anikber/epic-lore-server repository overview

networks:
  lore-net:
    driver: bridge
    name: lore-net

  internal:
    driver: bridge
    internal: true

volumes:
  lore-data:
    driver: local
  lore-certs:
    driver: local

services:
  # ------------------------------------------------------------
  # HELPER SERVICE: TLS CERTIFICATE GENERATION
  # ------------------------------------------------------------
  cert-gen:
    image: alpine:3.19
    container_name: lore-cert-gen
    restart: "no"        # Run once and exit
    user: root
    command: >
      sh -c '
        if [ ! -f /certs/cert.pem ] || [ ! -f /certs/key.pem ]; then
          echo "Generating self-signed QUIC certificate..."
          openssl req -x509 -newkey rsa:2048 -nodes \
            -keyout /certs/key.pem \
            -out /certs/cert.pem \
            -days 365 \
            -subj "/CN=localhost" \
            -addext "subjectAltName=IP:127.0.0.1,DNS:localhost"
          chown ${UID:-1000}:${GID:-1000} /certs/*.pem
          echo "Certificates generated successfully."
        else
          echo "Certificates already exist. Skipping generation."
        fi
      '
    volumes:
      - ./certs:/certs   # Host directory used to store certificates

    # Network connection is optional, but included for consistency
    networks:
      - internal

  # ------------------------------------------------------------
  # MAIN LORE SERVER
  # ------------------------------------------------------------
  lore-server:
    image: anikber/epic-lore-server:v0.8.3
    container_name: lore-server
    restart: unless-stopped

    # Start only after certificates have been successfully generated
    depends_on:
      cert-gen:
        condition: service_completed_successfully

    # Run the container with the host user's UID/GID
    # so files created in ./data have the correct ownership
    user: "${UID:-1000}:${GID:-1000}"

    # Expose only the required ports
    ports:
      - "41337:41337/tcp"
      - "41337:41337/udp"
      - "41339:41339/tcp"

    # Mount persistent volumes
    volumes:
      # Persistent data storage
      - ./data:/data

      # TLS certificates (read-only)
      - ./certs/cert.pem:/etc/lore/cert.pem:ro
      - ./certs/key.pem:/etc/lore/key.pem:ro

      # Server configuration
      - ./config/local.toml:/etc/lore/config/local.toml:ro

    # Networks
    networks:
      - internal
      - lore-net

    # Health check endpoint
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:41339/health_check"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 10s

# UID and GID of the host user who will own the data directory.
# You can find them by running:
#   id -u
#   id -g
UID=1000
GID=1000