warden-mcp/docker-compose.yml at main · icoretech/warden-mcp · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
name: keychain-mcp

services:
  vaultwarden:
    image: vaultwarden/server:1.35.3-alpine
    ports:
      - "8080:80"
    environment:
      # Use the internal service name for consistency across containers.
      # (Host access via http://localhost:8080 still works for local testing.)
      DOMAIN: https://vaultwarden-https
      SIGNUPS_ALLOWED: "true"
      WEBSOCKET_ENABLED: "false"
      # Test/dev only. Use an Argon2 PHC string in any real environment.
      ADMIN_TOKEN: devtoken
    volumes:
      - vaultwarden-data:/data
    healthcheck:
      test: ["CMD-SHELL", "wget -qO- http://127.0.0.1/api/alive >/dev/null 2>&1 || exit 1"]
      interval: 5s
      timeout: 2s
      retries: 30

  vaultwarden-https:
    image: caddy:2.10.2-alpine
    ports:
      - "8443:443"
    volumes:
      - ./Caddyfile.test:/etc/caddy/Caddyfile:ro
    depends_on:
      vaultwarden:
        condition: service_healthy

  mcp:
    build:
      context: .
      dockerfile: Dockerfile.dev
    env_file:
      - path: .env
        required: false
    ports:
      - "3005:3005"
    volumes:
      - .:/app
      - node-modules:/app/node_modules
      - bw-data:/data
    environment:
      HOME: /data
      NODE_ENV: development
      # Dev-only: allow bw CLI to talk to the local Caddy self-signed HTTPS endpoint.
      NODE_TLS_REJECT_UNAUTHORIZED: "0"
      KEYCHAIN_DEBUG_HTTP: "${KEYCHAIN_DEBUG_HTTP:-false}"
    # Dev-only: allow npm to write to the node-modules volume.
    user: "0:0"
    command: sh -lc "npm install && npm run dev"
    depends_on:
      vaultwarden:
        condition: service_healthy

  bootstrap:
    image: mcr.microsoft.com/playwright:v1.58.2-jammy
    working_dir: /work
    volumes:
      - .:/work
      - node-modules:/work/node_modules
    environment:
      VW_BASE_URL: https://vaultwarden-https
      VW_APIKEY_ENV_FILE: tmp/vaultwarden-bootstrap/apikey.env
    env_file:
      - .env.test
    depends_on:
      vaultwarden-https:
        condition: service_started
    command: sh -lc "npm install && node scripts/vaultwarden-bootstrap.mjs"

  tests:
    build:
      context: .
      dockerfile: Dockerfile.dev
    env_file:
      - .env.test
    volumes:
      - .:/app
      - node-modules:/app/node_modules
      - bw-test-data:/data
    environment:
      HOME: /data
      NODE_ENV: test
      # In compose network; target the bundled vaultwarden via HTTPS proxy.
      BW_HOST: https://vaultwarden-https
      # Test-only: trust Caddy's internal/self-signed certificate.
      NODE_TLS_REJECT_UNAUTHORIZED: "0"
      # Faster integration tests; create/update already force server-side writes.
      KEYCHAIN_SYNC_ON_WRITE: "false"
    # Dev-only: allow npm to write to the node-modules volume.
    user: "0:0"
    depends_on:
      vaultwarden:
        condition: service_healthy
      vaultwarden-https:
        condition: service_started
    command: sh -lc "npm install && npm run test:integration"

  tests-apikey:
    build:
      context: .
      dockerfile: Dockerfile.dev
    env_file:
      - .env.test
    volumes:
      - .:/app
      - node-modules:/app/node_modules
      - bw-test-data:/data
    environment:
      HOME: /data
      NODE_ENV: test
      BW_HOST: https://vaultwarden-https
      NODE_TLS_REJECT_UNAUTHORIZED: "0"
      KEYCHAIN_SYNC_ON_WRITE: "false"
    user: "0:0"
    depends_on:
      vaultwarden:
        condition: service_healthy
      vaultwarden-https:
        condition: service_started
    command: >
      sh -lc "npm install &&
      test -s tmp/vaultwarden-bootstrap/apikey.env &&
      set -a &&
      . ./.env.test &&
      . ./tmp/vaultwarden-bootstrap/apikey.env &&
      unset BW_USER BW_USERNAME &&
      set +a &&
      npm run test:integration"

volumes:
  bw-data: {}
  bw-test-data: {}
  vaultwarden-data: {}
  node-modules: {}