wehub-resource-sync
070959e133
landing-page-staging / Deploy landing page to staging (push) Has been skipped
landing-page-ci / Validate landing page (push) Failing after 4s
visual-baseline / Capture visual baselines (push) Has been cancelled
bake-plugin-previews / Bake plugin previews (push) Has been cancelled
65 lines
3.2 KiB
YAML
65 lines
3.2 KiB
YAML
# Linux override for docker-compose.yml.
|
|
#
|
|
# Switches to host networking so the daemon sees browser connections as
|
|
# 127.0.0.1, satisfying the loopback guard on connector endpoints
|
|
# (Composio key save, GitHub OAuth, etc.) that bridge networking breaks.
|
|
#
|
|
# Also mounts host-installed agent CLIs (Claude Code, opencode, …) into the
|
|
# container so Open Design can spawn them as agent runtimes. Requires the
|
|
# local image built from Dockerfile.local (adds glibc compat for Alpine).
|
|
# See README.md "Linux: mounting host agent CLIs" for setup instructions.
|
|
#
|
|
# network_mode: host is Linux-only. macOS and Windows Docker Desktop users
|
|
# should use the base docker-compose.yml behind a loopback-bound reverse proxy.
|
|
#
|
|
# Used automatically by install.sh on Linux. To apply manually:
|
|
# docker compose -f docker-compose.yml -f docker-compose.linux.yml up -d
|
|
name: open-design
|
|
|
|
services:
|
|
open-design:
|
|
# Cap CPU so a busy agent run does not starve the host.
|
|
cpus: '1.5'
|
|
# Drop the bridge port mapping — host networking makes it irrelevant.
|
|
ports: !reset []
|
|
network_mode: host
|
|
environment:
|
|
# Re-declare both port vars so the daemon listener follows OPEN_DESIGN_PORT
|
|
# even without the bridge mapping (which normally enforced the remap).
|
|
OD_PORT: ${OPEN_DESIGN_PORT:-7456}
|
|
OD_WEB_PORT: ${OPEN_DESIGN_PORT:-7456}
|
|
# With host networking the daemon binds directly on the host's interfaces.
|
|
# Lock it to loopback so the base file's 0.0.0.0 default does not expose
|
|
# Open Design on the LAN or public IP.
|
|
OD_BIND_HOST: 127.0.0.1
|
|
# Prepend host-bin mounts so the daemon finds agent CLIs before
|
|
# any container-local stubs.
|
|
PATH: /mnt/host-local-bin:/mnt/host-opencode:/usr/local/bin:/usr/bin:/bin
|
|
# API keys for agent CLIs. Leave blank to omit.
|
|
DEEPSEEK_API_KEY: ${DEEPSEEK_API_KEY:-}
|
|
ANTHROPIC_API_KEY: ${ANTHROPIC_API_KEY:-}
|
|
OPENAI_API_KEY: ${OPENAI_API_KEY:-}
|
|
volumes:
|
|
- ${HOME}/.local/bin:/mnt/host-local-bin:ro
|
|
- ${HOME}/.opencode/bin:/mnt/host-opencode:ro
|
|
# Claude Code versioned binaries — mounted at the same absolute path as the host
|
|
# so the ~/.local/bin/claude symlink resolves correctly inside the container.
|
|
- ${HOME}/.local/share/claude:${HOME}/.local/share/claude:ro
|
|
# Claude Code credentials — read-only; never written inside the container.
|
|
- ${HOME}/.claude:/home/open-design/.claude:ro
|
|
# Full glibc for CLIs that exceed what libc6-compat (gcompat) covers.
|
|
# amd64 only — on arm64 replace with /lib/aarch64-linux-gnu:/lib/aarch64-linux-gnu:ro
|
|
- /lib/x86_64-linux-gnu:/lib/x86_64-linux-gnu:ro
|
|
- /lib64:/lib64:ro
|
|
tmpfs:
|
|
# uid/gid must match the base image's open-design user (1001:1001).
|
|
- /home/open-design:uid=1001,gid=1001
|
|
healthcheck:
|
|
# Use wget (available in Alpine) instead of node — faster and does not
|
|
# compete with the daemon for CPU during startup.
|
|
test: ["CMD", "wget", "-q", "-O", "/dev/null", "http://127.0.0.1:${OPEN_DESIGN_PORT:-7456}/api/health"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 5
|
|
start_period: 30s # increased from 20s — glibc host mounts add startup latency
|