compose.yaml

# Obby full stack.
#
#   docker compose up -d                       # IRC + backend
#   docker compose --profile frontend up -d    # + web client
#   docker compose --profile panel up -d       # + admin webpanel
#
# All persistent state lives under /data/obby/ (override per-path with
# the *_BIND env vars).  Drop your TLS cert into /data/obby/tls/
# server.{cert,key}.pem; everything else is wired from .env.

services:
  obbyircd:
    # renovate: datasource=docker depName=obbyworld/obbyircd
    image: ${OBBYIRCD_IMAGE:-obbyworld/obbyircd:${OBBYIRCD_VERSION:-v6.2.6.5}}
    restart: unless-stopped
    expose:
      - "8080"
      - "${INVITE_PAGE_PORT:-8661}"
    ports:
      - "${SSL_HOST_PORT:-6697}:${SSL_PORT:-6697}"
    volumes:
      - ${CONF_BIND:-/data/obby/conf}:/home/obbyircd/obby/conf
      - ${DATA_BIND:-/data/obby/data}:/home/obbyircd/obby/data
      - ${LOGS_BIND:-/data/obby/logs}:/home/obbyircd/obby/logs
      - ${TLS_BIND:-/data/obby/tls}:/home/obbyircd/obby/tls
      - ${CUSTOM_MODULES_BIND:-/data/obby/custom-modules}:/home/obbyircd/obby/custom-modules
      - ${SCRIPTS_BIND:-/data/obby/scripts}:/home/obbyircd/obby/conf/scripts
      - ${VOICE_BRIDGE_BIND:-/data/obby/voice-bridge}:/run/obbyirc
    environment:
      WS_PORT: "${WS_PORT:-8080}"
      SSL_PORT: "${SSL_PORT:-6697}"
      VOICE_BRIDGE_SOCKET: /run/obbyirc/voice.sock
      VOICE_TURN_EXTERNAL_URLS: ${VOICE_TURN_EXTERNAL_URLS:-}
      VOICE_TURN_SHARED_SECRET: ${VOICE_TURN_SHARED_SECRET:-}
      VOICE_TURN_TTL: ${VOICE_TURN_TTL:-}
      INVITE_PAGE_PORT: "${INVITE_PAGE_PORT:-8661}"
      INVITE_BASE_URL: ${INVITE_BASE_URL:-}
    env_file:
      - path: .env
        required: false
    healthcheck:
      test: ["CMD-SHELL", "nc -z localhost ${WS_PORT:-8080}"]
      interval: 5s
      timeout: 5s
      retries: 6
      start_period: 30s
    labels:
      - traefik.enable=true
      - traefik.http.routers.obbyircd-invite.rule=Host(`${INVITE_FQDN}`)
      - traefik.http.routers.obbyircd-invite.tls=true
      - traefik.http.routers.obbyircd-invite.service=obbyircd-invite
      - traefik.http.services.obbyircd-invite.loadbalancer.server.port=${INVITE_PAGE_PORT:-8661}

  obby-proxy:
    # renovate: datasource=docker depName=caddy
    image: caddy:${CADDY_VERSION:-2.10-alpine}
    restart: unless-stopped
    depends_on:
      obbyircd:
        condition: service_healthy
    configs:
      - source: caddyfile
        target: /etc/caddy/Caddyfile
    labels:
      - traefik.enable=true
      - traefik.http.routers.obby-edge.rule=Host(`${API_FQDN}`)
      - traefik.http.routers.obby-edge.tls=true
      - traefik.http.routers.obby-edge.service=obby-edge
      - traefik.http.services.obby-edge.loadbalancer.server.port=80

