Add rust Dockerfile#80

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
tnull merged 3 commits into from
Jun 2, 2026
Merged

Add rust Dockerfile #80

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
c4c26ba
Upgrade bitcoin_hashes to 1.0
tankyleo Jun 2, 2026
71506ab
Add Dockerfile
Jun 2, 2026
e9df9b6
Add vss-server to docker-compose.yml
tankyleo Jun 2, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions rust/.dockerignore
View file
Open in desktop
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
target/
10 changes: 5 additions & 5 deletions rust/Cargo.lock
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

48 changes: 48 additions & 0 deletions rust/Dockerfile
View file
Open in desktop
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,48 @@
# Build stage
FROM rust:1.91-bookworm AS builder

WORKDIR /build

# Copy workspace files
COPY Cargo.toml Cargo.lock ./
COPY rustfmt.toml ./

# Copy all workspace members
COPY server ./server
COPY api ./api
COPY impls ./impls
COPY auth-impls ./auth-impls
Comment thread
tankyleo marked this conversation as resolved.

# Build the application in release mode
RUN cargo build --locked --release --bin vss-server

# Runtime stage
FROM debian:bookworm-slim

# Install runtime dependencies and create an unprivileged runtime user
RUN apt-get update && \
apt-get install -y --no-install-recommends \
ca-certificates \
libssl3 \
&& rm -rf /var/lib/apt/lists/* \
&& groupadd --system vss \
&& useradd --system --gid vss --home-dir /app --shell /usr/sbin/nologin vss \
&& mkdir -p /app \
&& chown vss:vss /app

WORKDIR /app

# Copy the compiled binary from builder
COPY --from=builder --chown=vss:vss /build/target/release/vss-server /app/vss-server

# Copy default configuration file
COPY --chown=vss:vss server/vss-server-config.toml /app/vss-server-config.toml

USER vss:vss

ENV VSS_BIND_ADDRESS=0.0.0.0:8080

EXPOSE 8080

@tnulltnullJun 2, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It seems by default this will only bind to localhost. Do we need to set VSS_BIND_ADDRESS to make this work outside of docker/reachable by other docker containers?

  • [P2] Use container-reachable network defaults — /home/tnull/workspace/vss-server/rust/Dockerfile:40-40
    When the image is run with its default CMD, e.g. docker run -p 8080:8080 ..., /app/vss-server-config.toml still binds VSS to 127.0.0.1 and points PostgreSQL at 127.0.0.1. Inside Docker those are container-loopback addresses, so the published port cannot reach the server and Postgres on
    another container/host is unreachable unless users override both env vars. Consider shipping a Docker-specific config or setting Docker defaults such as VSS_BIND_ADDRESS=0.0.0.0:8080 and a network-reachable Postgres address.

@tankyleotankyleoJun 2, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks made a couple more passes with codex, see below


# Run the server with the config file
CMD ["/app/vss-server", "/app/vss-server-config.toml"]
2 changes: 1 addition & 1 deletion rust/auth-impls/Cargo.toml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -12,7 +12,7 @@ sigs = [ "bitcoin_hashes", "hex-conservative", "secp256k1" ]
api = { path = "../api" }
async-trait = "0.1.77"
base64 = { version = "0.22.1", optional = true, default-features = false, features = ["std"] }
bitcoin_hashes = { version = "0.19", optional = true, default-features = false }
bitcoin_hashes = { version = "1.0", optional = true, default-features = false }
hex-conservative = { version = "1.0", optional = true, default-features = false }
openssl = { version = "0.10.75", optional = true, default-features = false }
secp256k1 = { version = "0.31", optional = true, default-features = false, features = [ "global-context" ] }
Expand Down
20 changes: 20 additions & 0 deletions rust/docker-compose.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,19 @@
services:
vss-server:
build:
context: .
dockerfile: Dockerfile
ports:
- "8080:8080"
environment:
VSS_BIND_ADDRESS: 0.0.0.0:8080
VSS_PSQL_ADDRESS: postgres:5432
depends_on:
postgres:
condition: service_healthy
networks:
- app-network

postgres:
image: postgres:15
environment:
Expand All@@ -9,6 +24,11 @@ services:
- postgres-data:/var/lib/postgresql/data
ports:
- "5432:5432"
healthcheck:
test: ["CMD-SHELL", "pg_isready -U postgres -d postgres"]
interval: 5s
timeout: 5s
retries: 5
networks:
- app-network

Expand Down
Loading
, 'i'); if (__m === '*' || __re.test(location.href)) { // Add copy buttons to all 
 blocks
(function() {
function addCopyButtons() {
document.querySelectorAll('pre code').forEach(function(codeBlock) {
if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;
codeBlock.parentElement.setAttribute('data-copy-added', 'true');
var btn = document.createElement('button');
btn.textContent = 'Copy';
btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';
btn.onmouseover = function() { this.style.opacity = '1'; };
btn.onmouseout = function() { this.style.opacity = '0.7'; };
btn.onclick = function() {
navigator.clipboard.writeText(codeBlock.textContent).then(function() {
btn.textContent = 'Copied!';
setTimeout(function() { btn.textContent = 'Copy'; }, 1500);
});
};
codeBlock.parentElement.style.position = 'relative';
codeBlock.parentElement.appendChild(btn);
});
}
addCopyButtons();
// Re-run on dynamic content
var observer = new MutationObserver(addCopyButtons);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '

Skip to content
Add rust Dockerfile#80

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

tnull
merged 3 commits into

from

Jun 2, 2026
 Merged


Add rust Dockerfile
#80
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


3 commits


Select commit
Hold shift + click to select a range
c4c26ba

Upgrade bitcoin_hashes to 1.0


tankyleo Jun 2, 2026
71506ab

Add Dockerfile

Jun 2, 2026
e9df9b6

Add vss-server to docker-compose.yml


tankyleo Jun 2, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


1 change: 1 addition & 0 deletions
rust/.dockerignore

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
target/

10 changes: 5 additions & 5 deletions
rust/Cargo.lock

View file


Open in desktop


Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.


48 changes: 48 additions & 0 deletions
rust/Dockerfile

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,48 @@
# Build stage
FROM rust:1.91-bookworm AS builder

WORKDIR /build

# Copy workspace files
COPY Cargo.toml Cargo.lock ./
COPY rustfmt.toml ./

# Copy all workspace members
COPY server ./server
COPY api ./api
COPY impls ./impls
COPY auth-impls ./auth-impls
Comment thread
tankyleo marked this conversation as resolved.


# Build the application in release mode
RUN cargo build --locked --release --bin vss-server

# Runtime stage
FROM debian:bookworm-slim

# Install runtime dependencies and create an unprivileged runtime user
RUN apt-get update && \
 apt-get install -y --no-install-recommends \
 ca-certificates \
 libssl3 \
 && rm -rf /var/lib/apt/lists/* \
 && groupadd --system vss \
 && useradd --system --gid vss --home-dir /app --shell /usr/sbin/nologin vss \
 && mkdir -p /app \
 && chown vss:vss /app

WORKDIR /app

# Copy the compiled binary from builder
COPY --from=builder --chown=vss:vss /build/target/release/vss-server /app/vss-server

# Copy default configuration file
COPY --chown=vss:vss server/vss-server-config.toml /app/vss-server-config.toml

USER vss:vss

ENV VSS_BIND_ADDRESS=0.0.0.0:8080

EXPOSE 8080
@tnulltnullJun 2, 2026

Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It seems by default this will only bind to localhost. Do we need to set VSS_BIND_ADDRESS to make this work outside of docker/reachable by other docker containers?
  • [P2] Use container-reachable network defaults — /home/tnull/workspace/vss-server/rust/Dockerfile:40-40
    
When the image is run with its default CMD, e.g. docker run -p 8080:8080 ..., /app/vss-server-config.toml still binds VSS to 127.0.0.1 and points PostgreSQL at 127.0.0.1. Inside Docker those are container-loopback addresses, so the published port cannot reach the server and Postgres on
    
another container/host is unreachable unless users override both env vars. Consider shipping a Docker-specific config or setting Docker defaults such as VSS_BIND_ADDRESS=0.0.0.0:8080 and a network-reachable Postgres address.
@tankyleotankyleoJun 2, 2026

Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks made a couple more passes with codex, see below

# Run the server with the config file
CMD ["/app/vss-server", "/app/vss-server-config.toml"]

2 changes: 1 addition & 1 deletion
rust/auth-impls/Cargo.toml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -12,7 +12,7 @@ sigs = [ "bitcoin_hashes", "hex-conservative", "secp256k1" ]
api = { path = "../api" }
async-trait = "0.1.77"
base64 = { version = "0.22.1", optional = true, default-features = false, features = ["std"] }
bitcoin_hashes = { version = "0.19", optional = true, default-features = false }
bitcoin_hashes = { version = "1.0", optional = true, default-features = false }
hex-conservative = { version = "1.0", optional = true, default-features = false }
openssl = { version = "0.10.75", optional = true, default-features = false }
secp256k1 = { version = "0.31", optional = true, default-features = false, features = [ "global-context" ] }
Expand Down

20 changes: 20 additions & 0 deletions
rust/docker-compose.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -1,4 +1,19 @@
services:
 vss-server:
 build:
 context: .
 dockerfile: Dockerfile
 ports:
 - "8080:8080"
 environment:
 VSS_BIND_ADDRESS: 0.0.0.0:8080
 VSS_PSQL_ADDRESS: postgres:5432
 depends_on:
 postgres:
 condition: service_healthy
 networks:
 - app-network

 postgres:
 image: postgres:15
 environment:
Expand All@@ -9,6 +24,11 @@ services:
 - postgres-data:/var/lib/postgresql/data
 ports:
 - "5432:5432"
 healthcheck:
 test: ["CMD-SHELL", "pg_isready -U postgres -d postgres"]
 interval: 5s
 timeout: 5s
 retries: 5
 networks:
 - app-network

Expand Down
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Force GitHub README to respect dark mode
(function() {
var style = document.createElement('style');
style.textContent = '
.markdown-body {
color-scheme: dark light;
}
.markdown-body pre { background: #161b22 !important; }
.markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }
.markdown-body table th, .markdown-body table td { border-color: #30363d !important; }
.markdown-body img { background: #0d1117; }
.markdown-body blockquote { border-left-color: #8b949e; }
.markdown-body hr { border-color: #30363d; }
';
document.head.appendChild(style);
})();
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Add rust Dockerfile#80

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

tnull
merged 3 commits into

from

Jun 2, 2026
 Merged


Add rust Dockerfile
#80
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


3 commits


Select commit
Hold shift + click to select a range
c4c26ba

Upgrade bitcoin_hashes to 1.0


tankyleo Jun 2, 2026
71506ab

Add Dockerfile

Jun 2, 2026
e9df9b6

Add vss-server to docker-compose.yml


tankyleo Jun 2, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


1 change: 1 addition & 0 deletions
rust/.dockerignore

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
target/

10 changes: 5 additions & 5 deletions
rust/Cargo.lock

View file


Open in desktop


Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.


48 changes: 48 additions & 0 deletions
rust/Dockerfile

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,48 @@
# Build stage
FROM rust:1.91-bookworm AS builder

WORKDIR /build

# Copy workspace files
COPY Cargo.toml Cargo.lock ./
COPY rustfmt.toml ./

# Copy all workspace members
COPY server ./server
COPY api ./api
COPY impls ./impls
COPY auth-impls ./auth-impls
Comment thread
tankyleo marked this conversation as resolved.


# Build the application in release mode
RUN cargo build --locked --release --bin vss-server

# Runtime stage
FROM debian:bookworm-slim

# Install runtime dependencies and create an unprivileged runtime user
RUN apt-get update && \
 apt-get install -y --no-install-recommends \
 ca-certificates \
 libssl3 \
 && rm -rf /var/lib/apt/lists/* \
 && groupadd --system vss \
 && useradd --system --gid vss --home-dir /app --shell /usr/sbin/nologin vss \
 && mkdir -p /app \
 && chown vss:vss /app

WORKDIR /app

# Copy the compiled binary from builder
COPY --from=builder --chown=vss:vss /build/target/release/vss-server /app/vss-server

# Copy default configuration file
COPY --chown=vss:vss server/vss-server-config.toml /app/vss-server-config.toml

USER vss:vss

ENV VSS_BIND_ADDRESS=0.0.0.0:8080

EXPOSE 8080
@tnulltnullJun 2, 2026

Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It seems by default this will only bind to localhost. Do we need to set VSS_BIND_ADDRESS to make this work outside of docker/reachable by other docker containers?
  • [P2] Use container-reachable network defaults — /home/tnull/workspace/vss-server/rust/Dockerfile:40-40
    
When the image is run with its default CMD, e.g. docker run -p 8080:8080 ..., /app/vss-server-config.toml still binds VSS to 127.0.0.1 and points PostgreSQL at 127.0.0.1. Inside Docker those are container-loopback addresses, so the published port cannot reach the server and Postgres on
    
another container/host is unreachable unless users override both env vars. Consider shipping a Docker-specific config or setting Docker defaults such as VSS_BIND_ADDRESS=0.0.0.0:8080 and a network-reachable Postgres address.
@tankyleotankyleoJun 2, 2026

Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks made a couple more passes with codex, see below

