JustAPI Bot fix: comprehensive UI, docs, security, and deployment improvements · 7/14/2026
381467d
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
services:
# Main OpenCodeHub application
app:
image: opencodehub/opencodehub:latest
container_name: opencodehub
restart: unless-stopped
ports:
- "4321:4321" # Web interface (Internal)
- "2222:2222" # SSH Git (Internal)
environment:
- NODE_ENV=production
- DATABASE_URL=postgresql://opencodehub:opencodehub@postgres:5432/opencodehub
- DATABASE_TYPE=postgres
- REDIS_URL=redis://redis:6379
- JWT_SECRET=${JWT_SECRET:?JWT_SECRET is required}
- WORKFLOW_SECRET_ENCRYPTION_KEY=${WORKFLOW_SECRET_ENCRYPTION_KEY:?WORKFLOW_SECRET_ENCRYPTION_KEY is required}
- SSH_HOST_KEY_PATH=/data/ssh/host_key
- SERVER_URL=${SITE_URL:-http://localhost:4321}
- STORAGE_TYPE=local
- STORAGE_PATH=/data/storage
- REPOS_PATH=/data/repos
# TRUSTED_PROXIES allows real IP mapping from Cloudflare or Tailscale sidecars
- TRUSTED_PROXIES=127.0.0.1,172.16.0.0/12,100.64.0.0/10
volumes:
- repos-data:/data/repos
- storage-data:/data/storage
- ssh-data:/data/ssh
- cache-data:/data/cache
depends_on:
postgres:
condition: service_healthy
redis:
condition: service_healthy
networks:
- opencodehub-network
# PostgreSQL database
postgres:
image: postgres:16-alpine
container_name: opencodehub-postgres
restart: unless-stopped
environment:
POSTGRES_USER: opencodehub
POSTGRES_PASSWORD: opencodehub
POSTGRES_DB: opencodehub
volumes:
- postgres-data:/var/lib/postgresql/data
networks:
- opencodehub-network
healthcheck:
test: ["CMD-SHELL", "pg_isready -U opencodehub -d opencodehub"]
interval: 10s
timeout: 5s
retries: 5
# Redis for caching and sessions
redis:
image: redis:7-alpine
container_name: opencodehub-redis
restart: unless-stopped
command: redis-server --appendonly yes
volumes:
- redis-data:/data
networks:
- opencodehub-network
healthcheck:
test: ["CMD", "redis-cli", "ping"]
interval: 10s
timeout: 5s
retries: 5
# -------------------------------------------------------------
# OPTION 1: Cloudflare Tunnel (Uncomment 'profiles' to use)
# Run with: docker-compose -f docker-compose.nas.yml --profile cloudflare up -d
# -------------------------------------------------------------
cloudflared:
image: cloudflare/cloudflared:latest
container_name: opencodehub-cloudflared
restart: unless-stopped
command: tunnel --no-autoupdate run
environment:
- TUNNEL_TOKEN=${TUNNEL_TOKEN:-}
networks:
- opencodehub-network
profiles:
- cloudflare
# -------------------------------------------------------------
# OPTION 2: Tailscale (Uncomment 'profiles' to use)
# Run with: docker-compose -f docker-compose.nas.yml --profile tailscale up -d
# -------------------------------------------------------------
tailscale:
image: tailscale/tailscale:latest
container_name: opencodehub-tailscale
hostname: opencodehub-nas
environment:
- TS_AUTHKEY=${TS_AUTHKEY:-}
- TS_STATE_DIR=/var/lib/tailscale
- TS_USERSPACE=false
volumes:
- tailscale-data:/var/lib/tailscale
- /dev/net/tun:/dev/net/tun
cap_add:
- net_admin
- sys_module
networks:
- opencodehub-network
profiles:
- tailscale
volumes:
repos-data:
driver: local
storage-data:
driver: local
ssh-data:
driver: local
cache-data:
driver: local
postgres-data:
driver: local
redis-data:
driver: local
tailscale-data:
driver: local
networks:
opencodehub-network:
driver: bridge