  obby-api:
    # renovate: datasource=docker depName=obbyworld/obby-api
    image: ${OBBY_API_IMAGE:-obbyworld/obby-api:${OBBY_API_VERSION:-0.1.0}}
    restart: unless-stopped
    depends_on:
      obbyircd:
        condition: service_healthy
    expose:
      - "8080"
    ports:
      - "${TURN_PORT:-3478}:3478/udp"
      - "${VOICE_WEBRTC_PORT_MIN:-50000}-${VOICE_WEBRTC_PORT_MAX:-50100}:${VOICE_WEBRTC_PORT_MIN:-50000}-${VOICE_WEBRTC_PORT_MAX:-50100}/udp"
    volumes:
      - ${OBBY_API_DATA_BIND:-/data/obby/api-data}:/app/data
      - ${OBBY_API_IMAGES_BIND:-/data/obby/api-images}:/app/images
      - ${VOICE_BRIDGE_BIND:-/data/obby/voice-bridge}:/run/obbyirc
    environment:
      PORT: "8080"
      VOICE_BRIDGE_SOCKET: /run/obbyirc/voice.sock
      VOICE_TURN_SECRET: ${VOICE_TURN_SECRET}
      VOICE_PUBLIC_IP: ${VOICE_PUBLIC_IP}
      VOICE_TURN_PORT: "${TURN_PORT:-3478}"
      VOICE_TURN_REALM: ${VOICE_TURN_REALM:-obby}
      VOICE_MAX_ROOM: "${VOICE_MAX_ROOM:-25}"
      JWT_SECRET: ${JWT_SECRET}
      IRC_SERVER_KEY: ${IRC_SERVER_KEY}
      UNREALIRCD_WS_URL: ${UNREALIRCD_WS_URL:-ws://obbyircd:8080}
      UNREALIRCD_API_USERNAME: ${UNREALIRCD_API_USERNAME:-admin}
      UNREALIRCD_API_PASSWORD: ${RPC_PASSWORD}
      FILEHOST_PUBLIC_URL: ${FILEHOST_PUBLIC_URL}
      VOICE_TURN_DISABLE_EMBEDDED: ${VOICE_TURN_DISABLE_EMBEDDED:-}
      VOICE_WEBRTC_PORT_MIN: "${VOICE_WEBRTC_PORT_MIN:-50000}"
      VOICE_WEBRTC_PORT_MAX: "${VOICE_WEBRTC_PORT_MAX:-50100}"
    env_file:
      - path: .env
        required: false

  obby:
    # renovate: datasource=docker depName=obbyworld/obby
    image: ${OBBY_WEB_IMAGE:-obbyworld/obby:${OBBY_WEB_VERSION:-latest}}
    restart: unless-stopped
    profiles: ["frontend"]
    expose:
      - "80"
    env_file:
      - path: .env
        required: false
    labels:
      - traefik.enable=true
      - traefik.http.routers.web.rule=Host(`${WEB_FQDN}`)
      - traefik.http.routers.web.tls=true
      - traefik.http.services.web.loadbalancer.server.port=80

  obby-panel:
    # renovate: datasource=docker depName=obbyworld/webpanel
    image: ${OBBY_PANEL_IMAGE:-obbyworld/webpanel:${OBBY_PANEL_VERSION:-latest}}
    restart: unless-stopped
    profiles: ["panel"]
    depends_on:
      obbyircd:
        condition: service_healthy
    expose:
      - "8080"
    volumes:
      - ${OBBY_PANEL_DATA_BIND:-/data/obby/panel-data}:/app/data
    environment:
      PORT: "8080"
      UNREAL_RPC_URL: ${UNREAL_RPC_URL:-ws://obbyircd:8600/}
      UNREAL_RPC_USERNAME: ${UNREAL_RPC_USERNAME:-admin}
      UNREAL_RPC_PASSWORD: ${RPC_PASSWORD}
      USE_MOCK_DATA: "${PANEL_USE_MOCK_DATA:-false}"
      JWT_SECRET: ${PANEL_JWT_SECRET}
      WEBPANEL_ADMIN_USER: ${PANEL_ADMIN_USER:-admin}
      WEBPANEL_ADMIN_PASSWORD: ${PANEL_ADMIN_PASSWORD}
    env_file:
      - path: .env
        required: false
    labels:
      - traefik.enable=true
      - traefik.http.routers.panel.rule=Host(`${PANEL_FQDN}`)
      - traefik.http.routers.panel.tls=true
      - traefik.http.routers.panel.tls.certresolver=letsencrypt
      - traefik.http.services.panel.loadbalancer.server.port=8080

configs:
  caddyfile:
    content: |
      {
      	auto_https off
      	admin off
      }
      :80 {
      	@websocket {
      		header Connection *Upgrade*
      		header Upgrade websocket
      	}
      	reverse_proxy @websocket obbyircd:${WS_PORT:-8080}
      	reverse_proxy obby-api:8080
      }