bump lk-jwt-service

2026-08-08 20:09:19 +00:00 · 2026-04-22 21:08:49 +02:00
parent 9fccd49d7d
commit 032ec662e9
1 changed files with 175 additions and 175 deletions
--- a/dev-backend-docker-compose.yml
+++ b/dev-backend-docker-compose.yml
@@ -1,175 +1,175 @@
-networks:
+networks:
-  ecbackend:
+  ecbackend:
-
+
-services:
+services:
-  auth-service:
+  auth-service:
-    image: ghcr.io/element-hq/lk-jwt-service:0.4.4
+    image: ghcr.io/element-hq/lk-jwt-service:pr_171
-    pull_policy: always
+    pull_policy: always
-    hostname: auth-server
+    hostname: auth-server
-    environment:
+    environment:
-      - LIVEKIT_JWT_PORT=6080
+      - LIVEKIT_JWT_PORT=6080
-      - LIVEKIT_URL=wss://matrix-rtc.m.localhost/livekit/sfu
+      - LIVEKIT_URL=wss://matrix-rtc.m.localhost/livekit/sfu
-      - LIVEKIT_KEY=devkey
+      - LIVEKIT_KEY=devkey
-      - LIVEKIT_SECRET=secret
+      - LIVEKIT_SECRET=secret
-      # If the configured homeserver runs on localhost, it'll probably be using
+      # If the configured homeserver runs on localhost, it'll probably be using
-      # a self-signed certificate
+      # a self-signed certificate
-      - LIVEKIT_INSECURE_SKIP_VERIFY_TLS=YES_I_KNOW_WHAT_I_AM_DOING
+      - LIVEKIT_INSECURE_SKIP_VERIFY_TLS=YES_I_KNOW_WHAT_I_AM_DOING
-      - LIVEKIT_FULL_ACCESS_HOMESERVERS=*
+      - LIVEKIT_FULL_ACCESS_HOMESERVERS=*
-    deploy:
+    deploy:
-      restart_policy:
+      restart_policy:
-        condition: on-failure
+        condition: on-failure
-    ports:
+    ports:
-      # HOST_PORT:CONTAINER_PORT
+      # HOST_PORT:CONTAINER_PORT
-      - 6080:6080
+      - 6080:6080
-    networks:
+    networks:
-      - ecbackend
+      - ecbackend
-
+
-  auth-service-1:
+  auth-service-1:
-    image: ghcr.io/element-hq/lk-jwt-service:0.4.4
+    image: ghcr.io/element-hq/lk-jwt-service:pr_171
-    pull_policy: always
+    pull_policy: always
-    hostname: auth-server-1
+    hostname: auth-server-1
-    environment:
+    environment:
-      - LIVEKIT_JWT_PORT=16080
+      - LIVEKIT_JWT_PORT=16080
-      - LIVEKIT_URL=wss://matrix-rtc.othersite.m.localhost/livekit/sfu
+      - LIVEKIT_URL=wss://matrix-rtc.othersite.m.localhost/livekit/sfu
-      - LIVEKIT_KEY=devkey
+      - LIVEKIT_KEY=devkey
-      - LIVEKIT_SECRET=secret
+      - LIVEKIT_SECRET=secret
-      # If the configured homeserver runs on localhost, it'll probably be using
+      # If the configured homeserver runs on localhost, it'll probably be using
-      # a self-signed certificate
+      # a self-signed certificate
-      - LIVEKIT_INSECURE_SKIP_VERIFY_TLS=YES_I_KNOW_WHAT_I_AM_DOING
+      - LIVEKIT_INSECURE_SKIP_VERIFY_TLS=YES_I_KNOW_WHAT_I_AM_DOING
-      - LIVEKIT_FULL_ACCESS_HOMESERVERS=*
+      - LIVEKIT_FULL_ACCESS_HOMESERVERS=*
-    deploy:
+    deploy:
-      restart_policy:
+      restart_policy:
-        condition: on-failure
+        condition: on-failure
-    ports:
+    ports:
-      # HOST_PORT:CONTAINER_PORT
+      # HOST_PORT:CONTAINER_PORT
-      - 16080:16080
+      - 16080:16080
-    networks:
+    networks:
-      - ecbackend
+      - ecbackend
-
+
-  livekit:
+  livekit:
-    image: livekit/livekit-server:v1.10.1
+    image: livekit/livekit-server:v1.10.1
-    pull_policy: always
+    pull_policy: always
-    hostname: livekit-sfu
+    hostname: livekit-sfu
-    command: --dev --config /etc/livekit.yaml
+    command: --dev --config /etc/livekit.yaml
-    restart: unless-stopped
+    restart: unless-stopped
-    # The SFU seems to work far more reliably when we let it share the host
+    # The SFU seems to work far more reliably when we let it share the host
-    # network rather than opening specific ports (but why?? we're not missing
+    # network rather than opening specific ports (but why?? we're not missing
-    # any…)
+    # any…)
-    ports:
+    ports:
-      # HOST_PORT:CONTAINER_PORT
+      # HOST_PORT:CONTAINER_PORT
-      - 7880:7880/tcp
+      - 7880:7880/tcp
-      - 7881:7881/tcp
+      - 7881:7881/tcp
-      - 7882:7882/tcp
+      - 7882:7882/tcp
-      - 50100-50200:50100-50200/udp
+      - 50100-50200:50100-50200/udp
-    volumes:
+    volumes:
-      - ./backend/dev_livekit.yaml:/etc/livekit.yaml:Z
+      - ./backend/dev_livekit.yaml:/etc/livekit.yaml:Z
-    networks:
+    networks:
-      - ecbackend
+      - ecbackend
-
+
-  livekit-1:
+  livekit-1:
-    image: livekit/livekit-server:v1.10.1
+    image: livekit/livekit-server:v1.10.1
-    pull_policy: always
+    pull_policy: always
-    hostname: livekit-sfu-1
+    hostname: livekit-sfu-1
-    command: --dev --config /etc/livekit.yaml
+    command: --dev --config /etc/livekit.yaml
-    restart: unless-stopped
+    restart: unless-stopped
-    # The SFU seems to work far more reliably when we let it share the host
+    # The SFU seems to work far more reliably when we let it share the host
-    # network rather than opening specific ports (but why?? we're not missing
+    # network rather than opening specific ports (but why?? we're not missing
-    # any…)
+    # any…)
-    ports:
+    ports:
-      # HOST_PORT:CONTAINER_PORT
+      # HOST_PORT:CONTAINER_PORT
-      - 17880:17880/tcp
+      - 17880:17880/tcp
-      - 17881:17881/tcp
+      - 17881:17881/tcp
-      - 17882:17882/tcp
+      - 17882:17882/tcp
-      - 50300-50400:50300-50400/udp
+      - 50300-50400:50300-50400/udp
-    volumes:
+    volumes:
-      - ./backend/dev_livekit-othersite.yaml:/etc/livekit.yaml:Z
+      - ./backend/dev_livekit-othersite.yaml:/etc/livekit.yaml:Z
-    networks:
+    networks:
-      - ecbackend
+      - ecbackend
-
+
-  synapse:
+  synapse:
-    hostname: homeserver
+    hostname: homeserver
-    image: ghcr.io/element-hq/synapse:latest
+    image: ghcr.io/element-hq/synapse:latest
-    pull_policy: always
+    pull_policy: always
-    environment:
+    environment:
-      - SYNAPSE_CONFIG_PATH=/data/cfg/homeserver.yaml
+      - SYNAPSE_CONFIG_PATH=/data/cfg/homeserver.yaml
-      # Needed for rootless podman-compose such that the uid/gid mapping does
+      # Needed for rootless podman-compose such that the uid/gid mapping does
-      # fit local user uid. If the container runs as root (uid 0) it is fine as
+      # fit local user uid. If the container runs as root (uid 0) it is fine as
-      # it actually maps to your non-root user on the host (e.g. 1000).
+      # it actually maps to your non-root user on the host (e.g. 1000).
-      # Otherwise uid mapping will not match your non-root user.
+      # Otherwise uid mapping will not match your non-root user.
-      - UID=0
+      - UID=0
-      - GID=0
+      - GID=0
-    volumes:
+    volumes:
-      - ./backend/synapse_tmp:/data:Z
+      - ./backend/synapse_tmp:/data:Z
-      - ./backend/dev_homeserver.yaml:/data/cfg/homeserver.yaml:Z
+      - ./backend/dev_homeserver.yaml:/data/cfg/homeserver.yaml:Z
-    networks:
+    networks:
-      - ecbackend
+      - ecbackend
-
+
-  synapse-1:
+  synapse-1:
-    hostname: homeserver-1
+    hostname: homeserver-1
-    image: ghcr.io/element-hq/synapse:latest
+    image: ghcr.io/element-hq/synapse:latest
-    pull_policy: always
+    pull_policy: always
-    environment:
+    environment:
-      - SYNAPSE_CONFIG_PATH=/data/cfg/homeserver.yaml
+      - SYNAPSE_CONFIG_PATH=/data/cfg/homeserver.yaml
-      # Needed for rootless podman-compose such that the uid/gid mapping does
+      # Needed for rootless podman-compose such that the uid/gid mapping does
-      # fit local user uid. If the container runs as root (uid 0) it is fine as
+      # fit local user uid. If the container runs as root (uid 0) it is fine as
-      # it actually maps to your non-root user on the host (e.g. 1000).
