first commit

2026-10-09 02:48:31 +07:00
commit 8db22bfaa6
17 changed files with 1722 additions and 0 deletions
@@ -0,0 +1,61 @@
+# =============================================================================
+# sicabe-control-panel — deploy panel (Next.js) via Docker Compose.
+#
+# Build image dulu:  ../../scripts/build-image.sh
+# Lalu jalankan     : docker compose up -d
+#
+# Persisten: volume bernama `panel-data` → `data/config.json` (hosts/modules/
+# services/service types) + `data/state.json`. Backup/restore dari UI
+# (Settings → Backup) tanpa menyentuh volume.
+#
+# PENTING: panel di container TIDAK bisa membaca filesystem platform → setiap
+# host di SICABE_HOSTS WAJIB punya `configUrl` (config-agent).
+#
+# NETWORK: default `network_mode: host` karena gateway host
+# (deploy/host-gateway) membuka `127.0.0.1:22375` — container di bridge TIDAK
+# bisa menjangkaunya via host.docker.internal. Dengan host network, `127.0.0.1`
+# berfungsi seperti di host (dan SAN sertifikat Trino `localhost` cocok).
+# Lihat README.md untuk varian bridge.
+# =============================================================================
+
+name: sicabe-control-panel
+
+services:
+  panel:
+    image: sicabe/control-panel:${PANEL_TAG:-latest}
+    # Biarkan `build` aktif bila ingin `docker compose up --build`.
+    build:
+      context: ../..
+      dockerfile: Dockerfile
+    container_name: sicabe-control-panel
+    network_mode: host
+    # `.env` dibuat dari env.example (cp env.example .env). `required: false`
+    # agar `docker compose config` tetap valid sebelum file dibuat.
+    env_file:
+      - path: .env
+        required: false
+    environment:
+      NODE_ENV: production
+      HOSTNAME: "0.0.0.0"
+      # Host network: port binding ditentukan PORT (bukan `ports:`).
+      PORT: "${PANEL_PORT:-3000}"
+    volumes:
+      - panel-data:/app/data
+    restart: unless-stopped
+    logging:
+      driver: json-file
+      options:
+        max-size: "10m"
+        max-file: "3"
+
+    # ── Varian BRIDGE (bila gateway dibuka ke alamat non-loopback) ────────────
+    # Hapus `network_mode: host` di atas, lalu tambahkan:
+    #   ports:
+    #     - "${PANEL_PORT:-3000}:3000"
+    #   extra_hosts:
+    #     - "host.docker.internal:host-gateway"
+    # dan set SICABE_HOSTS/URL memakai host.docker.internal (perhatikan SAN TLS
+    # Trino — host.docker.internal TIDAK ada di SAN).
+
+volumes:
+  panel-data: