설치: Docker Compose
목표 및 결과
섹션 제목: “목표 및 결과”이 페이지 전용 절차를 수행합니다: 설치: Docker Compose. 이 절차에서 다루는 항목: release/v26-beta · app/deploy/next/docker-compose.yml · app/deploy/next/.env.example · DISCVAULT_NEXT_IMAGE · ghcr.io/helmerznl/discvault:beta · 6180:5000 · LEGACY_AUTH_ENABLED=true.
적용 대상
섹션 제목: “적용 대상”이 페이지의 적용 범위: 설치: Docker Compose (Docker). 채널 및 데이터 경계: DiscVault · ghcr.io/helmerznl/discvault:beta; release/v26-beta; discvault_next_deploy; 6180 → API 5000. 이 페이지의 전용 확인 지점: release/v26-beta · app/deploy/next/docker-compose.yml · app/deploy/next/.env.example · DISCVAULT_NEXT_IMAGE · ghcr.io/helmerznl/discvault:beta · 6180:5000 · LEGACY_AUTH_ENABLED=true.
DiscVault v26 베타
섹션 제목: “DiscVault v26 베타”- DiscVault ·
ghcr.io/helmerznl/discvault:beta release/v26-betadiscvault_next_deploy6180→ API5000
사전 요구 사항
섹션 제목: “사전 요구 사항”- Docker Compose
v2 - OpenSSL
- 쓰기 가능한 영구 저장소와 백업 여유 공간
- 설치:
docker-compose.yml·.env.example·release/v26-beta - 생성:
/opt/discvault-next/.env· 소유자 전용 파일 권한(0600) - 선택: 유효한 FQDN에서는
RP_ID와RP_ORIGINS를 일치시키고 신뢰할 수 있는 HTTPS를 사용함 · FQDN 없는 직접 사설 또는 루프백 IP에서는RP_ID와RP_ORIGINS를 비워 둠 - 확인:
DISCVAULT_NEXT_IMAGE=ghcr.io/helmerznl/discvault:beta·:dev - 실행:
docker compose -p discvault_next_deploy config --quiet - 테스트:
GET http://localhost:6180/api/next/health
명령 및 설정
섹션 제목: “명령 및 설정”DiscVault v26 베타
섹션 제목: “DiscVault v26 베타”set -euo pipefailinstall -d -m 0700 /opt/discvault-nextcd /opt/discvault-nextcurl --fail --location --proto '=https' --tlsv1.2 \ --output docker-compose.yml \ https://raw.githubusercontent.com/helmerzNL/DiscVault/release/v26-beta/app/deploy/next/docker-compose.ymlcurl --fail --location --proto '=https' --tlsv1.2 \ --output .env.example \ https://raw.githubusercontent.com/helmerzNL/DiscVault/release/v26-beta/app/deploy/next/.env.example
umask 077ENV_FILE=/opt/discvault-next/.envtest ! -e "$ENV_FILE"ENV_TMP="$(mktemp "$ENV_FILE.tmp.XXXXXX")"trap 'rm -f "$ENV_TMP"' EXITPOSTGRES_PASSWORD="$(openssl rand -hex 32)"JWT_SECRET="$(openssl rand -base64 48)"awk \ -v image='ghcr.io/helmerznl/discvault:beta' \ -v postgres_password="$POSTGRES_PASSWORD" \ -v jwt_secret="$JWT_SECRET" \ -v data_dir='/mnt/user/appdata/discvault' \ -v postgres_dir='/mnt/user/appdata/discvault-next/postgres' ' /^DISCVAULT_NEXT_IMAGE=/ { print "DISCVAULT_NEXT_IMAGE=" image; next } /^POSTGRES_PASSWORD=/ { print "POSTGRES_PASSWORD=" postgres_password; next } /^JWT_SECRET=/ { print "JWT_SECRET=" jwt_secret; next } /^DISCVAULT_DATA_DIR=/ { print "DISCVAULT_DATA_DIR=" data_dir; next } /^DISCVAULT_NEXT_POSTGRES_DATA=/ { print "DISCVAULT_NEXT_POSTGRES_DATA=" postgres_dir next } /^LEGACY_AUTH_ENABLED=/ { print "LEGACY_AUTH_ENABLED=true"; next } { print }' .env.example > "$ENV_TMP"chmod 0600 "$ENV_TMP"ln "$ENV_TMP" "$ENV_FILE"rm -f "$ENV_TMP"trap - EXITset -euo pipefailcd /opt/discvault-nextFQDN=discvault.example.comENV_FILE=/opt/discvault-next/.envENV_TMP="$(mktemp "$ENV_FILE.tmp.XXXXXX")"trap 'rm -f "$ENV_TMP"' EXITawk -v rp_id="$FQDN" -v rp_origin="https://$FQDN" ' /^RP_ID=/ { print "RP_ID=" rp_id; next } /^RP_NAME=/ { print "RP_NAME=DiscVault"; next } /^RP_ORIGINS=/ { print "RP_ORIGINS=" rp_origin; next } /^LEGACY_AUTH_ENABLED=/ { print "LEGACY_AUTH_ENABLED=true"; next } { print }' "$ENV_FILE" > "$ENV_TMP"chmod 0600 "$ENV_TMP"mv "$ENV_TMP" "$ENV_FILE"trap - EXITset -euo pipefailcd /opt/discvault-nextENV_FILE=/opt/discvault-next/.envENV_TMP="$(mktemp "$ENV_FILE.tmp.XXXXXX")"trap 'rm -f "$ENV_TMP"' EXITawk ' /^RP_ID=/ { print "RP_ID="; next } /^RP_NAME=/ { print "RP_NAME=DiscVault"; next } /^RP_ORIGINS=/ { print "RP_ORIGINS="; next } /^LEGACY_AUTH_ENABLED=/ { print "LEGACY_AUTH_ENABLED=true"; next } { print }' "$ENV_FILE" > "$ENV_TMP"chmod 0600 "$ENV_TMP"mv "$ENV_TMP" "$ENV_FILE"trap - EXITset -euo pipefailcd /opt/discvault-nextENV_FILE=/opt/discvault-next/.envtest "$(stat -c '%a' "$ENV_FILE")" = 600read_env() { sed -n "s/^$1=//p" "$ENV_FILE"; }
test "$(read_env DISCVAULT_NEXT_IMAGE)" = 'ghcr.io/helmerznl/discvault:beta'! grep -q ':dev' "$ENV_FILE"test "$(read_env LEGACY_AUTH_ENABLED)" = truePOSTGRES_PASSWORD_VALUE="$(read_env POSTGRES_PASSWORD)"JWT_SECRET_VALUE="$(read_env JWT_SECRET)"test "${#POSTGRES_PASSWORD_VALUE}" -ge 32test "$POSTGRES_PASSWORD_VALUE" != 'change-me-to-a-long-random-password'test "${#JWT_SECRET_VALUE}" -ge 48grep -qx 'DISCVAULT_DATA_DIR=/mnt/user/appdata/discvault' "$ENV_FILE"grep -qx 'DISCVAULT_NEXT_POSTGRES_DATA=/mnt/user/appdata/discvault-next/postgres' "$ENV_FILE"
RP_ID_VALUE="$(read_env RP_ID)"RP_ORIGINS_VALUE="$(read_env RP_ORIGINS)"if [ -z "$RP_ID_VALUE" ]; then test -z "$RP_ORIGINS_VALUE"else test "$RP_ORIGINS_VALUE" = "https://$RP_ID_VALUE"fi
docker compose -p discvault_next_deploy config --quietdocker compose -p discvault_next_deploy pulldocker compose -p discvault_next_deploy up -ddocker compose -p discvault_next_deploy pscurl --fail http://localhost:6180/api/next/health예상 결과
섹션 제목: “예상 결과”다음 결과의 승인 조건: 설치: Docker Compose 아래 결과가 모두 충족된 경우에만: postgres · next-api · next-worker · next-mcp; 6180 → API 5000; HTTP 2xx · /api/next/health. 이 페이지의 전용 확인 지점: release/v26-beta · app/deploy/next/docker-compose.yml · app/deploy/next/.env.example · DISCVAULT_NEXT_IMAGE · ghcr.io/helmerznl/discvault:beta · 6180:5000 · LEGACY_AUTH_ENABLED=true.
postgres·next-api·next-worker·next-mcp6180→ API5000- HTTP
2xx·/api/next/health