eminux/MatchLiveTv
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Sposta storage video su disco dedicato e completa ops/SMTP in produzione.

Browse Source 
Recordings e Garage usano bind mount su /media/videos; aggiunge ntfy self-hosted,
notifiche critical+warning, SMTP Aruba SSL/465 e fix cron replay.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
Emiliano Frascaro
2026-06-12 23:13:08 +02:00
parent 52cfffb83f
commit da75582dae
14 changed files with 278 additions and 44 deletions
Download Patch File Download Diff File Expand all files Collapse all files

76
infra/docker-compose.prod.yml
View File

@@ -37,7 +37,7 @@ services:
volumes:
- ./mediamtx.yml:/mediamtx.yml:ro
- ./slates:/slates:ro
- recordings:/recordings
- ${MATCHLIVETV_VIDEOS_ROOT:-/media/videos/matchlivetv}/recordings:/recordings
command: /mediamtx.yml
# Immagine distroless: niente shell/wget/curl; API :9997 non esposta sull'host
healthcheck:
@@ -77,13 +77,14 @@ services:
PRIVACY_CONTROLLER_NAME: ${PRIVACY_CONTROLLER_NAME:-Emiliano Frascaro}
PRIVACY_CONTROLLER_ADDRESS: ${PRIVACY_CONTROLLER_ADDRESS:-Via Guido De Ruggiero, 89 - 20142 - Milano (MI)}
PRIVACY_CONTROLLER_VAT: ${PRIVACY_CONTROLLER_VAT:-}
MAILER_FROM: ${MAILER_FROM:-Match Live TV <noreply@matchlive.it>}
MAILER_FROM: ${MAILER_FROM:-Match Live TV <noreply@matchlivetv.it>}
SMTP_ADDRESS: ${SMTP_ADDRESS:-}
SMTP_PORT: ${SMTP_PORT:-587}
SMTP_PORT: ${SMTP_PORT:-465}
SMTP_USERNAME: ${SMTP_USERNAME:-}
SMTP_PASSWORD: ${SMTP_PASSWORD:-}
SMTP_AUTH: ${SMTP_AUTH:-plain}
SMTP_STARTTLS: ${SMTP_STARTTLS:-true}
SMTP_SSL: ${SMTP_SSL:-true}
SMTP_STARTTLS: ${SMTP_STARTTLS:-false}
RAILS_LOG_TO_STDOUT: "true"
RAILS_LOG_LEVEL: ${RAILS_LOG_LEVEL:-info}
STRIPE_SECRET_KEY: ${STRIPE_SECRET_KEY:-}
@@ -102,6 +103,20 @@ services:
REPLAY_STORAGE_SECRET_ACCESS_KEY: ${REPLAY_STORAGE_SECRET_ACCESS_KEY:-}
REPLAY_STORAGE_FORCE_PATH_STYLE: ${REPLAY_STORAGE_FORCE_PATH_STYLE:-true}
GOOGLE_ANALYTICS_MEASUREMENT_ID: ${GOOGLE_ANALYTICS_MEASUREMENT_ID:-}
OPS_NTFY_URL: ${OPS_NTFY_URL:-}
OPS_NTFY_TOKEN: ${OPS_NTFY_TOKEN:-}
OPS_ALERT_EMAIL: ${OPS_ALERT_EMAIL:-}
OPS_NOTIFY_SEVERITIES: ${OPS_NOTIFY_SEVERITIES:-critical,warning}
OPS_NOTIFY_COOLDOWN_MINUTES: ${OPS_NOTIFY_COOLDOWN_MINUTES:-30}
OPS_HEALTH_INTERVAL_SECS: ${OPS_HEALTH_INTERVAL_SECS:-180}
OPS_HEALTH_TOKEN: ${OPS_HEALTH_TOKEN:-}
OPS_DISK_WARN_PERCENT: ${OPS_DISK_WARN_PERCENT:-80}
OPS_DISK_CRIT_PERCENT: ${OPS_DISK_CRIT_PERCENT:-90}
OPS_RECORDINGS_WARN_GB: ${OPS_RECORDINGS_WARN_GB:-20}
OPS_RECORDINGS_CRIT_GB: ${OPS_RECORDINGS_CRIT_GB:-50}
OPS_SIDEKIQ_STALE_SECS: ${OPS_SIDEKIQ_STALE_SECS:-300}
OPS_LOG_SUBSCRIBER: ${OPS_LOG_SUBSCRIBER:-false}
SENTRY_DSN: ${SENTRY_DSN:-}
ports:
- "3000:3000" # Solo LAN — NPM proxy HTTPS
depends_on:
@@ -114,7 +129,7 @@ services:
garage:
condition: service_started
volumes:
- recordings:/recordings
- ${MATCHLIVETV_VIDEOS_ROOT:-/media/videos/matchlivetv}/recordings:/recordings
- rails_storage:/rails/storage
healthcheck:
test: ["CMD", "curl", "-f", "http://127.0.0.1:3000/up"]
@@ -148,13 +163,14 @@ services:
MEDIAMTX_INTERNAL_RTMP_URL: rtmp://mediamtx:1935
HLS_PUBLIC_URL: ${HLS_PUBLIC_URL:-http://localhost:8888}
APP_PUBLIC_URL: ${APP_PUBLIC_URL:-http://localhost:3000}
MAILER_FROM: ${MAILER_FROM:-Match Live TV <noreply@matchlive.it>}
MAILER_FROM: ${MAILER_FROM:-Match Live TV <noreply@matchlivetv.it>}
SMTP_ADDRESS: ${SMTP_ADDRESS:-}
SMTP_PORT: ${SMTP_PORT:-587}
SMTP_PORT: ${SMTP_PORT:-465}
SMTP_USERNAME: ${SMTP_USERNAME:-}
SMTP_PASSWORD: ${SMTP_PASSWORD:-}
SMTP_AUTH: ${SMTP_AUTH:-plain}
SMTP_STARTTLS: ${SMTP_STARTTLS:-true}
SMTP_SSL: ${SMTP_SSL:-true}
SMTP_STARTTLS: ${SMTP_STARTTLS:-false}
RAILS_LOG_LEVEL: ${RAILS_LOG_LEVEL:-info}
RECORDINGS_PATH: /recordings
REPLAY_STORAGE_ENDPOINT: ${REPLAY_STORAGE_ENDPOINT:-}
@@ -163,13 +179,29 @@ services:
REPLAY_STORAGE_ACCESS_KEY_ID: ${REPLAY_STORAGE_ACCESS_KEY_ID:-}
REPLAY_STORAGE_SECRET_ACCESS_KEY: ${REPLAY_STORAGE_SECRET_ACCESS_KEY:-}
REPLAY_STORAGE_FORCE_PATH_STYLE: ${REPLAY_STORAGE_FORCE_PATH_STYLE:-true}
OPS_NTFY_URL: ${OPS_NTFY_URL:-}
OPS_NTFY_TOKEN: ${OPS_NTFY_TOKEN:-}
OPS_ALERT_EMAIL: ${OPS_ALERT_EMAIL:-}
OPS_NOTIFY_SEVERITIES: ${OPS_NOTIFY_SEVERITIES:-critical,warning}
OPS_NOTIFY_COOLDOWN_MINUTES: ${OPS_NOTIFY_COOLDOWN_MINUTES:-30}
OPS_HEALTH_INTERVAL_SECS: ${OPS_HEALTH_INTERVAL_SECS:-180}
OPS_HEALTH_TOKEN: ${OPS_HEALTH_TOKEN:-}
OPS_DISK_WARN_PERCENT: ${OPS_DISK_WARN_PERCENT:-80}
OPS_DISK_CRIT_PERCENT: ${OPS_DISK_CRIT_PERCENT:-90}
OPS_RECORDINGS_WARN_GB: ${OPS_RECORDINGS_WARN_GB:-20}
OPS_RECORDINGS_CRIT_GB: ${OPS_RECORDINGS_CRIT_GB:-50}
OPS_SIDEKIQ_STALE_SECS: ${OPS_SIDEKIQ_STALE_SECS:-300}
OPS_LOG_SUBSCRIBER: ${OPS_LOG_SUBSCRIBER:-false}
SENTRY_DSN: ${SENTRY_DSN:-}
depends_on:
rails:
condition: service_healthy
garage:
condition: service_started
ntfy:
condition: service_started
volumes:
- recordings:/recordings
- ${MATCHLIVETV_VIDEOS_ROOT:-/media/videos/matchlivetv}/recordings:/recordings
- rails_storage:/rails/storage
garage:
@@ -177,15 +209,31 @@ services:
restart: unless-stopped
# API S3 solo rete Docker (rails/sidekiq → http://garage:3900). Non pubblicare 3900 su WAN.
volumes:
- garage_meta:/var/lib/garage/meta
- garage_data:/var/lib/garage/data
- ${MATCHLIVETV_VIDEOS_ROOT:-/media/videos/matchlivetv}/garage/meta:/var/lib/garage/meta
- ${MATCHLIVETV_VIDEOS_ROOT:-/media/videos/matchlivetv}/garage/data:/var/lib/garage/data
- ./garage/garage.prod.toml:/etc/garage.toml:ro
command: ["/garage", "-c", "/etc/garage.toml", "server"]
ntfy:
image: binwiederhier/ntfy:latest
restart: unless-stopped
# Solo LAN :8090 — esporre su HTTPS via NPM (es. ntfy.matchlivetv.it). Non aprire 8090 su WAN.
command: serve
environment:
NTFY_BASE_URL: ${NTFY_PUBLIC_URL:-http://127.0.0.1:8090}
volumes:
- ntfy_data:/var/lib/ntfy
- ./ntfy/server.yml:/etc/ntfy/server.yml:ro
ports:
- "8090:80"
healthcheck:
test: ["CMD", "wget", "-q", "--spider", "http://127.0.0.1:80/v1/health"]
interval: 30s
timeout: 5s
retries: 3
volumes:
postgres_data:
redis_data:
recordings:
rails_storage:
garage_meta:
garage_data:
ntfy_data: