hernani/koopa-admin-log
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

nym: polish Containerfile, compose, entrypoint, and README.

Browse source 
Host-side binary download notes and compose port mapping clarifications.
This commit is contained in:
Hernâni Marques 2026-07-16 23:50:57 +02:00
parent 3945de5831
commit e7469b47f9
4 changed files with 51 additions and 19 deletions
Download patch file Download diff file Expand all files Collapse all files

26
configs/nym/compose.yml
View file

@ -10,6 +10,9 @@ services:
image: localhost/koopa-nym:latest
container_name: koopa-nym
restart: unless-stopped
# Non-root (image USER nym = 1000). keep-id → host ./data owned by hernani works.
user: "1000:1000"
userns_mode: keep-id
env_file:
- .env
environment:
@ -21,22 +24,25 @@ services:
NYMNODE_HOSTNAME: ${NYMNODE_HOSTNAME:-}
NYMNODE_WG_ENABLED: ${NYMNODE_WG_ENABLED:-false}
NYMNODE_ACCEPT_OPERATOR_TERMS: ${NYMNODE_ACCEPT_OPERATOR_TERMS:-true}
NYMNODE_HTTP_BIND_ADDRESS: "[::]:8080"
NYMNODE_MIXNET_BIND_ADDRESS: "[::]:1789"
NYMNODE_VERLOC_BIND_ADDRESS: "[::]:1790"
NYMNODE_ENTRY_BIND_ADDRESS: "[::]:9000"
# IPv4 binds: rootless podman port-proxy is reliable with 0.0.0.0
# ([::] can leave verloc without a host IPv4 listener → WAN "connection refused")
NYMNODE_HTTP_BIND_ADDRESS: ${NYMNODE_HTTP_BIND_ADDRESS:-0.0.0.0:8080}
NYMNODE_MIXNET_BIND_ADDRESS: ${NYMNODE_MIXNET_BIND_ADDRESS:-0.0.0.0:1789}
NYMNODE_VERLOC_BIND_ADDRESS: ${NYMNODE_VERLOC_BIND_ADDRESS:-0.0.0.0:1790}
NYMNODE_ENTRY_BIND_ADDRESS: ${NYMNODE_ENTRY_BIND_ADDRESS:-0.0.0.0:9000}
NYMNODE_EXTRA_ARGS: ${NYMNODE_EXTRA_ARGS:-}
volumes:
# identity + config.toml (bond keys live here — back up)
- ./data:/var/lib/nym
ports:
- "9080:8080" # HTTP API / swagger
- "1789:1789/tcp" # mixnet
- "1789:1789/udp"
- "1790:1790" # verloc
# Host publish must be recreated if ports change (podman start ≠ re-map).
- "0.0.0.0:9080:8080/tcp" # HTTP API / swagger (local/LAN)
- "0.0.0.0:1789:1789/tcp" # mixnet
- "0.0.0.0:1789:1789/udp"
- "0.0.0.0:1790:1790/tcp" # verloc (was missing/unreliable with bare "1790:1790")
# gateway / WG — uncomment when mode needs them:
# - "19000:9000" # entry client websocket
# - "51822:51822/udp" # WireGuard
# - "0.0.0.0:19000:9000/tcp" # entry client websocket
# - "0.0.0.0:51822:51822/udp" # WireGuard
labels:
org.hacktivism.service: nym
org.hacktivism.container: koopa-nym