airano-ir
9b70b259bb
Plugin visibility control, UI/UX fixes, unified admin panel, database-backed settings, and security hardening. Highlights: - ENABLED_PLUGINS env var for plugin visibility (F.1) - Admin designation via ADMIN_EMAILS (F.4a) - Master key scope control (F.4b) - Panel unification + settings from UI (F.4c) - exec() removal, shell injection fix, bcrypt migration (F.8) - 5 new test suites Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
84 lines
2.6 KiB
YAML
84 lines
2.6 KiB
YAML
# ===================================
|
|
# MCP Hub — Docker Compose (Coolify)
|
|
# ===================================
|
|
#
|
|
# Coolify auto-reads the 'environment' block below and shows
|
|
# each variable in the UI for editing. Just deploy and fill values.
|
|
#
|
|
# Setup:
|
|
# 1. New Resource → Docker Compose → point to this file
|
|
# 2. Fill environment variables in Coolify UI
|
|
# 3. Set domain (e.g., mcp.yourdomain.com)
|
|
# 4. Deploy
|
|
# ===================================
|
|
|
|
services:
|
|
mcp-server:
|
|
build:
|
|
context: .
|
|
dockerfile: Dockerfile
|
|
container_name: mcphub
|
|
restart: unless-stopped
|
|
|
|
# No 'ports' — Coolify reverse proxy routes traffic via EXPOSE 8000
|
|
|
|
environment:
|
|
- PYTHONUNBUFFERED=1
|
|
|
|
# === REQUIRED ===
|
|
- MASTER_API_KEY=${MASTER_API_KEY}
|
|
- ENCRYPTION_KEY=${ENCRYPTION_KEY}
|
|
- DASHBOARD_SESSION_SECRET=${DASHBOARD_SESSION_SECRET}
|
|
|
|
# === OAUTH SOCIAL LOGIN (for user registration) ===
|
|
- GITHUB_CLIENT_ID=${GITHUB_CLIENT_ID:-}
|
|
- GITHUB_CLIENT_SECRET=${GITHUB_CLIENT_SECRET:-}
|
|
- GOOGLE_CLIENT_ID=${GOOGLE_CLIENT_ID:-}
|
|
- GOOGLE_CLIENT_SECRET=${GOOGLE_CLIENT_SECRET:-}
|
|
- PUBLIC_URL=${PUBLIC_URL:-}
|
|
- SESSION_EXPIRY_HOURS=${SESSION_EXPIRY_HOURS:-168}
|
|
|
|
# === ADMIN SYSTEM (F.4) ===
|
|
- ADMIN_EMAILS=${ADMIN_EMAILS:-}
|
|
- DISABLE_MASTER_KEY_LOGIN=${DISABLE_MASTER_KEY_LOGIN:-false}
|
|
|
|
# === LOGGING ===
|
|
- LOG_LEVEL=${LOG_LEVEL:-INFO}
|
|
|
|
# === SITE MANAGEMENT (E.3) ===
|
|
- MAX_SITES_PER_USER=${MAX_SITES_PER_USER:-10}
|
|
- USER_RATE_LIMIT_PER_MIN=${USER_RATE_LIMIT_PER_MIN:-30}
|
|
- USER_RATE_LIMIT_PER_HR=${USER_RATE_LIMIT_PER_HR:-500}
|
|
|
|
# === ADMIN-MANAGED SITES (optional) ===
|
|
# Add WordPress/Gitea/n8n/etc. sites here if you want admin-level access.
|
|
# Users can add their own sites via the dashboard without these.
|
|
# Format: {PLUGIN_TYPE}_{SITE_ID}_{CONFIG_KEY}
|
|
#
|
|
# - WORDPRESS_SITE1_URL=${WORDPRESS_SITE1_URL:-}
|
|
# - WORDPRESS_SITE1_USERNAME=${WORDPRESS_SITE1_USERNAME:-}
|
|
# - WORDPRESS_SITE1_APP_PASSWORD=${WORDPRESS_SITE1_APP_PASSWORD:-}
|
|
# - WORDPRESS_SITE1_ALIAS=${WORDPRESS_SITE1_ALIAS:-}
|
|
|
|
healthcheck:
|
|
test: ["CMD", "wget", "-qO-", "http://localhost:8000/health"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 40s
|
|
|
|
volumes:
|
|
- mcp-data:/app/data # SQLite DB, API keys, OAuth data
|
|
- mcp-logs:/app/logs # Audit logs, health reports
|
|
- /var/run/docker.sock:/var/run/docker.sock:ro
|
|
|
|
# Coolify uses GID 988 for Docker socket
|
|
group_add:
|
|
- "988"
|
|
|
|
volumes:
|
|
mcp-data:
|
|
driver: local
|
|
mcp-logs:
|
|
driver: local
|