+      # it actually maps to your non-root user on the host (e.g. 1000).
-      # Otherwise uid mapping will not match your non-root user.
+      # Otherwise uid mapping will not match your non-root user.
-      - UID=0
+      - UID=0
-      - GID=0
+      - GID=0
-    volumes:
+    volumes:
-      - ./backend/synapse_tmp_othersite:/data:Z
+      - ./backend/synapse_tmp_othersite:/data:Z
-      - ./backend/dev_homeserver-othersite.yaml:/data/cfg/homeserver.yaml:Z
+      - ./backend/dev_homeserver-othersite.yaml:/data/cfg/homeserver.yaml:Z
-    networks:
+    networks:
-      - ecbackend
+      - ecbackend
-
+
-  element-web:
+  element-web:
-    image: ghcr.io/element-hq/element-web:develop
+    image: ghcr.io/element-hq/element-web:develop
-    pull_policy: always
+    pull_policy: always
-    volumes:
+    volumes:
-      - ./backend/ew.test.config.json:/app/config.json:Z
+      - ./backend/ew.test.config.json:/app/config.json:Z
-    environment:
+    environment:
-      ELEMENT_WEB_PORT: 8081
+      ELEMENT_WEB_PORT: 8081
-    ports:
+    ports:
-      - "8081:8081"
+      - "8081:8081"
-    networks:
+    networks:
-      - ecbackend
+      - ecbackend
-
+
-  element-web-1:
+  element-web-1:
-    image: ghcr.io/element-hq/element-web:develop
+    image: ghcr.io/element-hq/element-web:develop
-    pull_policy: always
+    pull_policy: always
-    volumes:
+    volumes:
-      - ./backend/ew.test.othersite.config.json:/app/config.json:Z
+      - ./backend/ew.test.othersite.config.json:/app/config.json:Z
-    environment:
+    environment:
-      ELEMENT_WEB_PORT: 18081
+      ELEMENT_WEB_PORT: 18081
-    ports:
+    ports:
-      # HOST_PORT:CONTAINER_PORT
+      # HOST_PORT:CONTAINER_PORT
-      - "18081:18081"
+      - "18081:18081"
-    networks:
+    networks:
-      - ecbackend
+      - ecbackend
-
+
-  nginx:
+  nginx:
-    #  see backend/dev_tls_setup for how to generate the tls certs
+    #  see backend/dev_tls_setup for how to generate the tls certs
-    hostname: synapse.m.localhost
+    hostname: synapse.m.localhost
-    image: nginx:latest
+    image: nginx:latest
-    pull_policy: always
+    pull_policy: always
-    volumes:
+    volumes:
-      - ./backend/dev_nginx.conf:/etc/nginx/conf.d/default.conf:Z
+      - ./backend/dev_nginx.conf:/etc/nginx/conf.d/default.conf:Z
-      - ./backend/dev_tls_m.localhost.key:/root/ssl/key.pem:Z
+      - ./backend/dev_tls_m.localhost.key:/root/ssl/key.pem:Z
-      - ./backend/dev_tls_m.localhost.crt:/root/ssl/cert.pem:Z
+      - ./backend/dev_tls_m.localhost.crt:/root/ssl/cert.pem:Z
-    ports:
+    ports:
-      # HOST_PORT:CONTAINER_PORT
+      # HOST_PORT:CONTAINER_PORT
-      - "443:443"
+      - "443:443"
-      - "8008:80"
+      - "8008:80"
-      - "4443:443"
+      - "4443:443"
-      - "8448:8448"
+      - "8448:8448"
-    extra_hosts:
+    extra_hosts:
-      - "host.docker.internal:host-gateway"
+      - "host.docker.internal:host-gateway"
-    depends_on:
+    depends_on:
-      - synapse
+      - synapse
-    networks:
+    networks:
-      ecbackend:
+      ecbackend:
-        aliases:
+        aliases:
-          - synapse.m.localhost
+          - synapse.m.localhost
-          - synapse.othersite.m.localhost
+          - synapse.othersite.m.localhost
-          - matrix-rtc.m.localhost
+          - matrix-rtc.m.localhost
-          - matrix-rtc.othersite.m.localhost
+          - matrix-rtc.othersite.m.localhost