail2ban:
    image: crazymax/fail2ban:1.1.0
    profiles: ["fail2ban"]
    restart: unless-stopped
    network_mode: host
    cap_add:
      - NET_ADMIN
      - NET_RAW
    # Note: fail2ban cannot read env vars in jail configs — if you change
    # SSH_PORT, also update `port` in fail2ban/jail.local.
    volumes:
      - callis_sshd_logs:/var/log/callis-sshd:ro
      - ./fail2ban:/data
    env_file:
      - path: .env
        required: false

volumes:
  callis_db:
  callis_hostkeys:
  callis_sshd_logs: