mirror of
https://github.com/migatu/conjurer.git
synced 2026-07-14 21:38:38 +00:00
Michal Tuszowski
2a21fc9e8c
Permissions post-mortem that motivated this: the musician wrote radio playlists AS ROOT onto a ROOT-OWNED network share which liquidsoap then read AS USER 'radio' - chown fails on such shares by design (root squash / uid mapping), so the radio came up and died on the playlists. The fix is structural: the playlist WRITER now lives in the same container as the READER, as the same user, on a local volume. No shared partition, no chown, no uid mapping. New: conjurer_betoniarka/betoniarka.py - runs inside the radio container (started by the entrypoint as user 'radio', port 5005): - library scan -> all_playlist/hit playlists with LOCAL container paths (start + every 24h + authenticated GET /rescan) - bot-facing radio API moved from the musician: /add_to_priority, /create_priority_playlist, /request_radio_file, /clear_pr_pls, plus GET /ping (health) and /stream (web page) - radio_log/persistence tailer forwarding play events to the bot's /prepped_tracks with the shared API key (bot-unreachable = logged, not fatal) Musician: pure Discord music player now - keeps /mp3, /update_mp3, /get_music and the file-share endpoints; all radio playlist writing, radio paths/env and the tailer removed. Bot: new CONJURER_RADIO_SERVICE (defaults to CONJURER_FILE_SERVICE so un-split deployments keep working); radio_commands targets it; separate 'radio' health-gate group on betoniarka /ping (musician group now covers music_commands + file_search_commands only). Docker: betoniarka baked into the radio image (python3 + flask/waitress/ requests from Debian debs), port 5005 exposed, entrypoint starts it via setpriv as 'radio'; data-volume chown is now best-effort with a loud warning (keep the volume local); docs get the post-mortem + wiring. Verified: py_compile everything; functional stub tests - rescan writes local-path playlists, wyszukaj scores and appends to priority, auth 401/ok, tailer forward carries the API key. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
46 lines
2.1 KiB
YAML
46 lines
2.1 KiB
YAML
# Radio (Liquidsoap + Icecast) VM. Run from the repository root:
|
|
# docker compose -f docker/compose.radio.yaml up -d --build
|
|
#
|
|
# Version pins are build args - override via environment, e.g.:
|
|
# LIQUIDSOAP_VERSION=2.1.4 OCAML_VERSION=4.13.0 \
|
|
# docker compose -f docker/compose.radio.yaml up -d --build
|
|
services:
|
|
conjurer-radio:
|
|
build:
|
|
context: ..
|
|
dockerfile: docker/Dockerfile.radio
|
|
args:
|
|
OPAM_VERSION: ${OPAM_VERSION:-2.1.5}
|
|
OCAML_VERSION: ${OCAML_VERSION:-4.14.2}
|
|
LIQUIDSOAP_VERSION: ${LIQUIDSOAP_VERSION:-2.1.4}
|
|
image: conjurer-radio:latest
|
|
container_name: conjurer-radio
|
|
restart: unless-stopped
|
|
environment:
|
|
# internal = null-sink pulse inside the container (headless VM default)
|
|
# host = mount the host pulse socket below and set PULSE_SERVER
|
|
PULSE_MODE: ${PULSE_MODE:-internal}
|
|
# PULSE_SERVER: unix:/tmp/pulseaudio.socket
|
|
# Hostname icecast reports in its status/YP pages:
|
|
ICECAST_HOSTNAME: ${ICECAST_HOSTNAME:-localhost}
|
|
# Betoniarka (radio-operator API + log forwarder):
|
|
CONJURER_MAIN_BOT: ${CONJURER_MAIN_BOT:-http://127.0.0.1:5000}
|
|
CONJURER_API_KEY: ${CONJURER_API_KEY:-}
|
|
ports:
|
|
- "8000:8000" # icecast - listeners tune in here
|
|
- "5005:5005" # betoniarka API - the bot's CONJURER_RADIO_SERVICE
|
|
- "54321:54321" # harbor /skip - the bot's CONJURER_RADIO_HARBOR
|
|
- "9999:9999" # interactive harbor (keep LAN-only!)
|
|
volumes:
|
|
# Playlists, logs, script.params and the script itself (seeded on first
|
|
# run) - same paths inside and outside the container.
|
|
- /srv/betoniarka/data:/srv/betoniarka/data
|
|
# The mp3 library. Writable because the entrypoint seeds a silent
|
|
# emergency-fallback mp3 when the hardcoded single() file is missing.
|
|
- /srv/betoniarka/music:/srv/betoniarka/music
|
|
# icecast_credentials.json - provision at install like the other
|
|
# services' secrets (a CHANGE_ME placeholder is seeded if absent).
|
|
- /srv/betoniarka/secrets:/srv/betoniarka/secrets
|
|
# PULSE_MODE=host: uncomment and adjust
|
|
# - /tmp/pulseaudio.socket:/tmp/pulseaudio.socket
|