docker-compose.yml

# Chain data uses a named volume so Geth can create geth.ipc (Unix socket). Bind-mounting
# ./execution from WSL /mnt/c/... fails with "bind: operation not supported" for IPC.
# Volume name includes NETWORK so testnet and mainnet data stay separate on the same host.
volumes:
  execution-data:
    name: coti-${NETWORK:-testnet}-execution-data

services:
  # Sets up the genesis configuration for the go-ethereum client from a JSON file.
  coti-full-node-genesis:
    image: coti/${NETWORK:-testnet}-full-node:${DOCKER_FULL_NODE_IMAGE_VERSION:-1.2.0}
    container_name: coti-${NETWORK:-testnet}-full-node-genesis
    command: --datadir=/execution init /coti-genesis/genesis.json
    volumes:
      - execution-data:/execution
    logging:
      driver: "json-file"
      options:
        max-size: "10m"
        max-file: "1"

  coti-full-node:
    image: coti/${NETWORK:-testnet}-full-node:${DOCKER_FULL_NODE_IMAGE_VERSION:-1.2.0}
    container_name: coti-${NETWORK:-testnet}-full-node
    command:
      - --soda.engine
      - --soda.seqaddr=${COTI_SODA_SEQADDR}
      - --soda.exec1addr=${COTI_SODA_EXEC1ADDR}
      - --soda.exec2addr=${COTI_SODA_EXEC2ADDR}
      - --soda.validator
      - --networkid=${COTI_NETWORK_ID}
      - --http
      - --http.api=eth,net,web3,txpool
      - --http.corsdomain=*
      - --http.vhosts=*
      - --http.addr=0.0.0.0
      - --http.port=8545
      - --port=7400
      - --identity=${FULLNODE_FQDN}
      - --verbosity=3
      - --datadir=/execution
      - --syncmode=full
      - --ws
      - --ws.port=8546
      - --ws.addr=0.0.0.0
      - --ws.origins=*
      - --ws.api=web3,eth
      - --metrics
      - --metrics.expensive
      - --metrics.addr=0.0.0.0
      - --rpc.allow-unprotected-txs=true
      - --miner.gasprice=5000000
      - --bootnodes=${COTI_BOOTNODES}
      - --nat=extip:${FULLNODE_EXT_IP}
    ports:
      - "8545:8545"
      - 8546:8546
      - 7400:7400
      - 7400:7400/udp
    depends_on:
      coti-full-node-genesis:
        condition: service_completed_successfully
    volumes:
      - execution-data:/execution
      - ./nodekey:/execution/geth/nodekey
    logging:
      driver: "json-file"
      options:
        max-size: "50m"
        max-file: "5"

  # Local-only status page for operators (open http://127.0.0.1:8090 on the host).
  coti-operator-dashboard:
    build:
      context: ./operator-dashboard
    container_name: coti-${NETWORK:-testnet}-operator-dashboard
    restart: unless-stopped
    depends_on:
      coti-full-node:
        condition: service_started
    ports:
      - "127.0.0.1:8090:8090"
    environment:
      LISTEN_PORT: "8090"
      NETWORK: ${NETWORK:-testnet}
      RPC_URL: http://coti-full-node:8545
      FULLNODE_FQDN: ${FULLNODE_FQDN:-}
      FULLNODE_EXT_IP: ${FULLNODE_EXT_IP:-}
      NGINX_ENABLED: ${NGINX_ENABLED:-false}
      FRPC_ENABLED: ${FRPC_ENABLED:-false}
      FRPC_CUSTOM_DOMAIN: ${FRPC_CUSTOM_DOMAIN:-}
      FRPS_SERVER_ADDR: ${FRPS_SERVER_ADDR:-}
      FRPS_SERVER_ADDR_1: ${FRPS_SERVER_ADDR_1:-}
      FRPS_SERVER_ADDR_2: ${FRPS_SERVER_ADDR_2:-}
      FRPS_SERVER_PORT: ${FRPS_SERVER_PORT:-7000}

  # Internal HTTP gateway for FRPC: strips /rpc and /ws before forwarding to the node (no TLS).
  nginx-frpc-gateway:
    image: nginx:1.15-alpine
    container_name: coti-${NETWORK:-testnet}-nginx-frpc-gateway
    restart: unless-stopped
    profiles:
      - frpc
    depends_on:
      coti-full-node:
        condition: service_started
      coti-operator-dashboard:
        condition: service_started
    volumes:
      - ./nginx/frpc-gateway.conf:/etc/nginx/conf.d/default.conf:ro

  frpc-1:
    image: fatedier/frpc:v0.61.2
    container_name: coti-${NETWORK:-testnet}-frpc-1
    restart: unless-stopped
    profiles:
      - frpc
    depends_on:
      nginx-frpc-gateway:
        condition: service_started
    command:
      - -c
      - /etc/frp/frpc.toml
    volumes:
      - ./frpc-1.toml:/etc/frp/frpc.toml:ro

  frpc-2:
    image: fatedier/frpc:v0.61.2
    container_name: coti-${NETWORK:-testnet}-frpc-2
    restart: unless-stopped
    profiles:
      - frpc
    depends_on:
      nginx-frpc-gateway:
        condition: service_started
    command:
      - -c
      - /etc/frp/frpc.toml
    volumes:
      - ./frpc-2.toml:/etc/frp/frpc.toml:ro

  # Temporary Nginx for SSL setup only (Certbot ACME challenge). Use: docker compose --profile setup up -d nginx-init
  nginx-init:
    image: nginx:1.15-alpine
    container_name: nginx-init
    profiles:
      - setup
    ports:
      - "80:80"
    volumes:
      - ./nginx/certbot:/var/www/certbot
      - ./nginx/nginx-init_default.conf:/etc/nginx/conf.d/default.conf

  nginx:
    image: nginx:1.15-alpine
    container_name: nginx
    profiles:
      - proxy-nginx
    depends_on:
      coti-full-node:
        condition: service_started
      coti-operator-dashboard:
        condition: service_started
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - ./nginx/default.conf:/etc/nginx/conf.d/default.conf
      - ./nginx/sites-enabled:/etc/nginx/sites-enabled
      - ./nginx/nginx.conf:/etc/nginx/nginx.conf
      - ./nginx/certbot:/var/www/certbot
      - /etc/letsencrypt:/etc/letsencrypt:ro
    command: "/bin/sh -c 'while :; do sleep 6h & wait $${!}; nginx -s reload; done & nginx -g \"daemon off;\"'"