From baac881a963ca81edca4b118083dcda4f60653fb Mon Sep 17 00:00:00 2001 From: StephGlansberg Date: Wed, 29 Jul 2026 13:34:22 -0700 Subject: [PATCH] fix(compose): restore mobile pairing sidecar Signed-off-by: StephGlansberg --- deploy/compose/.env.example | 6 ++++++ deploy/compose/compose.yml | 15 +++++++++++++++ 2 files changed, 21 insertions(+) diff --git a/deploy/compose/.env.example b/deploy/compose/.env.example index 838824c17f..6a5905808f 100644 --- a/deploy/compose/.env.example +++ b/deploy/compose/.env.example @@ -12,6 +12,12 @@ BUZZ_MEDIA_BASE_URL=https://buzz.example.com/media BUZZ_MEDIA_SERVER_DOMAIN=buzz.example.com BUZZ_CORS_ORIGINS=https://buzz.example.com +# Optional NIP-AB pairing sidecar. Start it with `--profile pairing`, then +# expose only its `/pair` route through a TLS reverse proxy. Never advertise +# this URL before the sidecar and proxy route are healthy. +# BUZZ_PAIRING_RELAY_URL=wss://buzz.example.com/pair +BUZZ_PAIR_RELAY_PORT=5000 + # Production defaults. Closed relay mode requires RELAY_OWNER_PUBKEY and a stable relay key. BUZZ_REQUIRE_AUTH_TOKEN=true BUZZ_REQUIRE_RELAY_MEMBERSHIP=true diff --git a/deploy/compose/compose.yml b/deploy/compose/compose.yml index bc3c27501e..e374dc5850 100644 --- a/deploy/compose/compose.yml +++ b/deploy/compose/compose.yml @@ -46,6 +46,21 @@ services: networks: - buzz-net + # Optional stateless NIP-AB transport for pairing a device that is not yet a + # relay member. The host port is loopback-only; a TLS reverse proxy must + # expose only /pair. Enable explicitly with `--profile pairing`. + pairing-relay: + profiles: ["pairing"] + image: ${BUZZ_IMAGE:-ghcr.io/block/buzz:main} + entrypoint: ["/usr/local/bin/buzz-pair-relay"] + environment: + BUZZ_PAIR_RELAY_BIND_ADDR: 0.0.0.0:5000 + ports: + - "127.0.0.1:${BUZZ_PAIR_RELAY_PORT:-5000}:5000" + restart: unless-stopped + networks: + - buzz-net + postgres: image: postgres:17-alpine environment: