mirror of
https://github.com/TheFunny/TelegramTwitterMediaBot.git
synced 2026-09-23 23:32:05 +00:00
YoursFunny
24cbfc2f27
- `docker-compose.yml.example` becomes `docker-compose.yml`, committed as the
real deployment file (the log caps came along) and no longer gitignored.
Every instance value is now `${VAR}` with a `${VAR:-default}` fallback, so
compose reads it from the gitignored `.env` beside the file and the committed
composition needs no per-deployment edit; a variable not listed in a
service's `environment:` never reaches that container. Two knobs the docs
promised but the file lacked are now wired: `DEFAULT_HOST` on nginx-proxy and
`BILIBILI_COOKIE`/`CAPTION_QUOTE_TEXT_CHARS` on the bot, and the healthcheck
follows `WEBHOOK_PORT` instead of a hardcoded 8443. `TELOXIDE_PROXY` is
deliberately *not* passed — a loopback proxy inside a container is the
container itself, and teloxide panics on a blank value — so the compose
comment and both READMEs explain when to add it by hand.
- `BILIBILI_PLAN.md` moves to `docs/BILIBILI_PLAN.md` (nothing referenced it).
- Docs synced: AGENTS.md (the deployment-file row, and `.gitignore` no longer
lists the compose file) and both READMEs (deployment and webhook steps now
say "set it in .env" rather than "edit the compose", plus the proxy trap in
the env table).
109 lines
3.7 KiB
YAML
109 lines
3.7 KiB
YAML
# Deployment reference for the Docker Hub image. Instance values (token, admins,
|
|
# site credentials, domain) live in `.env` next to this file — `docker compose`
|
|
# substitutes every `${VAR}` from it automatically — so this file stays in the
|
|
# repository unmodified. A variable that is not listed here is not passed into
|
|
# the container at all.
|
|
#
|
|
# JSON-file logs grow without limit by default: a long-running bot (and the
|
|
# proxy in front of it) will fill the disk. One cap, applied to every service
|
|
# below via the anchor.
|
|
x-logging: &default-logging
|
|
driver: json-file
|
|
options:
|
|
max-size: '10m'
|
|
max-file: '3'
|
|
|
|
services:
|
|
nginx-proxy:
|
|
image: nginxproxy/nginx-proxy:1.11.6-alpine
|
|
restart: always
|
|
environment:
|
|
# Routes requests with an unknown Host (i.e. plain IP access) here; set
|
|
# DEFAULT_HOST in .env to use it.
|
|
DEFAULT_HOST: '${DEFAULT_HOST:-}'
|
|
ports:
|
|
- '80:80'
|
|
- '443:443'
|
|
volumes:
|
|
- /var/run/docker.sock:/tmp/docker.sock:ro
|
|
- certs:/etc/nginx/certs:ro
|
|
- html:/usr/share/nginx/html:ro
|
|
networks: [proxy]
|
|
labels:
|
|
- 'com.github.nginx-proxy.nginx'
|
|
container_name: nginx-proxy
|
|
logging: *default-logging
|
|
|
|
acme-companion:
|
|
image: nginxproxy/acme-companion
|
|
restart: always
|
|
environment:
|
|
DEFAULT_EMAIL: '${DEFAULT_EMAIL:-}'
|
|
volumes:
|
|
- /var/run/docker.sock:/var/run/docker.sock:ro
|
|
- certs:/etc/nginx/certs:rw
|
|
- html:/usr/share/nginx/html:rw
|
|
- acme:/etc/acme.sh
|
|
networks: [proxy]
|
|
container_name: acme-companion
|
|
depends_on:
|
|
- nginx-proxy
|
|
logging: *default-logging
|
|
|
|
tgxmb:
|
|
image: yoursfunny/telegram-twitter-media-bot:latest
|
|
restart: always
|
|
environment:
|
|
# From .env (the instance's own values; see the env table in README.md).
|
|
TELOXIDE_TOKEN: '${TELOXIDE_TOKEN:-}'
|
|
BOT_ADMIN: '${BOT_ADMIN:-}'
|
|
PIXIV_REFRESH_TOKEN: '${PIXIV_REFRESH_TOKEN:-}'
|
|
TWITTER_AUTH_TOKEN: '${TWITTER_AUTH_TOKEN:-}'
|
|
BILIBILI_COOKIE: '${BILIBILI_COOKIE:-}'
|
|
VIRTUAL_HOST: '${VIRTUAL_HOST:-}'
|
|
WEBHOOK_URL: '${WEBHOOK_URL:-}'
|
|
WEBHOOK_SECRET_TOKEN: '${WEBHOOK_SECRET_TOKEN:-}'
|
|
# Defaults, listed so they are discoverable; override in .env when needed.
|
|
LOCAL_USER_ID: '${LOCAL_USER_ID:-1000}'
|
|
RUST_LOG: '${RUST_LOG:-info}'
|
|
EDIT_MESSAGE_TTL_SECONDS: '${EDIT_MESSAGE_TTL_SECONDS:-86400}'
|
|
LINK_CACHE_TTL_SECONDS: '${LINK_CACHE_TTL_SECONDS:-604800}'
|
|
CAPTION_QUOTE_TEXT_CHARS: '${CAPTION_QUOTE_TEXT_CHARS:-200}'
|
|
VIRTUAL_PORT: '${VIRTUAL_PORT:-8443}'
|
|
WEBHOOK: '${WEBHOOK:-true}'
|
|
WEBHOOK_LISTEN: '${WEBHOOK_LISTEN:-0.0.0.0}'
|
|
WEBHOOK_PORT: '${WEBHOOK_PORT:-8443}'
|
|
# For a certificate on a bare IP: uncomment and set ACME_HOST in .env.
|
|
# ACME_HOST: '${ACME_HOST:-}'
|
|
#
|
|
# Not listed on purpose: TELOXIDE_PROXY. Docker Desktop reaches a host
|
|
# proxy through host.docker.internal (a loopback address inside the
|
|
# container is the container itself), and teloxide panics on an *empty*
|
|
# value, so add the line deliberately when this deployment needs one:
|
|
# TELOXIDE_PROXY: '${TELOXIDE_PROXY}'
|
|
volumes:
|
|
- ./data:/app/data
|
|
networks: [proxy]
|
|
depends_on:
|
|
- nginx-proxy
|
|
container_name: tgxmb
|
|
logging: *default-logging
|
|
# Webhook mode only (in polling mode there is no listener, so drop this
|
|
# block or set WEBHOOK=true): the bot listens on WEBHOOK_PORT; nginx-proxy
|
|
# shows 502s while this is down, so surface it to the orchestrator.
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "bash -c 'exec 3<>/dev/tcp/127.0.0.1/${WEBHOOK_PORT:-8443}'"]
|
|
interval: 30s
|
|
timeout: 5s
|
|
retries: 3
|
|
start_period: 10s
|
|
|
|
volumes:
|
|
certs:
|
|
html:
|
|
acme:
|
|
|
|
networks:
|
|
proxy:
|
|
name: proxy
|