Admin
6dcbd9589a
Zitadel v4 redirects every sign-in to /ui/v2/login, which is served by a separate container (zitadel-login) that this stack didn't run, so logging in on a fresh instance ended in a 404. - Add zitadel-login, with its own service account (login-client) whose PAT Zitadel writes to a volume only that container mounts. - Configure the Login V2 base URL (ZITADEL_LOGIN_BASE_URL): its own port in dev, same hostname as Zitadel behind the edge in prod. - Pin zitadel and zitadel-login to v4.19.1 and add healthchecks. - Run Zitadel as root, as Zitadel's own compose does, so it can write the PATs into root-owned mounts (the Linux bind mount and the new volume). - Route /ui/v2/login on the auth vhost to the login container and drop the no-op grpc_set_header. - Document the extra steps for an instance created before this.
61 lines
1.5 KiB
YAML
61 lines
1.5 KiB
YAML
name: infra-dev
|
|
|
|
# Development overlay: publishes every service's port to the host, so any
|
|
# project's dev stack can reach them at host.docker.internal:<port> instead
|
|
# of joining infra-net. Adds pgAdmin.
|
|
#
|
|
# docker compose -f compose.yml -f compose.dev.yml up -d
|
|
|
|
services:
|
|
postgres:
|
|
ports:
|
|
- "${POSTGRES_HOST_PORT}:5432"
|
|
|
|
zitadel:
|
|
ports:
|
|
- "${ZITADEL_EXTERNAL_PORT}:8080"
|
|
|
|
# No edge in dev to put the login under Zitadel's own port, so it gets its
|
|
# own (ZITADEL_LOGIN_BASE_URL in .env points the browser at it).
|
|
zitadel-login:
|
|
ports:
|
|
- "${ZITADEL_LOGIN_HOST_PORT}:3000"
|
|
|
|
seaweedfs:
|
|
ports:
|
|
- "9333:9333" # master / admin UI
|
|
- "8888:8888" # filer
|
|
- "8333:8333" # S3 API
|
|
|
|
rabbitmq:
|
|
ports:
|
|
- "5672:5672" # AMQP
|
|
- "15672:15672" # management UI
|
|
|
|
jaeger:
|
|
ports:
|
|
- "16686:16686" # UI
|
|
- "4317:4317" # OTLP gRPC
|
|
- "4318:4318" # OTLP HTTP
|
|
|
|
# Optional Postgres UI: docker compose ... --profile tools up -d
|
|
pgadmin:
|
|
profiles: [tools]
|
|
image: dpage/pgadmin4:latest
|
|
container_name: infra-pgadmin
|
|
environment:
|
|
PGADMIN_DEFAULT_EMAIL: ${PGADMIN_DEFAULT_EMAIL}
|
|
PGADMIN_DEFAULT_PASSWORD: ${PGADMIN_DEFAULT_PASSWORD}
|
|
PGADMIN_CONFIG_SERVER_MODE: "False"
|
|
depends_on:
|
|
postgres:
|
|
condition: service_healthy
|
|
ports:
|
|
- "${PGADMIN_HOST_PORT}:80"
|
|
volumes:
|
|
- pgadmin_data:/var/lib/pgadmin
|
|
restart: unless-stopped
|
|
|
|
volumes:
|
|
pgadmin_data:
|