MythEclipse
5425f6d33d
- Added new configuration options: trustProxy, uploadConcurrency, batchMaxItems, batchMaxSizeBytes, and maxRequestBodyBytes to AppConfig. - Implemented utility functions for parsing environment variables and masking sensitive data. - Updated rate limiting logic to use configurable window size and maximum requests per window. - Introduced a middleware for rate limiting on specific routes. - Refactored file handling routes to support streaming downloads instead of redirects. - Improved error handling and response formatting in file routes. - Added support for oversized request rejection based on Content-Length header. - Updated Swagger documentation to reflect changes in API behavior and responses. - Enhanced tests to cover new features and ensure proper functionality.
64 lines
2.1 KiB
YAML
64 lines
2.1 KiB
YAML
version: '3.8'
|
|
|
|
services:
|
|
app:
|
|
image: ghcr.io/mytheclipse/teleuploader:latest
|
|
container_name: teleuploader-app
|
|
restart: always
|
|
environment:
|
|
- BOT_TOKEN=${BOT_TOKEN}
|
|
- ADDITIONAL_BOT_TOKENS=${ADDITIONAL_BOT_TOKENS:-}
|
|
- STORAGE_CHANNEL_ID=${STORAGE_CHANNEL_ID}
|
|
- BASE_URL=${BASE_URL}
|
|
- DATABASE_URL=${DATABASE_URL}
|
|
- PORT=3000
|
|
- NODE_ENV=production
|
|
- LOG_LEVEL=info
|
|
- TRUST_PROXY=true
|
|
- UPLOAD_CONCURRENCY=${UPLOAD_CONCURRENCY:-8}
|
|
- BATCH_MAX_ITEMS=${BATCH_MAX_ITEMS:-20}
|
|
- BATCH_MAX_SIZE_BYTES=${BATCH_MAX_SIZE_BYTES:-524288000}
|
|
- MAX_REQUEST_BODY_BYTES=${MAX_REQUEST_BODY_BYTES:-2147483648}
|
|
- RATE_LIMIT_WINDOW_MS=${RATE_LIMIT_WINDOW_MS:-60000}
|
|
- RATE_LIMIT_MAX_REQUESTS=${RATE_LIMIT_MAX_REQUESTS:-30}
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
read_only: true
|
|
tmpfs:
|
|
- /tmp:size=4g,mode=1777
|
|
deploy:
|
|
resources:
|
|
limits:
|
|
cpus: '2.0'
|
|
memory: 2G
|
|
reservations:
|
|
cpus: '0.5'
|
|
memory: 512M
|
|
healthcheck:
|
|
test:
|
|
- CMD-SHELL
|
|
- curl -sf http://localhost:3000/health || exit 1
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 15s
|
|
networks:
|
|
- app-shared-net
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.teleuploader.rule=Host(`upload.asepharyana.my.id`)"
|
|
- "traefik.http.routers.teleuploader.entrypoints=websecure"
|
|
- "traefik.http.routers.teleuploader.tls=true"
|
|
- "traefik.http.routers.teleuploader.tls.certresolver=letsencrypt"
|
|
- "traefik.http.services.teleuploader.loadbalancer.server.port=3000"
|
|
- "traefik.http.middlewares.teleuploader-rl.ratelimit.average=300"
|
|
- "traefik.http.middlewares.teleuploader-rl.ratelimit.burst=100"
|
|
- "traefik.http.middlewares.teleuploader-rl.ratelimit.period=1m"
|
|
- "traefik.http.middlewares.teleuploader-buf.buffering.maxRequestBodyBytes=2147483648"
|
|
- "traefik.http.routers.teleuploader.middlewares=teleuploader-rl@docker,teleuploader-buf@docker"
|
|
|
|
networks:
|
|
app-shared-net:
|
|
name: app-shared-net
|
|
external: true
|