mirror of
https://github.com/TheFunny/TelegramTwitterMediaBot.git
synced 2026-09-24 23:42:18 +00:00
YoursFunny
7bdf760c7b
Two template landmines for anyone running docker compose from the tracked files. (1) LOCAL_USER_ID defaulted to 1000 in compose and .env.example while the entrypoint and both READMEs say 9001 — the ./data owner on the host silently depended on which doc you read; all four now say 9001. (2) The healthcheck probed WEBHOOK_PORT unconditionally, so the template's own WEBHOOK=false (polling, no listener) shipped a permanently unhealthy container — the probe is now conditional on the interpolated WEBHOOK value (test '<v>' != true || exec 3<>/dev/tcp/…): polling deployments answer healthy without a port, webhook deployments still surface a dead listener to the orchestrator. Both expressions verified locally; compose YAML parses.
110 lines
3.8 KiB
YAML
110 lines
3.8 KiB
YAML
# Deployment reference for the Docker Hub image. Instance values (token, admins,
|
|
# site credentials, domain) live in `.env` next to this file — `docker compose`
|
|
# substitutes every `${VAR}` from it automatically — so this file stays in the
|
|
# repository unmodified. A variable that is not listed here is not passed into
|
|
# the container at all.
|
|
#
|
|
# JSON-file logs grow without limit by default: a long-running bot (and the
|
|
# proxy in front of it) will fill the disk. One cap, applied to every service
|
|
# below via the anchor.
|
|
x-logging: &default-logging
|
|
driver: json-file
|
|
options:
|
|
max-size: '10m'
|
|
max-file: '3'
|
|
|
|
services:
|
|
nginx-proxy:
|
|
image: nginxproxy/nginx-proxy:1.11.6-alpine
|
|
restart: always
|
|
environment:
|
|
# Routes requests with an unknown Host (i.e. plain IP access) here; set
|
|
# DEFAULT_HOST in .env to use it.
|
|
DEFAULT_HOST: '${DEFAULT_HOST:-}'
|
|
ports:
|
|
- '80:80'
|
|
- '443:443'
|
|
volumes:
|
|
- /var/run/docker.sock:/tmp/docker.sock:ro
|
|
- certs:/etc/nginx/certs:ro
|
|
- html:/usr/share/nginx/html:ro
|
|
networks: [proxy]
|
|
labels:
|
|
- 'com.github.nginx-proxy.nginx'
|
|
container_name: nginx-proxy
|
|
logging: *default-logging
|
|
|
|
acme-companion:
|
|
image: nginxproxy/acme-companion
|
|
restart: always
|
|
environment:
|
|
DEFAULT_EMAIL: '${DEFAULT_EMAIL:-}'
|
|
volumes:
|
|
- /var/run/docker.sock:/var/run/docker.sock:ro
|
|
- certs:/etc/nginx/certs:rw
|
|
- html:/usr/share/nginx/html:rw
|
|
- acme:/etc/acme.sh
|
|
networks: [proxy]
|
|
container_name: acme-companion
|
|
depends_on:
|
|
- nginx-proxy
|
|
logging: *default-logging
|
|
|
|
tgxmb:
|
|
image: yoursfunny/telegram-twitter-media-bot:latest
|
|
restart: always
|
|
environment:
|
|
# From .env (the instance's own values; see the env table in README.md).
|
|
TELOXIDE_TOKEN: '${TELOXIDE_TOKEN:-}'
|
|
BOT_ADMIN: '${BOT_ADMIN:-}'
|
|
PIXIV_REFRESH_TOKEN: '${PIXIV_REFRESH_TOKEN:-}'
|
|
TWITTER_AUTH_TOKEN: '${TWITTER_AUTH_TOKEN:-}'
|
|
BILIBILI_COOKIE: '${BILIBILI_COOKIE:-}'
|
|
VIRTUAL_HOST: '${VIRTUAL_HOST:-}'
|
|
WEBHOOK_URL: '${WEBHOOK_URL:-}'
|
|
WEBHOOK_SECRET_TOKEN: '${WEBHOOK_SECRET_TOKEN:-}'
|
|
# Defaults, listed so they are discoverable; override in .env when needed.
|
|
LOCAL_USER_ID: '${LOCAL_USER_ID:-9001}'
|
|
RUST_LOG: '${RUST_LOG:-info}'
|
|
EDIT_MESSAGE_TTL_SECONDS: '${EDIT_MESSAGE_TTL_SECONDS:-86400}'
|
|
LINK_CACHE_TTL_SECONDS: '${LINK_CACHE_TTL_SECONDS:-604800}'
|
|
CAPTION_QUOTE_TEXT_CHARS: '${CAPTION_QUOTE_TEXT_CHARS:-200}'
|
|
VIRTUAL_PORT: '${VIRTUAL_PORT:-8443}'
|
|
WEBHOOK: '${WEBHOOK:-true}'
|
|
WEBHOOK_LISTEN: '${WEBHOOK_LISTEN:-0.0.0.0}'
|
|
WEBHOOK_PORT: '${WEBHOOK_PORT:-8443}'
|
|
# For a certificate on a bare IP: uncomment and set ACME_HOST in .env.
|
|
# ACME_HOST: '${ACME_HOST:-}'
|
|
#
|
|
# Not listed on purpose: TELOXIDE_PROXY. Docker Desktop reaches a host
|
|
# proxy through host.docker.internal (a loopback address inside the
|
|
# container is the container itself), and teloxide panics on an *empty*
|
|
# value, so add the line deliberately when this deployment needs one:
|
|
# TELOXIDE_PROXY: '${TELOXIDE_PROXY}'
|
|
volumes:
|
|
- ./data:/app/data
|
|
networks: [proxy]
|
|
depends_on:
|
|
- nginx-proxy
|
|
container_name: tgxmb
|
|
logging: *default-logging
|
|
# Probes the listener only when WEBHOOK=true (compose interpolates the
|
|
# value from .env); a polling deployment has no listener and must not be
|
|
# reported unhealthy. nginx-proxy shows 502s while webhook mode is down,
|
|
# so surface that to the orchestrator.
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "test '${WEBHOOK:-true}' != true || exec 3<>/dev/tcp/127.0.0.1/${WEBHOOK_PORT:-8443}"]
|
|
interval: 30s
|
|
timeout: 5s
|
|
retries: 3
|
|
start_period: 10s
|
|
|
|
volumes:
|
|
certs:
|
|
html:
|
|
acme:
|
|
|
|
networks:
|
|
proxy:
|
|
name: proxy
|