97 lines
3.7 KiB
Markdown
97 lines
3.7 KiB
Markdown
# OverCooked Customer Installer
|
|
|
|
This repository is the public, image-only customer installer. A customer does
|
|
not need access to any application source repository. The installer downloads
|
|
only these public images:
|
|
|
|
- `git.leee.xin/overcooked/overcooked-e`
|
|
- `git.leee.xin/overcooked/overcooked-s-control`
|
|
- `git.leee.xin/overcooked/overcooked-s-webui`
|
|
- `git.leee.xin/overcooked/overcooked-media-node`
|
|
|
|
It does not download or start an Auth image, and it does not use Docker build
|
|
contexts.
|
|
|
|
## Install
|
|
|
|
```sh
|
|
curl -fsSL \\
|
|
https://git.leee.xin/OverCooked/OverCooked-Installer/raw/branch/main/install.sh \\
|
|
-o install.sh
|
|
|
|
sudo env \\
|
|
OVERCOOKED_SERVER_IP=203.0.113.10 \\
|
|
OVERCOOKED_AUTH_PUBLIC_KEYS='{"auth-1":"PUBLIC_KEY"}' \\
|
|
OVERCOOKED_ACTIVATION_CODE='ACTIVATION_CODE' \\
|
|
OVERCOOKED_TURNSTILE_SITE_KEY='TURNSTILE_SITE_KEY' \\
|
|
OVERCOOKED_TURNSTILE_SECRET_KEY='TURNSTILE_SECRET_KEY' \\
|
|
./install.sh
|
|
```
|
|
|
|
The default central Auth endpoint is `http://148.135.97.10:18091`. Override it
|
|
with `OVERCOOKED_AUTH_URL`. Auth private keys, administrator credentials,
|
|
license databases, provider credentials, and production secrets are never
|
|
included in this repository.
|
|
|
|
The current S production image requires the Turnstile key pair shown above.
|
|
The installer fails early if the pair is missing or incomplete; it never uses
|
|
placeholder credentials.
|
|
|
|
## Endpoints
|
|
|
|
- WebUI: `http://SERVER_IP:18083/`
|
|
- S API: `http://SERVER_IP:18080/`
|
|
- E: `http://SERVER_IP:8096/`
|
|
- First setup: `http://SERVER_IP:18083/setup`
|
|
|
|
The installer checks these host ports before changing service state and does
|
|
not bind ports 80 or 443. Configure the firewall to allow the chosen public
|
|
ports and restrict database/Valkey traffic to the Docker networks.
|
|
|
|
The server address is selected from `OVERCOOKED_SERVER_IP`, or from the
|
|
interface selected by `ip -4 route get 1.1.1.1`. A detected RFC1918,
|
|
loopback, link-local, or carrier-grade NAT address is rejected unless explicitly
|
|
provided through `OVERCOOKED_SERVER_IP`.
|
|
|
|
## Configuration and logs
|
|
|
|
`OVERCOOKED_REGISTRY` and `OVERCOOKED_VERSION` override the default image
|
|
registry and tag. `OVERCOOKED_ROOT` changes the default `/opt/overcooked`
|
|
installation directory. Generated `production.env` is mode 600 and contains
|
|
the setup token and randomly generated service keys. The installer never
|
|
prints those values. Keep the file private.
|
|
|
|
```sh
|
|
docker compose --env-file /opt/overcooked/production.env \\
|
|
-f /opt/overcooked/compose/s.yml -p overcooked-s ps
|
|
docker compose --env-file /opt/overcooked/production.env \\
|
|
-f /opt/overcooked/compose/e.yml -p overcooked-e logs --tail=100
|
|
```
|
|
|
|
Migration is fail-closed. E uses the migration command built into its official
|
|
image. S uses only the schema migration assets published in this repository.
|
|
If either migration fails, the installer exits non-zero and does not start the
|
|
corresponding application service.
|
|
|
|
## Common 404/401 download failures
|
|
|
|
The customer command must fetch the raw script from the public Installer
|
|
repository. A 404 usually means a wrong repository, branch, or raw path. A
|
|
401/403 means that a private source URL or credentialed mirror was used. Do
|
|
not grant customer access to application source to work around these errors.
|
|
Use the public raw URL and verify anonymous image pulls instead.
|
|
|
|
## Uninstall
|
|
|
|
Review the project names and volumes first, then stop the two projects:
|
|
|
|
```sh
|
|
docker compose --env-file /opt/overcooked/production.env \\
|
|
-f /opt/overcooked/compose/s.yml -p overcooked-s down
|
|
docker compose --env-file /opt/overcooked/production.env \\
|
|
-f /opt/overcooked/compose/e.yml -p overcooked-e down
|
|
```
|
|
|
|
The named volumes contain customer data and are intentionally not removed by
|
|
the installer or this documentation.
|