yaoyao/compose.desktops.yaml

# Generated from compose.yaml and deploy/compose-desktops.json.
name: hermes-yaoyao

services:
  web:
    build:
      context: .
      dockerfile: Dockerfile
    image: "${HERMES_YAOYAO_IMAGE:-yaoyao:local}"
    restart: unless-stopped
    init: true
    read_only: true
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    ports:
      - "${HERMES_YAOYAO_BIND_ADDRESS:-127.0.0.1}:${HERMES_YAOYAO_PUBLISHED_PORT:-15300}:15300"
    extra_hosts:
      - "host.docker.internal:host-gateway"
    environment:
      NODE_ENV: production
      HERMES_YAOYAO_HOST: 0.0.0.0
      HERMES_YAOYAO_PORT: 15300
      HERMES_YAOYAO_UPSTREAM: "${HERMES_YAOYAO_UPSTREAM:-http://host.docker.internal:9119}"
      # Permit localhost access when the published host port differs from the
      # container's fixed 15300 port; configured public host names remain opt-in.
      HERMES_YAOYAO_ALLOWED_HOSTS: "localhost,127.0.0.1,${HERMES_YAOYAO_ALLOWED_HOSTS:-}"
      HERMES_YAOYAO_ALLOW_INSECURE_LAN: "1"
      HERMES_YAOYAO_SUPERVISE_DASHBOARD: "0"
      HERMES_YAOYAO_LOCAL_VM_HOST: "runner"
      HERMES_YAOYAO_COMPOSE_DESKTOPS: "[{\"id\":\"160fe7cd-e530-4ac5-a97f-26c19a362b11\",\"name\":\"共享桌面 1\",\"socketPath\":\"/run/yaoyao-desktops/desktop-1/desktop.sock\",\"networkSocketPath\":\"/run/yaoyao-networks/desktop-1/gateway.sock\",\"imageKey\":\"standard\"},{\"id\":\"eba5caaf-744e-4f27-bcdd-1f1f35d05a42\",\"name\":\"共享桌面 2\",\"socketPath\":\"/run/yaoyao-desktops/desktop-2/desktop.sock\",\"networkSocketPath\":\"/run/yaoyao-networks/desktop-2/gateway.sock\",\"imageKey\":\"standard\"}]"
      HERMES_YAOYAO_CHAT_CACHE_MODE: "${HERMES_YAOYAO_CHAT_CACHE_MODE:-prefer-local}"
      HERMES_YAOYAO_RELEASE_SOURCE: "${HERMES_YAOYAO_RELEASE_SOURCE:-https://github.com/Lsamien/yaoyao.git}"
      HERMES_YAOYAO_HOME: /home/node/.yaoyao
      HERMES_YAOYAO_APNS_KEY_FILE: "${HERMES_YAOYAO_APNS_KEY_FILE:-}"
      HERMES_YAOYAO_APNS_KEY_ID: "${HERMES_YAOYAO_APNS_KEY_ID:-}"
      HERMES_YAOYAO_APNS_TEAM_ID: "${HERMES_YAOYAO_APNS_TEAM_ID:-}"
      HERMES_YAOYAO_APNS_TOPIC: "${HERMES_YAOYAO_APNS_TOPIC:-}"
    volumes:
      - yaoyao-data:/home/node/.yaoyao
      - desktop-1-ipc:/run/yaoyao-desktops/desktop-1:ro
      - desktop-1-network-ipc:/run/yaoyao-networks/desktop-1:ro
      - desktop-2-ipc:/run/yaoyao-desktops/desktop-2:ro
      - desktop-2-network-ipc:/run/yaoyao-networks/desktop-2:ro
    tmpfs:
      - /tmp:mode=1777

  desktop-1:
    image: "${YAOYAO_DESKTOP_IMAGE:-hermes-yaoyao-desktop:0.4.0}"
    build:
      context: ./deploy/computer
      dockerfile: Dockerfile
    init: true
    restart: unless-stopped
    network_mode: "service:desktop-1-network"
    depends_on:
      desktop-1-network:
        condition: service_started
    shm_size: 512m
    mem_limit: 4g
    cpus: 2
    pids_limit: 512
    cap_drop:
      - ALL
    cap_add:
      - SETUID
      - SETGID
      - CHOWN
      - KILL
    environment:
      YAOYAO_COMPOSE_DESKTOP_ID: "160fe7cd-e530-4ac5-a97f-26c19a362b11"
    volumes:
      - desktop-1-workspace:/home/cua/workspace
      - desktop-1-ipc:/run/yaoyao-private/bridge
  desktop-1-network:
    image: localhost/yaoyao/network:1
    build:
      context: ./deploy/computer
      dockerfile: Dockerfile.network
    command: ["--init", "--socket"]
    init: true
    restart: unless-stopped
    network_mode: none
    dns: ["198.18.0.1"]
    read_only: true
    cap_drop: ["ALL"]
    cap_add: ["NET_ADMIN"]
    devices: ["/dev/net/tun:/dev/net/tun"]
    mem_limit: 128m
    pids_limit: 64
    environment:
      YAOYAO_COMPOSE_DESKTOP_ID: "160fe7cd-e530-4ac5-a97f-26c19a362b11"
    volumes:
      - desktop-1-network-ipc:/run/yaoyao-network
  desktop-2:
    image: "${YAOYAO_DESKTOP_IMAGE:-hermes-yaoyao-desktop:0.4.0}"
    build:
      context: ./deploy/computer
      dockerfile: Dockerfile
    init: true
    restart: unless-stopped
    network_mode: "service:desktop-2-network"
    depends_on:
      desktop-2-network:
        condition: service_started
    shm_size: 512m
    mem_limit: 4g
    cpus: 2
    pids_limit: 512
    cap_drop:
      - ALL
    cap_add:
      - SETUID
      - SETGID
      - CHOWN
      - KILL
    environment:
      YAOYAO_COMPOSE_DESKTOP_ID: "eba5caaf-744e-4f27-bcdd-1f1f35d05a42"
    volumes:
      - desktop-2-workspace:/home/cua/workspace
      - desktop-2-ipc:/run/yaoyao-private/bridge
  desktop-2-network:
    image: localhost/yaoyao/network:1
    build:
      context: ./deploy/computer
      dockerfile: Dockerfile.network
    command: ["--init", "--socket"]
    init: true
    restart: unless-stopped
    network_mode: none
    dns: ["198.18.0.1"]
    read_only: true
    cap_drop: ["ALL"]
    cap_add: ["NET_ADMIN"]
    devices: ["/dev/net/tun:/dev/net/tun"]
    mem_limit: 128m
    pids_limit: 64
    environment:
      YAOYAO_COMPOSE_DESKTOP_ID: "eba5caaf-744e-4f27-bcdd-1f1f35d05a42"
    volumes:
      - desktop-2-network-ipc:/run/yaoyao-network

volumes:
  yaoyao-data:

  desktop-1-workspace:
  desktop-1-ipc:
  desktop-1-network-ipc:
  desktop-2-workspace:
  desktop-2-ipc:
  desktop-2-network-ipc: