commit c19e309e27574868ec18d16e9b7694d5bc067f23 · bretton.dev/coves

+5 -3

Caddyfile

···

       4
       4
        
       # Domain architecture:

     

       5
       5
        
       #   - coves.social: AppView (API, web app)

     

       6
       6
        
       #   - *.coves.social: Community handles (route atproto-did to PDS)

     

       7
       7
       -
       #   - coves.me: PDS (data storage)

     

       7
       7
       +
       #   - pds.coves.me: PDS canonical hostname (for relay registration)

     

       8
       8
       +
       #   - coves.me: PDS legacy hostname (kept for compatibility)

     

       8
       9
        
       

     

       9
       10
        
       # Community handle subdomains (e.g., gaming.coves.social)

     

       10
       11
        
       # These need to route /.well-known/atproto-did to PDS for handle resolution

     
···

       102
       103
        
           encode gzip zstd

     

       103
       104
        
       }

     

       104
       105
        
       

     

       105
       105
       -
       # PDS Domain

     

       106
       106
       -
       coves.me {

     

       106
       106
       +
       # PDS Domain (both hostnames point to same PDS)

     

       107
       107
       +
       # pds.coves.me is the canonical hostname for relay registration

     

       108
       108
       +
       pds.coves.me, coves.me {

     

       107
       109
        
           reverse_proxy pds:3000 {

     

       108
       110
        
               # Health check

     

       109
       111
        
               health_uri /xrpc/_health

+5 -4

docker-compose.prod.yml

···

       2
       2
        
       #

     

       3
       3
        
       # Architecture:

     

       4
       4
        
       #   - coves.social: AppView domain (API, frontend, .well-known/did.json)

     

       5
       5
       -
       #   - coves.me: PDS domain (must be separate from AppView)

     

       5
       5
       +
       #   - pds.coves.me: PDS domain (canonical hostname for relay registration)

     

       6
       6
       +
       #   - coves.me: PDS domain (legacy, kept for compatibility)

     

       6
       7
        
       #

     

       7
       8
        
       # Hardware: AMD Epyc 7351p (16c/32t), 256GB RAM, 2x500GB NVMe RAID

     

       8
       9
        
       #

     
···

       122
       123
        
           ports:

     

       123
       124
        
             - "127.0.0.1:3000:3000"  # Only expose to localhost (Caddy proxies)

     

       124
       125
        
           environment:

     

       125
       125
       -
             # PDS identity

     

       126
       126
       -
             PDS_HOSTNAME: coves.me

     

       126
       126
       +
             # PDS identity (use pds.coves.me for fresh relay registration)

     

       127
       127
       +
             PDS_HOSTNAME: pds.coves.me

     

       127
       128
        
             PDS_PORT: 3000

     

       128
       129
        
             PDS_DATA_DIRECTORY: /pds

     

       129
       130
        
             PDS_BLOBSTORE_DISK_LOCATION: /pds/blocks

     
···

       165
       166
        
             PDS_REPORT_SERVICE_DID: did:plc:ar7c4by46qjdydhdevvrndac

     

       166
       167
        
       

     

       167
       168
        
             # Relay crawlers (for federation with Bluesky network)

     

       168
       168
       -
             PDS_CRAWLERS: https://bsky.network

     

       169
       169
       +
             PDS_CRAWLERS: https://bsky.network,https://relay1.us-east.bsky.network,https://relay1.us-west.bsky.network,https://relay.fire.hose.cam,https://relay.upcloud.world

     

       169
       170
        
           volumes:

     

       170
       171
        
             - pds-data:/pds

     

       171
       172
        
           networks:

+23

static/.well-known/did.json

···

       1
       1
       +
       {

     

       2
       2
       +
         "@context": [

     

       3
       3
       +
           "https://www.w3.org/ns/did/v1",

     

       4
       4
       +
           "https://w3id.org/security/multikey/v1"

     

       5
       5
       +
         ],

     

       6
       6
       +
         "id": "did:web:coves.social",

     

       7
       7
       +
         "alsoKnownAs": ["at://coves.social"],

     

       8
       8
       +
         "verificationMethod": [

     

       9
       9
       +
           {

     

       10
       10
       +
             "id": "did:web:coves.social#atproto",

     

       11
       11
       +
             "type": "Multikey",

     

       12
       12
       +
             "controller": "did:web:coves.social",

     

       13
       13
       +
             "publicKeyMultibase": "zQ3shu1T3Y3MYoC1n7fCqkZqyrk8FiY3PV3BYM2JwyqcXFY6s"

     

       14
       14
       +
           }

     

       15
       15
       +
         ],

     

       16
       16
       +
         "service": [

     

       17
       17
       +
           {

     

       18
       18
       +
             "id": "#atproto_pds",

     

       19
       19
       +
             "type": "AtprotoPersonalDataServer",

     

       20
       20
       +
             "serviceEndpoint": "https://pds.coves.me"

     

       21
       21
       +
           }

     

       22
       22
       +
         ]

     

       23
       23
       +
       }