a39406c12b
Add production deployment configs for the collab relay and locator: region-split compose (CN/global), direct nginx gateways and location maps, the CN docker-user firewall install/verify/validate tooling and systemd unit, and an SoftHSM-backed locator variant. Extend the collab security/deployment boundary checks to cover the new artifacts. The CN application host address is a placeholder (10.0.0.10); substitute the real private address at deploy time.
11 lines
250 B
YAML
11 lines
250 B
YAML
services:
|
|
relay:
|
|
environment:
|
|
OPENPENCIL_COLLAB_RELAY_HOME_REGION: cn
|
|
OPENPENCIL_COLLAB_RELAY_MAX_PENDING_PER_SOURCE: "1024"
|
|
ports:
|
|
- target: 8091
|
|
published: "8091"
|
|
host_ip: 10.0.0.10
|
|
protocol: tcp
|