cyberia 3.2.22 → 3.2.70

package/.env.example

@@ -1,72 +1,131 @@
-DEPLOY_ID=dd-default
-NODE_ENV=production
-PORT=3000
-JWT_SECRET=changethis
-REFRESH_EXPIRE_MINUTES=5
-ACCESS_EXPIRE_MINUTES=1440
-NODE_OPTIONS=--max-old-space-size=8192
-TIME_ZONE=changethis
-GITHUB_TOKEN=changethis
-GITHUB_USERNAME=changethis
-GITHUB_BACKUP_REPO=changethis
-GITHUB_DNS_REPO=changethis
-GITHUB_EMAIL=admin@default.net
-DEFAULT_DEPLOY_ID=dd-default
-DEFAULT_DEPLOY_HOST=default.net
-DEFAULT_DEPLOY_PATH=/
-MARIADB_HOST=changethis
-MARIADB_PORT=3306
-MARIADB_USER=changethis
-MARIADB_PASSWORD=changethis
+# Working env-file for the Cyberia ecosystem compose stack (custom workflow).
+# Used as-is by the CLI (not generated). Set real credentials here, then run:
+#   underpost docker-compose --up --deploy-id dd-cyberia --docker-compose-id cyberia
+#
+# Loaded explicitly via --env-file so container service-discovery values (the
+# Docker network hostnames below) are not overridden by any host-local .env.
+
+# --- Ecosystem images (dev variants, published by docker-image.*.dev.ci.yml) --
+# This stack is development-only, so it uses the `-dev` images built from the
+# Dockerfile.dev variants (debug builds + live-inspection tooling).
+MONGO_IMAGE=mongo:latest
+VALKEY_IMAGE=valkey/valkey:latest
+ENGINE_CYBERIA_IMAGE=underpost/engine-cyberia-dev
+ENGINE_CYBERIA_TAG=v3.2.70
+CYBERIA_SERVER_IMAGE=underpost/cyberia-server-dev
+CYBERIA_SERVER_TAG=v3.2.70
+CYBERIA_CLIENT_IMAGE=underpost/cyberia-client-dev
+CYBERIA_CLIENT_TAG=v3.2.70
+PROXY_IMAGE=nginx:stable-alpine
+IPFS_IMAGE=ipfs/kubo:latest
+IPFS_CLUSTER_IMAGE=ipfs/ipfs-cluster:latest
+
+# --- Private-repo bootstrap (engine-cyberia clones the private dd-cyberia conf) -
+# The engine-cyberia image ships only the underpost CLI; at start it runs the
+# `underpost start --build` bootstrap, which clones ${GITHUB_USERNAME}/engine-cyberia.
+GITHUB_USERNAME=underpostnet
+GITHUB_TOKEN=change_me_private_repo_token
+
+# --- MongoDB (translation of Secret mongodb-secret) --------------------------
+MONGO_INITDB_ROOT_USERNAME=admin
+MONGO_INITDB_ROOT_PASSWORD=change_me_dev_password
+
+# --- Application DB / cache connection (Docker service discovery, not localhost)
+NODE_ENV=development
 DB_PROVIDER=mongoose
-DB_HOST=mongodb://127.0.0.1:27017
-DB_NAME=default
-SMTP_HOST=changethis
-SMTP_PORT=465
-SMTP_SECURE=true
-SMTP_AUTH_USER=changethis
-SMTP_AUTH_PASS=changethis
-MAILER_SENDER_EMAIL=noreply@default.net
-MAILER_SENDER_NAME=Default
-DDNS_HOST=changethis
-DDNS_PROVIDER=dondominio
-DDNS_API_KEY=changethis
-DDNS_USER=changethis
-VALKEY_HOST=127.0.0.1
+DB_HOST=mongodb://mongodb:27017
+DB_REPLICA_SET=rs0
+DB_AUTH_SOURCE=admin
+VALKEY_HOST=valkey-service
 VALKEY_PORT=6379
-WIFI_PASSWORD=changethis
-CLOUDINARY_CLOUD_NAME=changethis
-CLOUDINARY_API_KEY=changethis
-CLOUDINARY_API_SECRET=changethis
-CLOUDINARY_PASSWORD=changethis
-CLOUDINARY_EMAIL=admin@default.net
-DB_PG_MAAS_NAME=changethis
-DB_PG_MAAS_PASS=changethis
-DB_PG_MAAS_USER=changethis
-DB_PG_MAAS_HOST=127.0.0.1
-DB_PG_MAAS_PORT=5432
-MAAS_ADMIN_USERNAME=changethis
-MAAS_API_KEY=changethis
-MAAS_ADMIN_EMAIL=admin@default.net
-MAAS_ADMIN_PASS=changethis
-TFTP_ROOT=changethis
-NETMASK=255.255.255.0
-MAAS_DNS=8.8.8.8
-MAAS_NTP_SERVER=changethis
-NFS_EXPORT_PATH=changethis
-NVIDIA_API_KEY=changethis
-DEFAULT_ADMIN_EMAIL=admin@default.net
-DEFAULT_ADMIN_PASSWORD=changethis
-DEFAULT_SSH_USER=changethis
-DEFAULT_SSH_HOST=changethis
-DEFAULT_SSH_KEY_PATH=changethis
-NPM_TOKEN=changethis
-NPM_USER=changethis
-NPM_PASSWORD=changethis
-POSTMAN_EMAIL=admin@default.net
-POSTMAN_PASSWORD=changethis
-DEFAULT_SSH_PORT=22
-ENABLE_FILE_LOGS=false
+
+# --- Cyberia instance wiring (compose service DNS) ---------------------------
+# cyberia-server -> engine-cyberia authority endpoints. INTERNAL only: these use
+# the docker service DNS (engine-cyberia) and must never leak to browser clients.
+INSTANCE_CODE=amethyst-strata-expansion
+ENGINE_API_BASE_URL=http://engine-cyberia:4005
+ENGINE_GRPC_ADDRESS=engine-cyberia:50051
+
+# Client-visible Content Authority origin, forwarded to browser/Raylib clients
+# for every engine-cyberia content/asset/metadata request. Host-reachable
+# (docker publishes engine-cyberia :4005). Distinct from ENGINE_API_BASE_URL:
+# the two responsibilities must never overwrite each other.
+ENGINE_PUBLIC_URL=http://localhost:4005
+ENGINE_GRPC_RELOAD_INTERVAL_SEC=300
+
+# cyberia-server logging. This is the dev stack, so default to DEBUG. Set
+# CYBERIA_SERVER_LOG_LEVEL (debug|info|warn|error) to override the APP_ENV
+# fallback without touching APP_ENV.
+CYBERIA_SERVER_APP_ENV=development
+CYBERIA_SERVER_LOG_LEVEL=
+
+# --- engine-cyberia runtime env (loaded into the container via env_file) -----
+# The dd-cyberia engine (engine-private/conf/dd-cyberia/conf.server.json) needs
+# these to boot: DB auth + per-site DB names, the base PORT (the cyberia host is
+# assigned PORT+1 = 4005, which the healthcheck/nginx target), JWT, and mailer.
+# Secrets are DEV PLACEHOLDERS — no real credentials ship in the public image.
+PORT=4004
+NODE_OPTIONS=--max-old-space-size=8192
 BASE_API=api
-DEV_PROXY_PORT_OFFSET=200
+DEFAULT_DEPLOY_ID=dd-cyberia
+DEPLOY_ID=dd-cyberia
+DEFAULT_DEPLOY_HOST=www.cyberiaonline.com
+DEFAULT_DEPLOY_PATH=/
+DISABLE_API_RATE_LIMIT=true
 DOTENV_CONFIG_QUIET=true
+ACCESS_EXPIRE_MINUTES=1440
+REFRESH_EXPIRE_MINUTES=5
+DEV_PROXY_PORT_OFFSET=0
+JWT_SECRET=change_me_dev_jwt_secret
+
+# DB auth (must match the MONGO_INITDB_ROOT_* creds above) + per-site DB names.
+DB_USER=admin
+DB_PASSWORD=change_me_dev_password
+
+DB_NAME_CYBERIA=cyberia
+
+# Mailer / SMTP (dev placeholders — mailer stays inert without real creds).
+MAILER_SENDER_NAME=CYBERIA
+MAILER_SENDER_EMAIL=noreply@example.com
+SMTP_HOST=smtp.example.com
+SMTP_PORT=465
+SMTP_AUTH_USER=change_me
+SMTP_AUTH_PASS=change_me
+MAILER_SENDER_NAME_CYBERIA=CYBERIA
+MAILER_SENDER_EMAIL_CYBERIA=noreply@example.com
+SMTP_HOST_CYBERIA=smtp.example.com
+SMTP_PORT_CYBERIA=465
+SMTP_AUTH_USER_CYBERIA=change_me
+SMTP_AUTH_PASS_CYBERIA=change_me
+
+# Third-party integrations (dev placeholders).
+CLOUDINARY_CLOUD_NAME=change_me
+CLOUDINARY_API_KEY=change_me
+CLOUDINARY_API_SECRET=change_me
+GEMINI_API_KEY=change_me
+HUGGINGFACE_API_KEY=change_me
+DEFAULT_ADMIN_EMAIL=admin@example.com
+DEFAULT_ADMIN_PASSWORD=change_me
+
+# --- IPFS endpoints ----------------------------------------------------------
+# Kubo (content plane) is the `ipfs` service; the Cluster REST API (:9094, pin
+# replication) is the `ipfs-cluster` service. Override only to target a
+# different node.
+IPFS_API_URL=http://ipfs:5001
+IPFS_GATEWAY_URL=http://ipfs:8080
+IPFS_CLUSTER_API_URL=http://ipfs-cluster:9094
+# 32-byte hex shared secret for the ipfs-cluster consensus (dev default is set
+# in docker-compose.yml). Override for a real/shared cluster.
+# CLUSTER_SECRET=
+
+# --- Host-published ports ----------------------------------------------------
+PROXY_HTTP_PORT=80
+IPFS_API_PORT=5001
+IPFS_GATEWAY_PORT=8080
+IPFS_CLUSTER_API_PORT=9094
+MONGO_HOST_PORT=27017
+VALKEY_NODEPORT=32079
+ENGINE_CYBERIA_REST_PORT=4005
+ENGINE_CYBERIA_GRPC_PORT=50051
+CYBERIA_SERVER_PORT=8081
+CYBERIA_CLIENT_PORT=8082

package/.github/workflows/cyberia-client.cd.yml

@@ -0,0 +1,40 @@
+name: CD | Cyberia mmo client | remote ssh
+on:
+  workflow_dispatch:
+    inputs:
+      job:
+        description: 'Job to run (deploy)'
+        required: true
+        type: choice
+        options:
+          - deploy
+permissions:
+  contents: write
+  packages: write
+  id-token: write
+
+jobs:
+  deploy:
+    if: >-
+      github.repository == 'underpostnet/cyberia-client'
+      && github.event.inputs.job == 'deploy'
+    name: Remote SSH deployment
+    runs-on: ubuntu-latest
+    steps:
+      - name: Run remote deploy via SSH
+        uses: appleboy/ssh-action@v1.2.5
+        with:
+          host: ${{ secrets.SSH_HOST }}
+          username: ${{ secrets.SSH_USERNAME }}
+          key: ${{ secrets.SSH_PRIV_KEY }}
+          port: ${{ secrets.SSH_PORT }}
+          command_timeout: 60m
+          script: |
+            set -e
+            echo "Starting remote deploy"
+            cd /home/dd/engine
+            TARGET_NODE=hp-envy-iso-ram-rocky9
+            sudo -n -- /bin/bash -lc "node bin run pull"
+            sudo -n -- /bin/bash -lc "node bin run secret"
+            sudo -n -- /bin/bash -lc "node bin/build dd-cyberia --conf"
+            sudo -n -- /bin/bash -lc "node bin run instance --node-name $HOSTNAME --kubeadm 'dd-cyberia,mmo-client' --node-name ${TARGET_NODE} --ssh-key-path /home/dd/tmp/897as9dxhaskd9"

package/.github/workflows/cyberia-server.cd.yml

@@ -0,0 +1,40 @@
+name: CD | Cyberia mmo server | remote ssh
+on:
+  workflow_dispatch:
+    inputs:
+      job:
+        description: 'Job to run (deploy)'
+        required: true
+        type: choice
+        options:
+          - deploy
+permissions:
+  contents: write
+  packages: write
+  id-token: write
+
+jobs:
+  deploy:
+    if: >-
+      github.repository == 'underpostnet/cyberia-server'
+      && github.event.inputs.job == 'deploy'
+    name: Remote SSH deployment
+    runs-on: ubuntu-latest
+    steps:
+      - name: Run remote deploy via SSH
+        uses: appleboy/ssh-action@v1.2.5
+        with:
+          host: ${{ secrets.SSH_HOST }}
+          username: ${{ secrets.SSH_USERNAME }}
+          key: ${{ secrets.SSH_PRIV_KEY }}
+          port: ${{ secrets.SSH_PORT }}
+          command_timeout: 60m
+          script: |
+            set -e
+            echo "Starting remote deploy"
+            cd /home/dd/engine
+            TARGET_NODE=hp-envy-iso-ram-rocky9
+            sudo -n -- /bin/bash -lc "node bin run pull"
+            sudo -n -- /bin/bash -lc "node bin run secret"
+            sudo -n -- /bin/bash -lc "node bin/build dd-cyberia --conf"
+            sudo -n -- /bin/bash -lc "node bin run instance --node-name $HOSTNAME --kubeadm 'dd-cyberia,mmo-server' --node-name ${TARGET_NODE} --ssh-key-path /home/dd/tmp/897as9dxhaskd9"

package/.github/workflows/docker-image.cyberia-client.ci.yml

@@ -0,0 +1,49 @@
+name: CI | Docker Image cyberia-client
+
+on:
+  workflow_dispatch:
+
+env:
+  UNDERPOST_VERSION: '3.2.70'
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4
+
+      - name: Login to Docker Hub
+        uses: docker/login-action@v4
+        with:
+          username: ${{ secrets.DOCKER_HUB_USERNAME }}
+          password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}
+
+      - name: Extract Docker metadata
+        id: meta
+        uses: docker/metadata-action@v6
+        with:
+          images: underpost/cyberia-client
+          tags: |
+            type=raw,value=v${{ env.UNDERPOST_VERSION }}
+            type=ref,event=branch
+            type=sha,prefix=sha-
+
+      - name: Build and push image
+        uses: docker/build-push-action@v7
+        with:
+          context: .
+          file: ./Dockerfile
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+
+          build-args: |
+            UNDERPOST_VERSION=${{ env.UNDERPOST_VERSION }}
+            BUILD_MODE=RELEASE

package/.github/workflows/docker-image.cyberia-client.dev.ci.yml

@@ -0,0 +1,48 @@
+name: CI | Docker Image cyberia-client (dev)
+
+on:
+  workflow_dispatch:
+
+env:
+  UNDERPOST_VERSION: '3.2.70'
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4
+
+      - name: Login to Docker Hub
+        uses: docker/login-action@v4
+        with:
+          username: ${{ secrets.DOCKER_HUB_USERNAME }}
+          password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}
+
+      - name: Extract Docker metadata
+        id: meta
+        uses: docker/metadata-action@v6
+        with:
+          images: underpost/cyberia-client-dev
+          tags: |
+            type=raw,value=v${{ env.UNDERPOST_VERSION }}
+            type=ref,event=branch
+            type=sha,prefix=sha-
+
+      - name: Build and push image
+        uses: docker/build-push-action@v7
+        with:
+          context: .
+          file: ./Dockerfile.dev
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          build-args: |
+            UNDERPOST_VERSION=${{ env.UNDERPOST_VERSION }}
+            BUILD_MODE=DEBUG

package/.github/workflows/docker-image.cyberia-server.ci.yml

@@ -0,0 +1,69 @@
+name: CI | Docker Image cyberia-server
+
+on:
+  workflow_dispatch:
+
+env:
+  UNDERPOST_VERSION: '3.2.70'
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: Checkout engine
+        uses: actions/checkout@v7
+        with:
+          repository: underpostnet/engine
+          path: engine
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: '24.x'
+
+      - name: Install engine dependencies
+        working-directory: engine
+        run: npm ci --ignore-scripts
+
+      - name: Build cyberia-server SSR dashboard
+        working-directory: engine
+        run: |
+          node bin/deploy cyberia
+          node bin/cyberia run-workflow build-server-dashboard --output-path ../public/index.html
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4
+
+      - name: Login to Docker Hub
+        uses: docker/login-action@v4
+        with:
+          username: ${{ secrets.DOCKER_HUB_USERNAME }}
+          password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}
+
+      - name: Extract Docker metadata
+        id: meta
+        uses: docker/metadata-action@v6
+        with:
+          images: underpost/cyberia-server
+          tags: |
+            type=raw,value=v${{ env.UNDERPOST_VERSION }}
+            type=ref,event=branch
+            type=sha,prefix=sha-
+
+      - name: Build and push image
+        uses: docker/build-push-action@v7
+        with:
+          context: .
+          file: ./Dockerfile
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+
+          build-args: |
+            UNDERPOST_VERSION=${{ env.UNDERPOST_VERSION }}

package/.github/workflows/docker-image.cyberia-server.dev.ci.yml

@@ -0,0 +1,69 @@
+name: CI | Docker Image cyberia-server (dev)
+
+on:
+  workflow_dispatch:
+
+env:
+  UNDERPOST_VERSION: '3.2.70'
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: Checkout engine
+        uses: actions/checkout@v7
+        with:
+          repository: underpostnet/engine
+          path: engine
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: '24.x'
+
+      - name: Install engine dependencies
+        working-directory: engine
+        run: npm ci --ignore-scripts
+
+      - name: Build cyberia-server SSR dashboard (dev)
+        working-directory: engine
+        run: |
+          node bin/deploy cyberia
+          node bin/cyberia run-workflow build-server-dashboard --dev --output-path ../public/index.html
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4
+
+      - name: Login to Docker Hub
+        uses: docker/login-action@v4
+        with:
+          username: ${{ secrets.DOCKER_HUB_USERNAME }}
+          password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}
+
+      - name: Extract Docker metadata
+        id: meta
+        uses: docker/metadata-action@v6
+        with:
+          images: underpost/cyberia-server-dev
+          tags: |
+            type=raw,value=v${{ env.UNDERPOST_VERSION }}
+            type=ref,event=branch
+            type=sha,prefix=sha-
+
+      - name: Build and push image
+        uses: docker/build-push-action@v7
+        with:
+          context: .
+          file: ./Dockerfile.dev
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+
+          build-args: |
+            UNDERPOST_VERSION=${{ env.UNDERPOST_VERSION }}

package/.github/workflows/docker-image.engine-cyberia.ci.yml

@@ -0,0 +1,52 @@
+name: CI | Docker Image engine-cyberia
+
+on:
+  workflow_dispatch:
+
+env:
+  UNDERPOST_VERSION: '3.2.70'
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4
+
+      - name: Login to Docker Hub
+        uses: docker/login-action@v4
+        with:
+          username: ${{ secrets.DOCKER_HUB_USERNAME }}
+          password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}
+
+      - name: Extract Docker metadata
+        id: meta
+        uses: docker/metadata-action@v6
+        with:
+          images: underpost/engine-cyberia
+          tags: |
+            type=raw,value=v${{ env.UNDERPOST_VERSION }}
+            type=ref,event=branch
+            type=sha,prefix=sha-
+
+      - name: Build and push image
+        uses: docker/build-push-action@v7
+        with:
+          context: .
+          file: ./src/runtime/engine-cyberia/Dockerfile
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+
+          build-args: |
+            UNDERPOST_VERSION=${{ env.UNDERPOST_VERSION }}
+
+          secrets: |
+            github_token=${{ secrets.GITHUB_TOKEN }}
+            github_username=${{ github.actor }}

package/.github/workflows/docker-image.engine-cyberia.dev.ci.yml

@@ -0,0 +1,52 @@
+name: CI | Docker Image engine-cyberia (dev)
+
+on:
+  workflow_dispatch:
+
+env:
+  UNDERPOST_VERSION: '3.2.70'
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4
+
+      - name: Login to Docker Hub
+        uses: docker/login-action@v4
+        with:
+          username: ${{ secrets.DOCKER_HUB_USERNAME }}
+          password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}
+
+      - name: Extract Docker metadata
+        id: meta
+        uses: docker/metadata-action@v6
+        with:
+          images: underpost/engine-cyberia-dev
+          tags: |
+            type=raw,value=v${{ env.UNDERPOST_VERSION }}
+            type=ref,event=branch
+            type=sha,prefix=sha-
+
+      - name: Build and push image
+        uses: docker/build-push-action@v7
+        with:
+          context: .
+          file: ./src/runtime/engine-cyberia/Dockerfile.dev
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+
+          build-args: |
+            UNDERPOST_VERSION=${{ env.UNDERPOST_VERSION }}
+
+          secrets: |
+            github_token=${{ secrets.GITHUB_TOKEN }}
+            github_username=${{ github.actor }}