Buzz

name: buzz

services:
  relay:
    image: ghcr.io/block/buzz:0.2.0
    restart: unless-stopped
    environment:
      BUZZ_BIND_ADDR: 0.0.0.0:5000
      BUZZ_HEALTH_PORT: "8080"
      BUZZ_METRICS_PORT: "9102"
      RELAY_URL: ${RELAY_URL:-ws://localhost:5000}
      DATABASE_URL: postgres://buzz:buzz-local-only@db:5432/buzz
      REDIS_URL: redis://cache:6379
      BUZZ_S3_ENDPOINT: http://blob:9000
      BUZZ_S3_ACCESS_KEY: buzz
      BUZZ_S3_SECRET_KEY: ${MINIO_ROOT_PASSWORD}
      BUZZ_S3_BUCKET: buzz-media
      BUZZ_MEDIA_BASE_URL: ${BUZZ_MEDIA_BASE_URL:-http://localhost:5000/media}
      BUZZ_CORS_ORIGINS: ${BUZZ_CORS_ORIGINS:-http://localhost:5000}
      BUZZ_GIT_REPO_PATH: /data/git
      BUZZ_RELAY_PRIVATE_KEY: ${BUZZ_RELAY_PRIVATE_KEY}
      BUZZ_GIT_HOOK_HMAC_SECRET: ${BUZZ_GIT_HOOK_HMAC_SECRET}
      RELAY_OWNER_PUBKEY: ${RELAY_OWNER_PUBKEY:-}
      BUZZ_REQUIRE_AUTH_TOKEN: ${BUZZ_REQUIRE_AUTH_TOKEN:-false}
      BUZZ_REQUIRE_RELAY_MEMBERSHIP: ${BUZZ_REQUIRE_RELAY_MEMBERSHIP:-false}
      BUZZ_ALLOW_NIP_OA_AUTH: "true"
      BUZZ_AUTO_MIGRATE: "true"
      RUST_LOG: buzz_relay=info,buzz_db=info,buzz_auth=info,buzz_pubsub=info,tower_http=info
    ports:
      - "5000:5000"
    volumes:
      - gitdata:/data/git
    # The runtime image has bash but no curl/wget, so upstream's readiness probe
    # speaks HTTP over /dev/tcp against the health port.
    healthcheck:
      test:
        [
          "CMD-SHELL",
          "bash -ec 'exec 3<>/dev/tcp/127.0.0.1/8080; printf \"GET /_readiness HTTP/1.1\\r\\nHost: 127.0.0.1\\r\\nConnection: close\\r\\n\\r\\n\" >&3; grep -q \"200 OK\" <&3'",
        ]
      interval: 10s
      timeout: 3s
      retries: 12
      start_period: 30s
    depends_on:
      db:
        condition: service_healthy
      cache:
        condition: service_healthy
      blob:
        condition: service_healthy
      blob-init:
        condition: service_completed_successfully

  db:
    image: postgres:17-alpine
    restart: unless-stopped
    environment:
      POSTGRES_DB: buzz
      POSTGRES_USER: buzz
      POSTGRES_PASSWORD: buzz-local-only
      PGDATA: /var/lib/postgresql/data/pgdata
    volumes:
      - dbdata:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U buzz -d buzz"]
      interval: 5s
      timeout: 5s
      retries: 12
      start_period: 10s

  # Pubsub, cache invalidation, and rate-limit counters only - the durable
  # state is all in Postgres, so this needs no persistence.
  cache:
    image: valkey/valkey:8
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "valkey-cli", "ping"]
      interval: 5s
      timeout: 3s
      retries: 12
      start_period: 5s

  blob:
    image: minio/minio:RELEASE.2025-09-07T16-13-09Z
    command: ["server", "/data", "--address", ":9000"]
    restart: unless-stopped
    environment:
      MINIO_ROOT_USER: buzz
      MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD}
    volumes:
      - blobdata:/data
    healthcheck:
      test: ["CMD", "curl", "-fsS", "http://127.0.0.1:9000/minio/health/live"]
      interval: 5s
      timeout: 5s
      retries: 12
      start_period: 10s

  blob-init:
    image: minio/mc:RELEASE.2025-08-13T08-35-41Z
    restart: "no"
    environment:
      MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD}
    entrypoint: >
      /bin/sh -euc '
        mc alias set local http://blob:9000 buzz "$${MINIO_ROOT_PASSWORD}"
        mc mb --ignore-existing local/buzz-media
        mc anonymous set none local/buzz-media
      '
    depends_on:
      blob:
        condition: service_healthy

volumes:
  gitdata:
  dbdata:
  blobdata:

git clone https://github.com/deployable-sh/stacks
cd stacks
docker compose -f buzz/compose.yaml up -d