@better-openclaw/core 1.0.21 → 1.0.23

package/src/services/definitions/infisical.ts

@@ -0,0 +1,97 @@
+import type { ServiceDefinition } from "../../types.js";
+
+export const infisicalDefinition: ServiceDefinition = {
+	id: "infisical",
+	name: "Infisical",
+	description:
+		"Open-source secrets management platform for securely storing, syncing, and rotating environment variables across teams and environments.",
+	category: "security",
+	icon: "🔐",
+
+	image: "infisical/infisical",
+	imageTag: "latest",
+	ports: [
+		{
+			host: 8111,
+			container: 8080,
+			description: "Infisical web UI and API",
+			exposed: true,
+		},
+	],
+	volumes: [],
+	environment: [
+		{
+			key: "NODE_ENV",
+			defaultValue: "production",
+			secret: false,
+			description: "Runtime environment",
+			required: true,
+		},
+		{
+			key: "PORT",
+			defaultValue: "8080",
+			secret: false,
+			description: "Infisical application port",
+			required: true,
+		},
+		{
+			key: "SITE_URL",
+			defaultValue: "http://localhost:8111",
+			secret: false,
+			description: "Public URL for the Infisical instance",
+			required: true,
+		},
+		{
+			key: "ENCRYPTION_KEY",
+			defaultValue: "${INFISICAL_ENCRYPTION_KEY}",
+			secret: true,
+			description: "Encryption key for stored secrets",
+			required: true,
+		},
+		{
+			key: "AUTH_SECRET",
+			defaultValue: "${INFISICAL_AUTH_SECRET}",
+			secret: true,
+			description: "Application auth/session secret",
+			required: true,
+		},
+		{
+			key: "DB_CONNECTION_URI",
+			defaultValue: "postgresql://infisical:${INFISICAL_DB_PASSWORD}@postgresql:5432/infisical",
+			secret: true,
+			description: "PostgreSQL connection URI",
+			required: true,
+		},
+		{
+			key: "REDIS_URL",
+			defaultValue: "redis://:${REDIS_PASSWORD}@redis:6379",
+			secret: true,
+			description: "Redis connection URI",
+			required: true,
+		},
+	],
+	healthcheck: {
+		test: "curl -sf http://localhost:8080/api/status || exit 1",
+		interval: "30s",
+		timeout: "10s",
+		retries: 5,
+		startPeriod: "45s",
+	},
+	dependsOn: ["postgresql", "redis"],
+	restartPolicy: "unless-stopped",
+	networks: ["openclaw-network"],
+
+	skills: [],
+	openclawEnvVars: [],
+
+	docsUrl: "https://infisical.com/docs/self-hosting/overview/introduction",
+	tags: ["secrets", "vault", "config", "security", "environment-management"],
+	maturity: "stable",
+
+	requires: ["postgresql", "redis"],
+	recommends: [],
+	conflictsWith: [],
+
+	minMemoryMB: 512,
+	gpuRequired: false,
+};

package/src/services/definitions/influxdb.ts

@@ -0,0 +1,109 @@
+import type { ServiceDefinition } from "../../types.js";
+
+export const influxdbDefinition: ServiceDefinition = {
+	id: "influxdb",
+	name: "InfluxDB",
+	description:
+		"Purpose-built time-series database for metrics, events, and real-time analytics with built-in dashboards and alerting.",
+	category: "database",
+	icon: "📈",
+
+	image: "influxdb",
+	imageTag: "2.7-alpine",
+	ports: [
+		{
+			host: 8086,
+			container: 8086,
+			description: "InfluxDB HTTP API",
+			exposed: true,
+		},
+	],
+	volumes: [
+		{
+			name: "influxdb-data",
+			containerPath: "/var/lib/influxdb2",
+			description: "Persistent InfluxDB data",
+		},
+		{
+			name: "influxdb-config",
+			containerPath: "/etc/influxdb2",
+			description: "InfluxDB configuration",
+		},
+	],
+	environment: [
+		{
+			key: "DOCKER_INFLUXDB_INIT_MODE",
+			defaultValue: "setup",
+			secret: false,
+			description: "Init mode",
+			required: true,
+		},
+		{
+			key: "DOCKER_INFLUXDB_INIT_USERNAME",
+			defaultValue: "openclaw",
+			secret: false,
+			description: "Admin username",
+			required: true,
+		},
+		{
+			key: "DOCKER_INFLUXDB_INIT_PASSWORD",
+			defaultValue: "",
+			secret: true,
+			description: "Admin password",
+			required: true,
+		},
+		{
+			key: "DOCKER_INFLUXDB_INIT_ORG",
+			defaultValue: "openclaw",
+			secret: false,
+			description: "Organization name",
+			required: true,
+		},
+		{
+			key: "DOCKER_INFLUXDB_INIT_BUCKET",
+			defaultValue: "default",
+			secret: false,
+			description: "Default bucket",
+			required: true,
+		},
+	],
+	healthcheck: {
+		test: "influx ping || exit 1",
+		interval: "30s",
+		timeout: "10s",
+		retries: 3,
+		startPeriod: "30s",
+	},
+	dependsOn: [],
+	restartPolicy: "unless-stopped",
+	networks: ["openclaw-network"],
+
+	skills: [],
+	openclawEnvVars: [
+		{
+			key: "INFLUXDB_HOST",
+			defaultValue: "influxdb",
+			secret: false,
+			description: "InfluxDB hostname",
+			required: false,
+		},
+		{
+			key: "INFLUXDB_PORT",
+			defaultValue: "8086",
+			secret: false,
+			description: "InfluxDB port",
+			required: false,
+		},
+	],
+
+	docsUrl: "https://docs.influxdata.com/influxdb/v2/",
+	tags: ["time-series", "metrics", "iot", "monitoring", "analytics"],
+	maturity: "stable",
+
+	requires: [],
+	recommends: [],
+	conflictsWith: [],
+
+	minMemoryMB: 256,
+	gpuRequired: false,
+};

package/src/services/definitions/invoke-ai.ts

@@ -0,0 +1,76 @@
+import type { ServiceDefinition } from "../../types.js";
+
+export const invokeAiDefinition: ServiceDefinition = {
+	id: "invoke-ai",
+	name: "InvokeAI",
+	description:
+		"Professional Stable Diffusion frontend with node-based workflows, canvas painting, and model management.",
+	category: "ai",
+	icon: "🎨",
+
+	image: "ghcr.io/invoke-ai/invokeai",
+	imageTag: "latest",
+	ports: [
+		{
+			host: 9090,
+			container: 9090,
+			description: "InvokeAI web UI",
+			exposed: true,
+		},
+	],
+	volumes: [
+		{
+			name: "invokeai-data",
+			containerPath: "/invokeai",
+			description: "InvokeAI application data and models",
+		},
+	],
+	environment: [
+		{
+			key: "INVOKEAI_ROOT",
+			defaultValue: "/invokeai",
+			secret: false,
+			description: "InvokeAI root directory",
+			required: false,
+		},
+	],
+	healthcheck: {
+		test: "curl -sf http://localhost:9090/api/app/version || exit 1",
+		interval: "30s",
+		timeout: "10s",
+		retries: 3,
+		startPeriod: "120s",
+	},
+	dependsOn: [],
+	restartPolicy: "unless-stopped",
+	networks: ["openclaw-network"],
+
+	skills: [],
+	openclawEnvVars: [
+		{
+			key: "INVOKEAI_HOST",
+			defaultValue: "invoke-ai",
+			secret: false,
+			description: "InvokeAI hostname for OpenClaw",
+			required: true,
+		},
+		{
+			key: "INVOKEAI_PORT",
+			defaultValue: "9090",
+			secret: false,
+			description: "InvokeAI port for OpenClaw",
+			required: true,
+		},
+	],
+
+	docsUrl: "https://invoke-ai.github.io/InvokeAI/",
+	tags: ["stable-diffusion", "image-generation", "canvas", "ai-art"],
+	maturity: "stable",
+
+	requires: [],
+	recommends: [],
+	conflictsWith: [],
+
+	minMemoryMB: 4096,
+	gpuRequired: true,
+};

package/src/services/definitions/jaeger.ts

@@ -0,0 +1,94 @@
+import type { ServiceDefinition } from "../../types.js";
+
+export const jaegerDefinition: ServiceDefinition = {
+	id: "jaeger",
+	name: "Jaeger",
+	description:
+		"End-to-end distributed tracing platform for monitoring and troubleshooting microservice architectures.",
+	category: "monitoring",
+	icon: "🔎",
+
+	image: "jaegertracing/all-in-one",
+	imageTag: "1.64",
+	ports: [
+		{
+			host: 16686,
+			container: 16686,
+			description: "Jaeger web UI",
+			exposed: true,
+		},
+		{
+			host: 4317,
+			container: 4317,
+			description: "OpenTelemetry gRPC",
+			exposed: true,
+		},
+		{
+			host: 4318,
+			container: 4318,
+			description: "OpenTelemetry HTTP",
+			exposed: true,
+		},
+	],
+	volumes: [
+		{
+			name: "jaeger-data",
+			containerPath: "/badger",
+			description: "Jaeger trace storage",
+		},
+	],
+	environment: [
+		{
+			key: "SPAN_STORAGE_TYPE",
+			defaultValue: "badger",
+			secret: false,
+			description: "Storage backend type",
+			required: true,
+		},
+		{
+			key: "BADGER_EPHEMERAL",
+			defaultValue: "false",
+			secret: false,
+			description: "Persist traces to disk",
+			required: true,
+		},
+		{
+			key: "BADGER_DIRECTORY_VALUE",
+			defaultValue: "/badger/data",
+			secret: false,
+			description: "Badger data directory",
+			required: true,
+		},
+		{
+			key: "BADGER_DIRECTORY_KEY",
+			defaultValue: "/badger/key",
+			secret: false,
+			description: "Badger key directory",
+			required: true,
+		},
+	],
+	healthcheck: {
+		test: "curl -sf http://localhost:16686/ || exit 1",
+		interval: "30s",
+		timeout: "10s",
+		retries: 3,
+		startPeriod: "15s",
+	},
+	dependsOn: [],
+	restartPolicy: "unless-stopped",
+	networks: ["openclaw-network"],
+
+	skills: [],
+	openclawEnvVars: [],
+
+	docsUrl: "https://www.jaegertracing.io/docs/",
+	tags: ["distributed-tracing", "opentelemetry", "observability", "microservices"],
+	maturity: "stable",
+
+	requires: [],
+	recommends: [],
+	conflictsWith: [],
+
+	minMemoryMB: 256,
+	gpuRequired: false,
+};

package/src/services/definitions/jan.ts

@@ -0,0 +1,68 @@
+import type { ServiceDefinition } from "../../types.js";
+
+export const janDefinition: ServiceDefinition = {
+	id: "jan",
+	name: "Jan",
+	description:
+		"Offline-first ChatGPT alternative with local model management, OpenAI-compatible API, and extensions.",
+	category: "ai-platform",
+	icon: "🤖",
+
+	image: "janhq/jan",
+	imageTag: "latest",
+	ports: [
+		{
+			host: 1337,
+			container: 1337,
+			description: "Jan API + UI",
+			exposed: true,
+		},
+	],
+	volumes: [
+		{
+			name: "jan-data",
+			containerPath: "/app/jan",
+			description: "Jan application data and models",
+		},
+	],
+	environment: [],
+	healthcheck: {
+		test: "curl -sf http://localhost:1337/healthz || exit 1",
+		interval: "30s",
+		timeout: "10s",
+		retries: 3,
+		startPeriod: "60s",
+	},
+	dependsOn: [],
+	restartPolicy: "unless-stopped",
+	networks: ["openclaw-network"],
+
+	skills: [],
+	openclawEnvVars: [
+		{
+			key: "JAN_HOST",
+			defaultValue: "jan",
+			secret: false,
+			description: "Jan hostname for OpenClaw",
+			required: true,
+		},
+		{
+			key: "JAN_PORT",
+			defaultValue: "1337",
+			secret: false,
+			description: "Jan API port for OpenClaw",
+			required: true,
+		},
+	],
+
+	docsUrl: "https://jan.ai/docs",
+	tags: ["chatgpt-alternative", "local-llm", "offline", "privacy"],
+	maturity: "stable",
+
+	requires: [],
+	recommends: [],
+	conflictsWith: [],
+
+	minMemoryMB: 2048,
+	gpuRequired: false,
+};

package/src/services/definitions/jitsi-meet.ts

@@ -0,0 +1,108 @@
+import type { ServiceDefinition } from "../../types.js";
+
+export const jitsiMeetDefinition: ServiceDefinition = {
+	id: "jitsi-meet",
+	name: "Jitsi Meet",
+	description:
+		"Open-source video conferencing platform with screen sharing, chat, and recording for secure self-hosted meetings.",
+	category: "communication",
+	icon: "📹",
+
+	image: "jitsi/web",
+	imageTag: "stable-9823",
+	ports: [
+		{
+			host: 8443,
+			container: 443,
+			description: "Jitsi Meet HTTPS UI",
+			exposed: true,
+		},
+		{
+			host: 8280,
+			container: 80,
+			description: "Jitsi Meet HTTP UI",
+			exposed: true,
+		},
+	],
+	volumes: [
+		{
+			name: "jitsi-config",
+			containerPath: "/config",
+			description: "Jitsi Meet configuration files",
+		},
+		{
+			name: "jitsi-transcripts",
+			containerPath: "/usr/share/jitsi-meet/transcripts",
+			description: "Jitsi Meet meeting transcripts",
+		},
+	],
+	environment: [
+		{
+			key: "PUBLIC_URL",
+			defaultValue: "http://localhost:8280",
+			secret: false,
+			description: "Public URL for Jitsi Meet",
+			required: true,
+		},
+		{
+			key: "TZ",
+			defaultValue: "UTC",
+			secret: false,
+			description: "Timezone for the Jitsi Meet server",
+			required: false,
+		},
+		{
+			key: "ENABLE_AUTH",
+			defaultValue: "0",
+			secret: false,
+			description: "Enable authentication for Jitsi Meet",
+			required: false,
+		},
+		{
+			key: "ENABLE_GUESTS",
+			defaultValue: "1",
+			secret: false,
+			description: "Allow guest access without authentication",
+			required: false,
+		},
+	],
+	healthcheck: {
+		test: "curl -sf http://localhost:80 || exit 1",
+		interval: "30s",
+		timeout: "10s",
+		retries: 3,
+		startPeriod: "30s",
+	},
+	dependsOn: [],
+	restartPolicy: "unless-stopped",
+	networks: ["openclaw-network"],
+
+	skills: [],
+	openclawEnvVars: [
+		{
+			key: "JITSI_HOST",
+			defaultValue: "jitsi-meet",
+			description: "Jitsi Meet service hostname",
+			secret: false,
+			required: false,
+		},
+		{
+			key: "JITSI_PORT",
+			defaultValue: "80",
+			description: "Jitsi Meet service port",
+			secret: false,
+			required: false,
+		},
+	],
+
+	docsUrl: "https://jitsi.github.io/handbook/docs/devops-guide/devops-guide-docker",
+	tags: ["video-conferencing", "meetings", "webrtc", "zoom-alternative"],
+	maturity: "stable",
+
+	requires: [],
+	recommends: [],
+	conflictsWith: [],
+
+	minMemoryMB: 512,
+	gpuRequired: false,
+};

package/src/services/definitions/keycloak.ts

@@ -0,0 +1,119 @@
+import type { ServiceDefinition } from "../../types.js";
+
+export const keycloakDefinition: ServiceDefinition = {
+	id: "keycloak",
+	name: "Keycloak",
+	description:
+		"Enterprise identity and access management platform with SSO, OIDC, SAML, and user federation for internal platforms and customer-facing apps.",
+	category: "security",
+	icon: "🗝️",
+
+	image: "quay.io/keycloak/keycloak",
+	imageTag: "26.2",
+	ports: [
+		{
+			host: 8112,
+			container: 8080,
+			description: "Keycloak HTTP interface",
+			exposed: true,
+		},
+	],
+	volumes: [],
+	environment: [
+		{
+			key: "KC_DB",
+			defaultValue: "postgres",
+			secret: false,
+			description: "Database vendor",
+			required: true,
+		},
+		{
+			key: "KC_DB_URL_HOST",
+			defaultValue: "postgresql",
+			secret: false,
+			description: "PostgreSQL host",
+			required: true,
+		},
+		{
+			key: "KC_DB_URL_DATABASE",
+			defaultValue: "keycloak",
+			secret: false,
+			description: "PostgreSQL database name",
+			required: true,
+		},
+		{
+			key: "KC_DB_USERNAME",
+			defaultValue: "keycloak",
+			secret: false,
+			description: "PostgreSQL user",
+			required: true,
+		},
+		{
+			key: "KC_DB_PASSWORD",
+			defaultValue: "${KEYCLOAK_DB_PASSWORD}",
+			secret: true,
+			description: "PostgreSQL password",
+			required: true,
+		},
+		{
+			key: "KEYCLOAK_ADMIN",
+			defaultValue: "admin",
+			secret: false,
+			description: "Initial Keycloak admin username",
+			required: true,
+		},
+		{
+			key: "KEYCLOAK_ADMIN_PASSWORD",
+			defaultValue: "${KEYCLOAK_ADMIN_PASSWORD}",
+			secret: true,
+			description: "Initial Keycloak admin password",
+			required: true,
+		},
+		{
+			key: "KC_HEALTH_ENABLED",
+			defaultValue: "true",
+			secret: false,
+			description: "Enable health endpoints",
+			required: true,
+		},
+		{
+			key: "KC_HTTP_ENABLED",
+			defaultValue: "true",
+			secret: false,
+			description: "Enable HTTP listener",
+			required: true,
+		},
+		{
+			key: "KC_PROXY_HEADERS",
+			defaultValue: "xforwarded",
+			secret: false,
+			description: "Trust reverse proxy forwarding headers",
+			required: true,
+		},
+	],
+	healthcheck: {
+		test: "curl -sf http://localhost:8080/health/ready || exit 1",
+		interval: "30s",
+		timeout: "10s",
+		retries: 10,
+		startPeriod: "60s",
+	},
+	command: "start-dev --http-port=8080",
+	dependsOn: ["postgresql"],
+	restartPolicy: "unless-stopped",
+	networks: ["openclaw-network"],
+
+	skills: [],
+	openclawEnvVars: [],
+
+	docsUrl: "https://www.keycloak.org/server/containers",
+	tags: ["identity", "iam", "sso", "oidc", "saml", "oauth2"],
+	maturity: "stable",
+
+	requires: ["postgresql"],
+	recommends: [],
+	conflictsWith: [],
+
+	minMemoryMB: 1024,
+	gpuRequired: false,
+};