codex-docker/docker-compose.yml at master · hrubymar10/codex-docker · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
services:
  socket-proxy:
    image: wollomatic/socket-proxy:1
    container_name: codex-socket-proxy
    command:
      - '-listenip=0.0.0.0'
      - '-allowfrom=codex-filter-proxy'
      - '-allowGET=/(v1\..{1,2}/)?(version|info|containers(/.*)?|images(/.*)?|networks(/.*)?|volumes(/.*)?|build.*|exec/.*|events.*|_ping)'
      - '-allowPOST=/(v1\..{1,2}/)?(containers(/.*)?|images(/.*)?|networks(/.*)?|volumes(/.*)?|build.*|exec/.*|_ping)'
      - '-allowPUT=/(v1\..{1,2}/)?(containers(/.*)?)'
      - '-allowDELETE=/(v1\..{1,2}/)?(containers(/.*)?|images(/.*)?|networks(/.*)?|volumes(/.*)?)'
      - '-allowHEAD=/(v1\..{1,2}/)?(containers(/.*)?|images(/.*)?|_ping)'
      - '-allowbindmountfrom=${ALLOWED_BIND_MOUNTS}'
      - '-loglevel=INFO'
    user: '0'
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
    networks:
      - codex-internal-net
    read_only: true
    tmpfs:
      - /run
    restart: unless-stopped

  filter-proxy:
    container_name: codex-filter-proxy
    build:
      context: ./docker-filter-proxy
    environment:
      DOCKER_FILTER_UPSTREAM: http://codex-socket-proxy:2375
      DOCKER_FILTER_LISTEN: 0.0.0.0:2375
    depends_on:
      - socket-proxy
    networks:
      - codex-internal-net
      - codex-net
    read_only: true
    restart: unless-stopped

  codex:
    container_name: codex-docker
    init: true
    build:
      context: .
      dockerfile: Dockerfile
      args:
        HOST_UID: ${HOST_UID}
        HOST_USER: ${HOST_USER}
        HOST_HOME: ${HOST_HOME}
        GO_VERSION: ${GO_VERSION}
        CONTAINER_SHELL: ${CONTAINER_SHELL:-/bin/bash}
        EXTRA_PACKAGES: ${EXTRA_PACKAGES:-}
        EXTRA_GO_PACKAGES: ${EXTRA_GO_PACKAGES:-}
        EXTRA_NPM_PACKAGES: ${EXTRA_NPM_PACKAGES:-}
        CODEX_VERSION: ${CODEX_VERSION:-}
    volumes:
      - ${CODEX_HOME_HOST}:${CODEX_HOME_HOST}
      - ${GOPATH}/pkg:${HOST_HOME}/go/pkg
      - ./gpg-keys:/run/gpg-keys:ro
      - ./config/codex-notifier:/usr/local/bin/codex-notifier:ro
      - ./config/custom-bin:/usr/local/custom-bin:ro
    working_dir: ${HOST_HOME}
    environment:
      DOCKER_HOST: tcp://codex-filter-proxy:2375
      GITHUB_TOKEN: ${GITHUB_TOKEN:-}
      GITLAB_TOKEN: ${GITLAB_TOKEN:-}
      GITLAB_HOST: ${GITLAB_HOST:-}
      GIT_USER_NAME: ${GIT_USER_NAME:-}
      GIT_USER_EMAIL: ${GIT_USER_EMAIL:-}
      GIT_PROTECTED_BRANCHES: ${GIT_PROTECTED_BRANCHES:-main master}
      GOPRIVATE: ${GOPRIVATE:-}
      GONOSUMDB: ${GONOSUMDB:-}
      GOPATH: ${HOST_HOME}/go
      HOST_USER: ${HOST_USER}
      HOST_HOME: ${HOST_HOME}
      CODEX_HOME: ${CODEX_HOME_HOST}
      OPENAI_API_KEY: ${OPENAI_API_KEY:-}
      SSH_RELAY_HOST: ${SSH_RELAY_HOST:-}
      SSH_RELAY_PORT: ${SSH_RELAY_PORT:-}
      SSH_AUTH_SOCK: /tmp/ssh-agent.sock
      CONTAINER_SHELL: ${CONTAINER_SHELL:-/bin/bash}
      AWS_AI_PROXY_ENABLED: ${AWS_AI_PROXY_ENABLED:-false}
      AWS_AI_PROXY_URL: ${AWS_AI_PROXY_URL:-http://host.docker.internal:9998}
      AWS_AI_PROXY_PROFILE_CONFIG: ${AWS_AI_PROXY_PROFILE_CONFIG:-}
    extra_hosts:
      - 'host.docker.internal:host-gateway'
    mem_limit: ${DOCKER_MEMORY_LIMIT:-0}
    depends_on:
      - filter-proxy
    networks:
      - codex-net

networks:
  codex-internal-net:
  codex-net: