NilsBriggen
30dd2d5b75
- android.Dockerfile: build arm64-v8a only (--max-workers=2) → ~48MB APK, ~4x less compile (the 4-ABI build timed out on the shared prod runner). - ci.yml: build-apk runs only on version tags (v*), timeout 120m — normal pushes no longer peg the box; web still auto-deploys on every master push. - wisp.compose.yml: mount /srv/wisp/wisp.apk read-only so the download survives web container rebuilds. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
42 lines
1.6 KiB
YAML
42 lines
1.6 KiB
YAML
# Self-contained compose project for wisp.briggen.dev.
|
|
# Deploy: get the repo onto the server at /root/wisp, then:
|
|
# cd /root/wisp && docker compose -f deploy/wisp.compose.yml --project-directory . up -d --build
|
|
# Joins the EXISTING external `proxy` network — the shared Traefik stack is untouched.
|
|
# Wildcard *.briggen.dev DNS + Traefik's letsencrypt resolver issue TLS automatically.
|
|
name: wisp
|
|
|
|
services:
|
|
wisp:
|
|
# Build the static web app (Bun + Expo export) into an nginx image that
|
|
# serves it with the cross-origin isolation headers threaded WASM needs.
|
|
build:
|
|
context: .
|
|
dockerfile: docker/web.Dockerfile
|
|
container_name: wisp
|
|
restart: unless-stopped
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
# Static nginx; tiny footprint. Caps keep the blast radius off the shared host.
|
|
mem_limit: 256m
|
|
memswap_limit: 256m
|
|
pids_limit: 200
|
|
cpus: 1.0
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.wisp.rule=Host(`wisp.briggen.dev`)"
|
|
- "traefik.http.routers.wisp.entrypoints=websecure"
|
|
- "traefik.http.routers.wisp.tls.certresolver=letsencrypt"
|
|
- "traefik.http.services.wisp.loadbalancer.server.port=8080"
|
|
# The downloadable Android APK, published to the host by the build-apk CI job
|
|
# (or a local build). Mounted read-only so it survives web container rebuilds.
|
|
# NOTE: /srv/wisp/wisp.apk must exist on the host before `up` (else Docker
|
|
# creates a directory there). The publish step creates it.
|
|
volumes:
|
|
- /srv/wisp/wisp.apk:/usr/share/nginx/html/wisp.apk:ro
|
|
networks:
|
|
- proxy
|
|
|
|
networks:
|
|
proxy:
|
|
external: true
|