silo-server/docker-compose.yml at main · Silo-Server/silo-server · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
services:
  postgres:
    image: pgvector/pgvector:pg18
    restart: unless-stopped
    shm_size: ${POSTGRES_SHM_SIZE:-8gb}
    environment:
      POSTGRES_USER: ${POSTGRES_USER:-silo}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-silo}
      POSTGRES_DB: ${POSTGRES_DB:-silo}
    ports:
      - "5432:5432"
    volumes:
      - ${SILO_DATA_ROOT:-/opt/silo}/postgres:/var/lib/postgresql
    command: ["postgres", "-c", "listen_addresses=*"]
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-silo}"]
      interval: 5s
      timeout: 3s
      retries: 5

  redis:
    image: redis:alpine
    restart: unless-stopped
    ports:
      - "6379:6379"
    volumes:
      - ${SILO_DATA_ROOT:-/opt/silo}/redis:/data
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 5s
      timeout: 3s
      retries: 5

  meilisearch:
    image: ${MEILISEARCH_IMAGE:-getmeili/meilisearch:latest}
    restart: unless-stopped
    profiles: [search]
    entrypoint:
      - /bin/sh
      - -euc
      - |
        if [ -z "$${MEILI_MASTER_KEY:-}" ]; then
          echo "MEILI_MASTER_KEY is required when enabling the search profile" >&2
          exit 1
        fi
        exec /bin/meilisearch
    environment:
      MEILI_MASTER_KEY: ${MEILI_MASTER_KEY:-}
    ports:
      - "${MEILISEARCH_HOST:-127.0.0.1}:${MEILISEARCH_PORT:-7700}:7700"
    volumes:
      - ${SILO_DATA_ROOT:-/opt/silo}/meilisearch:/meili_data

  silo:
    image: ${SILO_IMAGE:-ghcr.io/silo-server/silo-server:latest}
    restart: unless-stopped
    environment:
      MODE: integrated
      # Master key for at-rest credential encryption. Required — the server
      # refuses to start without it. Generate with: openssl rand -base64 48
      # Back it up SEPARATELY from your database dumps; losing it makes encrypted
      # secrets unrecoverable. See docs/architecture/secret-encryption.md.
      SECRET_KEY: ${SECRET_KEY:?Set SECRET_KEY in .env — generate one with openssl rand -base64 48}
      DATABASE_URL: postgres://${POSTGRES_USER:-silo}:${POSTGRES_PASSWORD:-silo}@postgres:5432/${POSTGRES_DB:-silo}?sslmode=disable
      REDIS_URL: redis://redis:6379
      SILO_PLUGIN_CACHE_DIR: /var/lib/silo/plugins
      POSTGRES_TUNE: ${POSTGRES_TUNE:-auto}
    ports:
      - "${PORT:-8090}:8080"
      - "${JF_PORT:-8096}:8096"
      - "${ABS_PORT:-13378}:13378"
    volumes:
      - ${MEDIA_ROOT:?Set MEDIA_ROOT in .env to the host media path}:${MEDIA_CONTAINER_ROOT:-/mnt/media}:ro
      - ${MEDIA_BOOKS_ROOT:-${MEDIA_ROOT}}:${MEDIA_BOOKS_CONTAINER_ROOT:-${MEDIA_CONTAINER_ROOT:-/mnt/media}/books}:ro
      - ${SILO_DATA_ROOT:-/opt/silo}/plugins:/var/lib/silo/plugins
      - ${SILO_DATA_ROOT:-/opt/silo}/compat:/var/lib/silo/compat
      - ${SILO_DATA_ROOT:-/opt/silo}/transcode:/tmp/silo-transcode
      - ${SILO_DATA_ROOT:-/opt/silo}/catalog-seeds:/catalog-seeds:ro
      - ${SILO_DATA_ROOT:-/opt/silo}/audiobook-covers:/var/lib/silo/audiobook-covers
      - /proc/meminfo:/host/proc/meminfo:ro
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
    env_file:
      - path: .env
        required: false
    devices:
      - /dev/dri:/dev/dri

  # Optional distributed-mode example. Most single-host installs should
  # just use the integrated service above.
  # silo-proxy:
  #   image: ${SILO_IMAGE:-ghcr.io/silo-server/silo-server:latest}
  #   restart: unless-stopped
  #   profiles: [proxy]
  #   environment:
  #     MODE: proxy
  #     # Must be the SAME SECRET_KEY as the primary node (shared encrypted data).
  #     SECRET_KEY: ${SECRET_KEY:?Set SECRET_KEY in .env — generate one with openssl rand -base64 48}
  #     DATABASE_URL: postgres://${POSTGRES_USER:-silo}:${POSTGRES_PASSWORD:-silo}@postgres:5432/${POSTGRES_DB:-silo}?sslmode=disable
  #     REDIS_URL: redis://redis:6379
  #     PORT: "8080"
  #   ports:
  #     - "${PROXY_PORT:-8083}:8080"
  #   volumes:
  #     - ${MEDIA_ROOT:?Set MEDIA_ROOT in .env to the host media path}:${MEDIA_CONTAINER_ROOT:-/mnt/media}:ro
  #   depends_on:
  #     postgres:
  #       condition: service_healthy
  #     redis:
  #       condition: service_healthy
  #   env_file:
  #     - path: .env
  #       required: false

  # Optional distributed-mode example. Most single-host installs should
  # just use the integrated service above.
  # silo-transcode:
  #   image: ${SILO_IMAGE:-ghcr.io/silo-server/silo-server:latest}
  #   restart: unless-stopped
  #   profiles: [transcode]
  #   environment:
  #     MODE: transcode
  #     # Must be the SAME SECRET_KEY as the primary node (shared encrypted data).
  #     SECRET_KEY: ${SECRET_KEY:?Set SECRET_KEY in .env — generate one with openssl rand -base64 48}
  #     DATABASE_URL: postgres://${POSTGRES_USER:-silo}:${POSTGRES_PASSWORD:-silo}@postgres:5432/${POSTGRES_DB:-silo}?sslmode=disable
  #     REDIS_URL: redis://redis:6379
  #     SILO_PLUGIN_CACHE_DIR: /var/lib/silo/plugins
  #     PORT: "8080"
  #   ports:
  #     - "${TRANSCODE_PORT:-8082}:8080"
  #   volumes:
  #     - ${MEDIA_ROOT:?Set MEDIA_ROOT in .env to the host media path}:${MEDIA_CONTAINER_ROOT:-/mnt/media}:ro
  #     - ${SILO_DATA_ROOT:-/opt/silo}/plugins:/var/lib/silo/plugins
  #     - ${SILO_DATA_ROOT:-/opt/silo}/transcode:/tmp/silo-transcode
  #   depends_on:
  #     postgres:
  #       condition: service_healthy
  #     redis:
  #       condition: service_healthy
  #   env_file:
  #     - path: .env
  #       required: false