59 lines
1.6 KiB
YAML
59 lines
1.6 KiB
YAML
# Self-hosted mCaptcha (proof-of-work CAPTCHA) — node1 deployment.
|
|
#
|
|
# node1 runs services as plain docker-compose stacks behind host-level Caddy
|
|
# (NOT Coolify, NOT Traefik) — same pattern as /opt/sentry. Caddy terminates
|
|
# TLS and reverse-proxies captcha.saas-ctrl.com -> 127.0.0.1:7000.
|
|
#
|
|
# Deployed at /opt/mcaptcha on node1 (176.9.111.179). See README.md.
|
|
#
|
|
# IMPORTANT:
|
|
# - The cache is `mcaptcha/cache` (Redis + mCaptcha's PoW module), NOT vanilla redis.
|
|
# - mCaptcha terminates NO TLS (PROXY_HAS_TLS=true in .env; Caddy does TLS).
|
|
# - Port is published on 127.0.0.1 only — Caddy reaches it locally, never public.
|
|
# - Password inside DATABASE_URL (.env) MUST equal MCAPTCHA_PG_PASSWORD.
|
|
|
|
name: mcaptcha
|
|
|
|
networks:
|
|
mcaptcha-net:
|
|
name: mcaptcha-net
|
|
|
|
volumes:
|
|
mcaptcha-pg-data:
|
|
name: mcaptcha-pg-data
|
|
|
|
services:
|
|
mcaptcha:
|
|
image: mcaptcha/mcaptcha:latest
|
|
restart: unless-stopped
|
|
networks: [mcaptcha-net]
|
|
env_file: [.env]
|
|
ports:
|
|
- "127.0.0.1:7000:7000"
|
|
depends_on:
|
|
mcaptcha_postgres:
|
|
condition: service_healthy
|
|
mcaptcha_redis:
|
|
condition: service_started
|
|
|
|
mcaptcha_postgres:
|
|
image: postgres:16-alpine
|
|
restart: unless-stopped
|
|
networks: [mcaptcha-net]
|
|
environment:
|
|
POSTGRES_USER: postgres
|
|
POSTGRES_DB: postgres
|
|
POSTGRES_PASSWORD: ${MCAPTCHA_PG_PASSWORD}
|
|
volumes:
|
|
- mcaptcha-pg-data:/var/lib/postgresql/data
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U postgres"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 10
|
|
|
|
mcaptcha_redis:
|
|
image: mcaptcha/cache:latest
|
|
restart: unless-stopped
|
|
networks: [mcaptcha-net]
|