mega2/macos-orbstack-mega2-compose.yml at main · gitmono-dev/mega2 · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
# mega2 local evaluation stack — macOS (OrbStack) variant.
#
# Prerequisite: OrbStack (provides `*.orb.local` DNS on the host and inside
# containers). On Linux Docker use `linux-mega2-compose.yml` instead.
#
# Quick start:
#   docker compose -f macos-orbstack-mega2-compose.yml up -d --wait
#
# The first start pulls `genedna/mega2:latest`, PostgreSQL, Redis, RustFS,
# and the RustFS CLI (`rc`). `rustfs-init` then creates the `mega2` bucket
# automatically; mega2 initializes its empty Monorepo during service startup.
#
# Access:
#   Mega2 API / Git Smart HTTP: http://127.0.0.1:9000
#   OpenAPI document:           http://127.0.0.1:9000/api/openapi.json
#   RustFS S3 endpoint:         http://mega2-rustfs.orb.local:9000
#   (artifact presigned URLs point here; OrbStack DNS resolves it both on the
#   host and inside containers, so host clients can download blobs directly)
#
# Observe or stop the stack:
#   docker compose -f macos-orbstack-mega2-compose.yml logs -f mega2
#   docker compose -f macos-orbstack-mega2-compose.yml down
#
# Named volumes preserve the PostgreSQL, Redis, RustFS, and mega2 data across
# `down` / future `up` commands. To discard this local evaluation instance:
#   docker compose -f macos-orbstack-mega2-compose.yml down -v
#
# This is deliberately a local-only, anonymous Git HTTP write setup:
# `push_auth=none` means clone, fetch, and push require no token. Port 9000 is
# bound to 127.0.0.1 for that reason. Do not replace it with 0.0.0.0 or expose
# it through a reverse proxy; use token or OAuth authentication for any shared
# or internet-facing deployment.
#
# mega2 本机试用环境 — macOS（OrbStack）版本。
#
# 前置需求：OrbStack（在宿主机与容器内都提供 `*.orb.local` DNS）。
# Linux Docker 请改用 `linux-mega2-compose.yml`。
#
# 快速启动：
#   docker compose -f macos-orbstack-mega2-compose.yml up -d --wait
#
# 首次启动会拉取 `genedna/mega2:latest`、PostgreSQL、Redis、RustFS 与
# RustFS CLI（`rc`）。`rustfs-init` 会自动创建 `mega2` bucket，mega2 则会
# 在服务启动时初始化空的 Monorepo。
#
# 访问地址：
#   Mega2 API / Git Smart HTTP: http://127.0.0.1:9000
#   OpenAPI document:           http://127.0.0.1:9000/api/openapi.json
#   RustFS S3 endpoint:         http://mega2-rustfs.orb.local:9000
#   （artifact 预签名 URL 指向这里；OrbStack DNS 在宿主机与容器内都能解析
#   该名称，宿主机客户端因此能直连对象存储下载 blob）
#
# 查看日志或停止服务：
#   docker compose -f macos-orbstack-mega2-compose.yml logs -f mega2
#   docker compose -f macos-orbstack-mega2-compose.yml down
#
# 具名 volumes 会在 `down` 或下次 `up` 后保留 PostgreSQL、Redis、RustFS
# 与 mega2 的数据。若要删除这个本机试用环境的所有数据：
#   docker compose -f macos-orbstack-mega2-compose.yml down -v
#
# 这是仅限本机使用的匿名 Git HTTP 写入设置：`push_auth=none` 代表 clone、
# fetch 与 push 都不需要 token。因此 9000 端口只绑定 127.0.0.1。请勿改成
# 0.0.0.0 或通过反向代理公开；共享或互联网部署必须改用 token 或 OAuth。
name: mega2-macos

services:
  postgres:
    image: postgres:18.6-alpine3.24
    environment:
      POSTGRES_USER: mega2
      POSTGRES_PASSWORD: mega2_local_password
      POSTGRES_DB: mega2
    volumes:
      - mega2-postgres:/var/lib/postgresql
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U mega2 -d mega2"]
      interval: 2s
      timeout: 5s
      retries: 20

  redis:
    image: redis:8.10.1-alpine3.23
    volumes:
      - mega2-redis:/data
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 2s
      timeout: 5s
      retries: 20

  rustfs:
    image: rustfs/rustfs:1.0.0@sha256:8cc9801755448b71a786705ce76692c77e14936cccd87cf2fc31842e58f4d1ff
    # Fixed container name → stable OrbStack DNS name `mega2-rustfs.orb.local`,
    # which resolves both on the host and inside containers. Artifact presigned
    # URLs carry this host in their SigV4 signature, so one name must serve both.
    container_name: mega2-rustfs
    environment:
      RUSTFS_VOLUMES: /data
      RUSTFS_ADDRESS: 0.0.0.0:9000
      RUSTFS_CONSOLE_ADDRESS: 0.0.0.0:9001
      RUSTFS_CONSOLE_ENABLE: "true"
      RUSTFS_ACCESS_KEY: rustfs
      RUSTFS_SECRET_KEY: rustfs_secret
      RUSTFS_UNSAFE_BYPASS_DISK_CHECK: "true"
    volumes:
      - mega2-rustfs:/data
    healthcheck:
      test: ["CMD", "curl", "-f", "http://127.0.0.1:9000/health"]
      interval: 2s
      timeout: 5s
      retries: 30
      start_period: 10s

  rustfs-init:
    image: rustfs/rc:v0.1.36@sha256:ab024bfebee49a750ce886b4c70963ccd9ddaa03f491704a90710641d7a26699
    depends_on:
      rustfs:
        condition: service_healthy
    entrypoint: >
      /bin/sh -c "
      /usr/bin/rc alias set local http://rustfs:9000 rustfs rustfs_secret &&
      /usr/bin/rc mb --ignore-existing local/mega2 &&
      exec sleep infinity
      "
    healthcheck:
      test: ["CMD-SHELL", "/usr/bin/rc ls local/mega2"]
      interval: 2s
      timeout: 5s
      retries: 20
      start_period: 3s

  mega2:
    image: genedna/mega2:latest
    pull_policy: always
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
      rustfs-init:
        condition: service_healthy
    environment:
      MEGA_BASE_DIR: /var/lib/mega2
      MEGA_DATABASE__DB_TYPE: postgres
      MEGA_DATABASE__DB_URL: postgres://mega2:mega2_local_password@postgres:5432/mega2
      MEGA_DATABASE__MIN_CONNECTION: 1
      MEGA_REDIS__URL: redis://redis:6379
      MEGA_MONOREPO__PUSH_POLICY: trunk
      MEGA_CEDAR__ENFORCEMENT: "off"
      MEGA_GIT__ANONYMOUS_ACCESS: "true"
      MEGA_GIT__PUSH_AUTH: none
      MEGA_GIT__SSH_RECEIVE_PACK: "false"
      MEGA_OBJECT_STORAGE__STORAGE_TYPE: s3compatible
      MEGA_OBJECT_STORAGE__S3__REGION: us-east-1
      MEGA_OBJECT_STORAGE__S3__BUCKET: mega2
      MEGA_OBJECT_STORAGE__S3__ACCESS_KEY_ID: rustfs
      MEGA_OBJECT_STORAGE__S3__SECRET_ACCESS_KEY: rustfs_secret
      # OrbStack DNS name: reachable from host clients (presigned URL download)
      # and from this container (SDK + presigning) alike. Linux has no such
      # DNS — see linux-mega2-compose.yml for the host-networking approach.
      MEGA_OBJECT_STORAGE__S3__ENDPOINT_URL: http://mega2-rustfs.orb.local:9000
      # OCI Distribution surface (/v2): storage-only morphology + this switch.
      MEGA_OCI__ENABLED: "true"
      MEGA_LOG__PRINT_STD: "true"
    command: ["service", "http", "--host", "0.0.0.0", "-p", "8000"]
    volumes:
      - mega2-data:/var/lib/mega2
    ports:
      - "127.0.0.1:9000:8000"
    healthcheck:
      test: ["CMD", "curl", "-fsS", "http://127.0.0.1:8000/api/openapi.json"]
      interval: 3s
      timeout: 5s
      retries: 40
      start_period: 20s

volumes:
  mega2-postgres:
  mega2-redis:
  mega2-rustfs:
  mega2-data: