attested-tls-proxy/docker-compose.yml at main · flashbots/attested-tls-proxy · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
services:
  # Simple HTTP backend
  backend:
    image: nginx:alpine
    networks:
      testnet:
        ipv4_address: 172.28.0.10

  # Proxy server - connects to backend, accepts TLS from client
  proxy-server:
    build: .
    command:
      - server
      - --listen-addr=0.0.0.0:8443
      - --tls-private-key-path=/certs/server.key
      - --tls-certificate-path=/certs/server.crt
      - --allowed-remote-attestation-type=none
      - "172.28.0.10:80"
    volumes:
      - ./certs:/certs:ro
    ports:
      - "8443:8443"
    depends_on:
      - backend
    networks:
      testnet:
        ipv4_address: 172.28.0.11

  # Proxy client - accepts HTTP, forwards to proxy-server over TLS
  proxy-client:
    build: .
    command:
      - client
      - --listen-addr=0.0.0.0:8080
      - proxy-server:8443
      - --tls-ca-certificate=/certs/ca.crt
      - --allowed-remote-attestation-type=none
    volumes:
      - ./certs:/certs:ro
    ports:
      - "8080:8080"
    depends_on:
      - proxy-server
    networks:
      testnet:

networks:
  testnet:
    driver: bridge
    ipam:
      config:
        - subnet: 172.28.0.0/16