compose.yml

name: ceryx

services:
  ceryx:
    image: ${IMAGE_NAME:-ghcr.io/withlogicco/ceryx}:${IMAGE_TAG:-v1.0.0}
    restart: unless-stopped
    ports:
      - ${CERYX_EXTERNAL_HTTP_PORT:-80}:80
      - ${CERYX_EXTERNAL_HTTPS_PORT:-443}:443
    volumes:
      - ceryx_data:/var/lib/ceryx
    environment:
      CERYX_DISABLE_LETS_ENCRYPT: ${CERYX_DISABLE_LETS_ENCRYPT:-false}
      CERYX_LETS_ENCRYPT_CA: ${CERYX_LETS_ENCRYPT_CA:-https://acme-v02.api.letsencrypt.org/directory}
      CERYX_STORAGE_BACKEND: ${CERYX_STORAGE_BACKEND:-sqlite}
      CERYX_SQLITE_PATH: ${CERYX_SQLITE_PATH:-/var/lib/ceryx/db.sqlite}
      CERYX_SQLITE_WAL_MODE: ${CERYX_SQLITE_WAL_MODE:-true}
      CERYX_SQLITE_MMAP_SIZE: ${CERYX_SQLITE_MMAP_SIZE:-1073741824}
      CERYX_SQLITE_POOL_MODE: ${CERYX_SQLITE_POOL_MODE:-worker}
      CERYX_REDIS_HOST: ${CERYX_REDIS_HOST:-127.0.0.1}
      CERYX_REDIS_PORT: ${CERYX_REDIS_PORT:-6379}
      CERYX_REDIS_PASSWORD: ${CERYX_REDIS_PASSWORD:-}
      CERYX_REDIS_PREFIX: ${CERYX_REDIS_PREFIX:-ceryx}
      CERYX_REDIS_TIMEOUT: ${CERYX_REDIS_TIMEOUT:-100}
      CERYX_TLS_DEFAULT_CERTIFICATE: ${CERYX_TLS_DEFAULT_CERTIFICATE:-/etc/ceryx/ssl/default.crt}
      CERYX_TLS_DEFAULT_KEY: ${CERYX_TLS_DEFAULT_KEY:-/etc/ceryx/ssl/default.key}
      CERYX_MAX_REQUEST_BODY_SIZE: ${CERYX_MAX_REQUEST_BODY_SIZE:-100m}
      CERYX_DNS_RESOLVER: ${CERYX_DNS_RESOLVER:-127.0.0.11}
      CERYX_ROUTE_SETTINGS_DEFAULT_ENFORCE_HTTPS: ${CERYX_ROUTE_SETTINGS_DEFAULT_ENFORCE_HTTPS:-false}
      CERYX_ROUTE_SETTINGS_DEFAULT_MTLS_REQUIRE_CLIENT_CERTIFICATE: ${CERYX_ROUTE_SETTINGS_DEFAULT_MTLS_REQUIRE_CLIENT_CERTIFICATE:-false}
      CERYX_MTLS_DEFAULT_TRUSTED_CA: ${CERYX_MTLS_DEFAULT_TRUSTED_CA:-}
      CERYX_MTLS_DEFAULT_VERIFY_DEPTH: ${CERYX_MTLS_DEFAULT_VERIFY_DEPTH:-}
      CERYX_DOCKERIZE_EXTRA_ARGS: ${CERYX_DOCKERIZE_EXTRA_ARGS:-}
      CERYX_DEBUG: ${CERYX_DEBUG:-false}

networks:
  default:
    # Services on this network reach the API at http://ceryx:8080.
    name: ${CERYX_NETWORK:-ceryx}

volumes:
  ceryx_data: