Sterister
e6fdf31b49
Some checks failed
Test / test (push) Has been cancelled
Cross-platform vectors / TypeScript vectors (bun) (push) Has been cancelled
Cross-platform vectors / Kotlin vectors (gradle) (push) Has been cancelled
Docker build and publish / docker (push) Has been cancelled
Publish / publish (push) Has been cancelled
V3.1 → V3.12 consolidated and tagged for the first GA release. Wire format unchanged from 0.4.x — 4.0 peers interoperate with 0.4.x peers byte-for-byte. The version bump is semantic: audit-cycle complete, opt-in surface fully exposed, threat model refreshed for every new surface. Highlights: - All 24 @shade/* packages bumped to 4.0.0 in lockstep. - CHANGELOG 4.0.0 section is the canonical manifest of what landed. - THREAT-MODEL extended (§10 fingerprint gates, §11 WebRTC P2P, §12 Web-Worker boundary) + residual-risks table refreshed. - OpenAPI now covers all 27 routes: prekey, transfer, KT, inbox, bridge, observer, /metrics, /healthz, /ready. - MIGRATION 0.3.x → 4.0 documented + smoke-tested against shade migrate-storage on a real SQLite DB. - docs/audit/REVIEW-BUNDLE.md + SCOPE.md ready for external reviewer. - scripts/soak.ts harness for the GA-stable 2-week soak window. - All V*.md plans archived under docs/archive/ with Status: Done. - Voice/Video carved out into V5.0; 4.0 audit focuses on the frozen non-realtime stack. Tests: TS 1000/1000 + Kotlin 11/11 cross-platform vectors green. Docker: gt.zyon.no/stian/shade-prekey:4.0.0 builds and reports version 4.0.0 on /health. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
56 lines
1.8 KiB
Docker
56 lines
1.8 KiB
Docker
# ─── Build stage ────────────────────────────────────────────
|
|
FROM oven/bun:1 AS builder
|
|
|
|
WORKDIR /build
|
|
|
|
# Copy workspace root config
|
|
COPY package.json bun.lock tsconfig.json ./
|
|
|
|
# Copy all packages the server + observer + dashboard need
|
|
COPY packages ./packages
|
|
|
|
RUN bun install --frozen-lockfile
|
|
|
|
# Build the dashboard SPA → dist/, then copy to observer's dist/
|
|
RUN cd packages/shade-dashboard && bun run build
|
|
|
|
# ─── Production stage ───────────────────────────────────────
|
|
FROM oven/bun:1-alpine
|
|
|
|
LABEL org.opencontainers.image.title="Shade Prekey Server"
|
|
LABEL org.opencontainers.image.description="E2EE prekey distribution server with live observer (Signal Protocol)"
|
|
LABEL org.opencontainers.image.source="https://gt.zyon.no/Stian/Shade"
|
|
LABEL org.opencontainers.image.licenses="MIT"
|
|
LABEL org.opencontainers.image.vendor="Stian"
|
|
|
|
# curl for healthcheck
|
|
RUN apk add --no-cache curl
|
|
|
|
# Non-root user
|
|
RUN addgroup -S shade && adduser -S shade -G shade
|
|
|
|
WORKDIR /app
|
|
COPY --from=builder --chown=shade:shade /build /app
|
|
|
|
# Persistent data directory (SQLite file or any sidecar state)
|
|
RUN mkdir -p /data && chown shade:shade /data
|
|
VOLUME ["/data"]
|
|
|
|
USER shade
|
|
|
|
EXPOSE 3900
|
|
|
|
# Defaults — override via `docker run -e`
|
|
ENV SHADE_PREKEY_DB_PATH=/data/shade-prekeys.db
|
|
ENV SHADE_INBOX_DB_PATH=/data/shade-inbox.db
|
|
ENV PORT=3900
|
|
ENV SHADE_LOG_LEVEL=info
|
|
ENV SHADE_STALE_DAYS=30
|
|
ENV SHADE_CLEANUP_INTERVAL_HOURS=24
|
|
ENV SHADE_INBOX_PRUNE_INTERVAL_MINUTES=5
|
|
|
|
HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
|
|
CMD curl -fsS http://localhost:${PORT}/health || exit 1
|
|
|
|
CMD ["bun", "run", "packages/shade-server/src/standalone.ts"]
|