clearmacro-provider/compose.prod.yaml at main · superfluid-org/clearmacro-provider · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
services:
  app:
    build:
      context: .
      dockerfile: Dockerfile
    # SQLite on a Docker named volume is typically root-owned; the image runs as `node` (Dockerfile).
    # Run as root here so migrations and WAL can write under `/data` (same pattern as compose.e2e.yaml).
    user: "0:0"
    restart: unless-stopped
    # Host `.env` is the source of truth for optional knobs (SAFE_*, readiness, batch size, …).
    # Keep listing only container overrides + compose-time required checks here.
    env_file:
      - .env
    environment:
      NODE_ENV: production
      HOST: 0.0.0.0
      PORT: "3000"
      DATABASE_PATH: /data/clearmacro-provider.sqlite
      PROVIDER_CONFIG_PATH: ${PROVIDER_CONFIG_PATH:-/app/config/provider.json}
      OZ_RELAYER_URL: ${OZ_RELAYER_URL:-http://oz-relayer:8080}
      OZ_RELAYER_API_KEY: ${OZ_RELAYER_API_KEY:?set OZ_RELAYER_API_KEY}
      PROVIDER_NAME: ${PROVIDER_NAME:?set PROVIDER_NAME}
    ports:
      - "${CLEARMACRO_PROVIDER_HOST_PORT:-3000}:3000"
    depends_on:
      oz-relayer:
        condition: service_started
    volumes:
      - ./config/provider.json:/app/config/provider.json:ro
      - app-data:/data

  redis:
    image: redis:7-bookworm
    restart: unless-stopped
    command:
      - redis-server
      - --appendonly
      - "yes"
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 2s
      timeout: 5s
      retries: 30
      start_period: 10s
    volumes:
      - oz-redis-data:/data

  oz-relayer:
    image: openzeppelin/openzeppelin-relayer:${OZ_RELAYER_VERSION:-v1.4.0}
    restart: unless-stopped
    # Keystores under ./config/oz-relayer are often mode 0600; run as that host user (see .env.example).
    user: "${OZ_RELAYER_UID:?set OZ_RELAYER_UID}:${OZ_RELAYER_GID:?set OZ_RELAYER_GID}"
    depends_on:
      redis:
        condition: service_healthy
    environment:
      APP_PORT: 8080
      METRICS_PORT: 8081
      METRICS_ENABLED: "true"
      REDIS_URL: redis://redis:6379
      REPOSITORY_STORAGE_TYPE: ${OZ_REPOSITORY_STORAGE_TYPE:-redis}
      RESET_STORAGE_ON_START: ${OZ_RESET_STORAGE_ON_START:-false}
      STORAGE_ENCRYPTION_KEY: ${OZ_STORAGE_ENCRYPTION_KEY:?set OZ_STORAGE_ENCRYPTION_KEY}
      API_KEY: ${OZ_RELAYER_API_KEY:?set OZ_RELAYER_API_KEY}
      WEBHOOK_SIGNING_KEY: ${OZ_WEBHOOK_SIGNING_KEY:?set OZ_WEBHOOK_SIGNING_KEY}
      # OpenZeppelin image accepts passphrase under either name; set both to the same value.
      OZ_KEYSTORE_PASSPHRASE: ${OZ_KEYSTORE_PASSPHRASE:?set OZ_KEYSTORE_PASSPHRASE}
      KEYSTORE_PASSPHRASE: ${OZ_KEYSTORE_PASSPHRASE:?set OZ_KEYSTORE_PASSPHRASE}
      LOG_LEVEL: ${OZ_LOG_LEVEL:-info}
      IN_DOCKER: "true"
      # Above stock OZ defaults (100/300/100): single expected HTTP client is this app; reduces 429 under /readyz + worker.
      RATE_LIMIT_REQUESTS_PER_SECOND: ${RATE_LIMIT_REQUESTS_PER_SECOND:-500}
      RATE_LIMIT_BURST_SIZE: ${RATE_LIMIT_BURST_SIZE:-600}
      RELAYER_CONCURRENCY_LIMIT: ${RELAYER_CONCURRENCY_LIMIT:-200}
    volumes:
      - ./config/oz-relayer:/app/config:ro

  # One-off operator jobs (prod:apply-config / prod:check-config). Not started by `up`.
  admin:
    profiles: ["admin"]
    build:
      context: .
      dockerfile: Dockerfile
    user: "${OZ_RELAYER_UID:?set OZ_RELAYER_UID}:${OZ_RELAYER_GID:?set OZ_RELAYER_GID}"
    depends_on:
      redis:
        condition: service_healthy
      oz-relayer:
        condition: service_started
    environment:
      OZ_RELAYER_API_KEY: ${OZ_RELAYER_API_KEY:?set OZ_RELAYER_API_KEY}
      PROVIDER_CONFIG_PATH: /app/config/provider.json
      OZ_EVM_NETWORKS_OUT: /app/config/oz-relayer/networks/evm.json
      OZ_RELAYER_CONFIG_PATH: /app/config/oz-relayer/config.json
      RELAYER_REQUEST_TIMEOUT_MS: ${RELAYER_REQUEST_TIMEOUT_MS:-30000}
    volumes:
      - ./config/provider.json:/app/config/provider.json:ro
      - ./config/oz-relayer:/app/config/oz-relayer:rw

volumes:
  app-data:
  oz-redis-data: