6e2164abe5
v0.0.1 - Reorganize ISO build tree, add docs/plans/scripts, and stage Phase 2 Slice B+C service integration artifacts
458 lines
13 KiB
Bash
Executable File
458 lines
13 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
# Docker Compose Installation and Nginx Setup Script for Debian
|
|
set -e
|
|
|
|
echo "Starting Docker Compose installation and Nginx setup..."
|
|
|
|
# Update package index
|
|
echo "Updating package index..."
|
|
sudo apt update
|
|
|
|
# Install prerequisites
|
|
echo "Installing prerequisites..."
|
|
sudo apt install -y apt-transport-https ca-certificates curl gnupg lsb-release
|
|
|
|
# Add Docker's official GPG key
|
|
echo "Adding Docker's GPG key..."
|
|
curl -fsSL https://download.docker.com/linux/debian/gpg | sudo gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg
|
|
|
|
# Add Docker repository
|
|
echo "Adding Docker repository..."
|
|
echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/docker-archive-keyring.gpg] https://download.docker.com/linux/debian $(lsb_release -cs) stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
|
|
|
|
# Update package index again
|
|
echo "Updating package index with Docker repository..."
|
|
sudo apt update
|
|
|
|
# Install Docker Engine
|
|
echo "Installing Docker Engine..."
|
|
sudo apt install -y docker-ce docker-ce-cli containerd.io
|
|
|
|
# Start and enable Docker service
|
|
echo "Starting Docker service..."
|
|
sudo systemctl start docker
|
|
sudo systemctl enable docker
|
|
|
|
# Add current user to docker group (optional, requires logout/login to take effect)
|
|
echo "Adding current user to docker group..."
|
|
sudo usermod -aG docker $USER
|
|
|
|
# Install Docker Compose
|
|
echo "Installing Docker Compose..."
|
|
DOCKER_COMPOSE_VERSION=$(curl -s https://api.github.com/repos/docker/compose/releases/latest | grep -Po '"tag_name": "\K.*?(?=")')
|
|
sudo curl -L "https://github.com/docker/compose/releases/download/${DOCKER_COMPOSE_VERSION}/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose
|
|
sudo chmod +x /usr/local/bin/docker-compose
|
|
|
|
# Verify Docker Compose installation
|
|
echo "Verifying Docker Compose installation..."
|
|
docker-compose --version
|
|
|
|
# Create Docker directory structure
|
|
echo "Creating Docker directory structure..."
|
|
mkdir -p Docker
|
|
cd Docker
|
|
|
|
# Create subdirectories
|
|
mkdir -p strfry/data blossom/data conf.d WWW
|
|
|
|
# Create docker-compose.yml
|
|
echo "Creating docker-compose.yml..."
|
|
cat > docker-compose.yml << EOF
|
|
version: '3.8'
|
|
|
|
services:
|
|
nginx:
|
|
image: nginx:alpine
|
|
ports:
|
|
- "80:80"
|
|
- "443:443"
|
|
volumes:
|
|
- ./nginx.conf:/etc/nginx/nginx.conf:ro
|
|
- ./conf.d:/etc/nginx/conf.d:ro
|
|
- ./WWW:/var/www/html:ro
|
|
- /etc/letsencrypt:/etc/letsencrypt:ro
|
|
restart: unless-stopped
|
|
networks:
|
|
- web
|
|
depends_on:
|
|
- strfry
|
|
- blossom
|
|
|
|
strfry:
|
|
image: dockurr/strfry
|
|
container_name: strfry
|
|
ports:
|
|
- "7777:7777" # Internal port for nginx proxy
|
|
volumes:
|
|
- ./strfry/data:/app/strfry-db
|
|
- ./strfry/strfry.conf:/etc/strfry.conf
|
|
restart: always
|
|
stop_grace_period: 2m
|
|
networks:
|
|
- web
|
|
|
|
blossom:
|
|
image: ghcr.io/hzrd149/blossom-server:master
|
|
container_name: blossom
|
|
ports:
|
|
- "3000:3000" # Internal port for nginx proxy
|
|
volumes:
|
|
- ./blossom/data:/app/data
|
|
- ./blossom/config.yml:/app/config.yml
|
|
restart: always
|
|
networks:
|
|
- web
|
|
|
|
networks:
|
|
web:
|
|
driver: bridge
|
|
|
|
EOF
|
|
|
|
# Create nginx main configuration
|
|
echo "Creating nginx.conf..."
|
|
cat > nginx.conf << EOF
|
|
events {
|
|
worker_connections 1024;
|
|
}
|
|
|
|
http {
|
|
include /etc/nginx/mime.types;
|
|
default_type application/octet-stream;
|
|
|
|
log_format main '\$remote_addr - \$remote_user [\$time_local] "\$request" '
|
|
'\$status \$body_bytes_sent "\$http_referer" '
|
|
'"\$http_user_agent" "\$http_x_forwarded_for"';
|
|
|
|
access_log /var/log/nginx/access.log main;
|
|
sendfile on;
|
|
keepalive_timeout 65;
|
|
|
|
include /etc/nginx/conf.d/*.conf;
|
|
}
|
|
EOF
|
|
|
|
# Create nginx site configuration
|
|
echo "Creating nginx site configuration..."
|
|
cat > conf.d/default.conf << EOF
|
|
server {
|
|
listen 80;
|
|
server_name localhost;
|
|
|
|
# Main website
|
|
location / {
|
|
root /var/www/html;
|
|
index index.html index.htm;
|
|
try_files \$uri \$uri/ =404;
|
|
}
|
|
|
|
# Strfry Nostr relay proxy
|
|
location /strfry {
|
|
rewrite ^/strfry(.*) \$1 break;
|
|
proxy_pass http://strfry:7777;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Upgrade \$http_upgrade;
|
|
proxy_set_header Connection "upgrade";
|
|
proxy_set_header Host \$host;
|
|
proxy_set_header X-Real-IP \$remote_addr;
|
|
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto \$scheme;
|
|
proxy_cache_bypass \$http_upgrade;
|
|
proxy_read_timeout 86400;
|
|
}
|
|
|
|
# Blossom blob storage proxy
|
|
location /blossom {
|
|
rewrite ^/blossom(.*) \$1 break;
|
|
proxy_pass http://blossom:3000;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Upgrade \$http_upgrade;
|
|
proxy_set_header Connection "upgrade";
|
|
proxy_set_header Host \$host;
|
|
proxy_set_header X-Real-IP \$remote_addr;
|
|
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto \$scheme;
|
|
proxy_cache_bypass \$http_upgrade;
|
|
client_max_body_size 100M;
|
|
}
|
|
}
|
|
EOF
|
|
|
|
# Create strfry configuration
|
|
echo "Creating strfry configuration..."
|
|
cat > strfry/strfry.conf << EOF
|
|
##
|
|
## Default strfry config
|
|
##
|
|
|
|
# Directory that contains the strfry LMDB database (restart required)
|
|
db = "./strfry-db/"
|
|
|
|
dbParams {
|
|
# Maximum number of threads/processes that can simultaneously have LMDB transactions open (restart required)
|
|
maxreaders = 256
|
|
|
|
# Size of mmap() to use when loading LMDB (restart required)
|
|
mapsize = 512MB
|
|
}
|
|
|
|
relay {
|
|
# Interface to listen on. Use 0.0.0.0 to listen on all interfaces (restart required)
|
|
bind = "0.0.0.0"
|
|
|
|
# Port to open for the nostr websocket protocol (restart required)
|
|
port = 7777
|
|
|
|
# Set OS-limit on maximum number of open files/sockets (if 0, don't attempt to set) (restart required)
|
|
nofiles = 1000000
|
|
|
|
# HTTP header that contains the client's real IP, before reverse proxying (ie x-real-ip) (MUST be all lower-case)
|
|
realIpHeader = "x-real-ip"
|
|
|
|
info {
|
|
# NIP-11: Name of this server. Short/descriptive (< 30 characters)
|
|
name = "strfry default"
|
|
|
|
# NIP-11: Detailed plain-text description of relay
|
|
description = "This is a strfry instance."
|
|
|
|
# NIP-11: Administrative nostr pubkey, for contact purposes
|
|
pubkey = ""
|
|
|
|
# NIP-11: Alternative administrative contact (email, website, etc)
|
|
contact = ""
|
|
}
|
|
|
|
# Maximum accepted incoming websocket frame size (should be larger than max event and yesstr msg size)
|
|
maxWebsocketPayloadSize = 131072
|
|
|
|
# Websocket-level PING message frequency (should be less than any reverse proxy idle timeouts)
|
|
autoPingSeconds = 55
|
|
|
|
# If TCP keep-alive should be enabled (detect dropped connections to upstream reverse proxy)
|
|
enableTcpKeepalive = false
|
|
|
|
# How much uninterrupted CPU time a REQ query should get during its DB scan
|
|
queryTimesliceBudgetMicroseconds = 10000
|
|
|
|
# Maximum records that can be returned per filter
|
|
maxFilterLimit = 500
|
|
|
|
# Maximum number of subscriptions (concurrent REQs) a connection can have open at any time
|
|
maxSubsPerConnection = 20
|
|
|
|
writePolicy {
|
|
# If non-empty, path to an executable script that implements the writePolicy plugin logic
|
|
plugin = ""
|
|
}
|
|
|
|
compression {
|
|
# Use permessage-deflate compression if supported by client. Reduces bandwidth, but uses more CPU (restart required)
|
|
enabled = true
|
|
|
|
# Maintain a sliding window buffer for each connection. Improves compression, but uses more memory (restart required)
|
|
slidingWindow = true
|
|
}
|
|
|
|
logging {
|
|
# Dump all incoming messages
|
|
dumpInAll = false
|
|
|
|
# Dump all incoming EVENT messages
|
|
dumpInEvents = false
|
|
|
|
# Dump all incoming REQ/CLOSE messages
|
|
dumpInReqs = false
|
|
|
|
# Log performance metrics for initial REQ database scans
|
|
dbScanPerf = false
|
|
}
|
|
|
|
numThreads {
|
|
# Ingester threads: route incoming requests, validate events/sigs (restart required)
|
|
ingester = 3
|
|
|
|
# reqWorker threads: Handle initial DB scan for REQ queries (restart required)
|
|
reqWorker = 3
|
|
|
|
# reqMonitor threads: Handle filtering of new events (restart required)
|
|
reqMonitor = 3
|
|
|
|
# yesstr threads: Experimental yesstr protocol (restart required)
|
|
yesstr = 1
|
|
}
|
|
}
|
|
EOF
|
|
|
|
# Create blossom configuration
|
|
echo "Creating blossom configuration..."
|
|
cat > blossom/config.yml << EOF
|
|
# Blossom Server Configuration
|
|
|
|
# Server settings
|
|
server:
|
|
port: 3000
|
|
host: "0.0.0.0"
|
|
|
|
# Storage settings
|
|
storage:
|
|
# Directory to store uploaded files
|
|
directory: "/app/data"
|
|
|
|
# Maximum file size in bytes (100MB)
|
|
maxFileSize: 104857600
|
|
|
|
# Allowed file types (empty array allows all types)
|
|
allowedTypes: []
|
|
|
|
# Enable file deduplication
|
|
deduplicate: true
|
|
|
|
# Authentication settings (optional)
|
|
auth:
|
|
# Require authentication for uploads
|
|
required: false
|
|
|
|
# Admin public keys (if auth is enabled)
|
|
adminKeys: []
|
|
|
|
# Rate limiting
|
|
rateLimit:
|
|
# Enable rate limiting
|
|
enabled: true
|
|
|
|
# Requests per minute per IP
|
|
requestsPerMinute: 100
|
|
|
|
# Upload requests per minute per IP
|
|
uploadsPerMinute: 10
|
|
|
|
# Logging
|
|
logging:
|
|
# Log level: debug, info, warn, error
|
|
level: "info"
|
|
|
|
# Enable access logs
|
|
accessLogs: true
|
|
|
|
# CORS settings
|
|
cors:
|
|
# Enable CORS
|
|
enabled: true
|
|
|
|
# Allowed origins (* for all)
|
|
origins: ["*"]
|
|
|
|
# Allowed methods
|
|
methods: ["GET", "POST", "PUT", "DELETE", "OPTIONS"]
|
|
|
|
# Allowed headers
|
|
headers: ["Content-Type", "Authorization"]
|
|
|
|
# Cleanup settings
|
|
cleanup:
|
|
# Enable automatic cleanup of old files
|
|
enabled: false
|
|
|
|
# Maximum age of files in days
|
|
maxAge: 30
|
|
|
|
# Cleanup interval in hours
|
|
interval: 24
|
|
EOF
|
|
|
|
# Create sample HTML content
|
|
echo "Creating sample HTML content..."
|
|
cat > WWW/index.html << EOF
|
|
<!DOCTYPE html>
|
|
<html>
|
|
<head>
|
|
<title>Nostr Services - Docker Setup</title>
|
|
<style>
|
|
body {
|
|
font-family: Arial, sans-serif;
|
|
text-align: center;
|
|
margin-top: 50px;
|
|
background-color: #f5f5f5;
|
|
}
|
|
.container {
|
|
max-width: 800px;
|
|
margin: 0 auto;
|
|
background: white;
|
|
padding: 2rem;
|
|
border-radius: 10px;
|
|
box-shadow: 0 2px 10px rgba(0,0,0,0.1);
|
|
}
|
|
h1 { color: #333; }
|
|
.service {
|
|
margin: 20px 0;
|
|
padding: 15px;
|
|
border: 1px solid #ddd;
|
|
border-radius: 5px;
|
|
background-color: #f9f9f9;
|
|
}
|
|
.service h3 { margin-top: 0; color: #555; }
|
|
a { color: #007bff; text-decoration: none; }
|
|
a:hover { text-decoration: underline; }
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<div class="container">
|
|
<h1>Nostr Services - Docker Setup</h1>
|
|
<p>Your Nostr infrastructure is running successfully!</p>
|
|
|
|
<div class="service">
|
|
<h3>🔗 Strfry Nostr Relay</h3>
|
|
<p>Nostr relay for storing and retrieving events</p>
|
|
<p><strong>Endpoint:</strong> <a href="/strfry" target="_blank">ws://localhost/strfry</a></p>
|
|
</div>
|
|
|
|
<div class="service">
|
|
<h3>🌸 Blossom Blob Storage</h3>
|
|
<p>Decentralized blob storage for media files</p>
|
|
<p><strong>Endpoint:</strong> <a href="/blossom" target="_blank">http://localhost/blossom</a></p>
|
|
</div>
|
|
|
|
<div style="margin-top: 30px; padding-top: 20px; border-top: 1px solid #eee;">
|
|
<p><em>Services are proxied through Nginx and running in Docker containers</em></p>
|
|
</div>
|
|
</div>
|
|
</body>
|
|
</html>
|
|
EOF
|
|
|
|
# Start services using Docker Compose
|
|
echo "Starting Docker services..."
|
|
sudo docker-compose up -d
|
|
|
|
# Go back to original directory
|
|
cd ..
|
|
|
|
# Show running containers
|
|
echo "Docker containers status:"
|
|
sudo docker ps
|
|
|
|
echo ""
|
|
echo "Installation and setup completed!"
|
|
echo ""
|
|
echo "Docker directory structure created with:"
|
|
echo "- Strfry Nostr relay configuration and data directory"
|
|
echo "- Blossom blob storage configuration and data directory"
|
|
echo "- Nginx reverse proxy configuration"
|
|
echo "- Sample website content"
|
|
echo ""
|
|
echo "Services are now running and accessible at:"
|
|
echo "- Main site: http://localhost"
|
|
echo "- Strfry relay: ws://localhost/strfry"
|
|
echo "- Blossom storage: http://localhost/blossom"
|
|
echo "- External IP: http://$(hostname -I | awk '{print $1}')"
|
|
echo ""
|
|
echo "Docker management commands (run from Docker/ directory):"
|
|
echo "- Stop services: cd Docker && sudo docker-compose down"
|
|
echo "- View logs: cd Docker && sudo docker-compose logs [service_name]"
|
|
echo "- Restart services: cd Docker && sudo docker-compose restart"
|
|
echo "- View status: sudo docker ps"
|
|
echo ""
|
|
echo "Note: You may need to logout and login again for docker group permissions to take effect."
|