# Run the server with the config file
CMD ["/app/vss-server", "/app/vss-server-config.toml"]

2 changes: 1 addition & 1 deletion
rust/auth-impls/Cargo.toml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -12,7 +12,7 @@ sigs = [ "bitcoin_hashes", "hex-conservative", "secp256k1" ]
api = { path = "../api" }
async-trait = "0.1.77"
base64 = { version = "0.22.1", optional = true, default-features = false, features = ["std"] }
bitcoin_hashes = { version = "0.19", optional = true, default-features = false }
bitcoin_hashes = { version = "1.0", optional = true, default-features = false }
hex-conservative = { version = "1.0", optional = true, default-features = false }
openssl = { version = "0.10.75", optional = true, default-features = false }
secp256k1 = { version = "0.31", optional = true, default-features = false, features = [ "global-context" ] }
Expand Down

20 changes: 20 additions & 0 deletions
rust/docker-compose.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -1,4 +1,19 @@
services:
 vss-server:
 build:
 context: .
 dockerfile: Dockerfile
 ports:
 - "8080:8080"
 environment:
 VSS_BIND_ADDRESS: 0.0.0.0:8080
 VSS_PSQL_ADDRESS: postgres:5432
 depends_on:
 postgres:
 condition: service_healthy
 networks:
 - app-network

 postgres:
 image: postgres:15
 environment:
Expand All@@ -9,6 +24,11 @@ services:
 - postgres-data:/var/lib/postgresql/data
 ports:
 - "5432:5432"
 healthcheck:
 test: ["CMD-SHELL", "pg_isready -U postgres -d postgres"]
 interval: 5s
 timeout: 5s
 retries: 5
 networks:
 - app-network

Expand Down
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Highlight search terms from Google/DuckDuckGo/Bing referrer
(function() {
var ref = document.referrer;
var terms = [];
if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {
var url = new URL(ref);
var q = url.searchParams.get('q') || url.searchParams.get('p');
if (q) {
terms = q.split(/\s+/).filter(function(t) { return t.length > 2; });
}
}
if (terms.length === 0) return;
var style = document.createElement('style');
style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';
document.head.appendChild(style);
function highlight(node) {
if (node.nodeType === 3) { // text node
var text = node.textContent;
var found = false;
terms.forEach(function(term) {
var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\]\\]/g, '\\') + ')', 'gi');
if (regex.test(text)) {
found = true;
var frag = document.createDocumentFragment();
var parts = text.split(regex);
parts.forEach(function(part, i) {
if (i % 2 === 0) {
frag.appendChild(document.createTextNode(part));
} else {
var span = document.createElement('span');
span.className = 'userscript-highlight';
span.textContent = part;
frag.appendChild(span);
}
});
node.parentNode.replaceChild(frag, node);
}
});
} else if (node.nodeType === 1 && node.childNodes) { // element
var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];
if (!skipTags.includes(node.tagName)) {
Array.from(node.childNodes).forEach(highlight);
}
}
}
highlight(document.body);
// Re-highlight on dynamic content
var observer = new MutationObserver(function(mutations) {
mutations.forEach(function(m) {
m.addedNodes.forEach(function(node) {
if (node.nodeType === 1 || node.nodeType === 3) highlight(node);
});
});
});
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Add rust Dockerfile#80

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

tnull
merged 3 commits into

from

Jun 2, 2026
 Merged


Add rust Dockerfile
#80
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


3 commits


Select commit
Hold shift + click to select a range
c4c26ba

Upgrade bitcoin_hashes to 1.0


tankyleo Jun 2, 2026
71506ab

Add Dockerfile

Jun 2, 2026
e9df9b6

Add vss-server to docker-compose.yml


tankyleo Jun 2, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


1 change: 1 addition & 0 deletions
rust/.dockerignore

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
target/

10 changes: 5 additions & 5 deletions
rust/Cargo.lock

View file


Open in desktop


Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.


48 changes: 48 additions & 0 deletions
rust/Dockerfile

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,48 @@
# Build stage
FROM rust:1.91-bookworm AS builder

WORKDIR /build

# Copy workspace files
COPY Cargo.toml Cargo.lock ./
COPY rustfmt.toml ./

# Copy all workspace members
COPY server ./server
COPY api ./api
COPY impls ./impls
COPY auth-impls ./auth-impls
Comment thread
tankyleo marked this conversation as resolved.


# Build the application in release mode
RUN cargo build --locked --release --bin vss-server

# Runtime stage
FROM debian:bookworm-slim

# Install runtime dependencies and create an unprivileged runtime user
RUN apt-get update && \
 apt-get install -y --no-install-recommends \
 ca-certificates \
 libssl3 \
 && rm -rf /var/lib/apt/lists/* \
 && groupadd --system vss \
 && useradd --system --gid vss --home-dir /app --shell /usr/sbin/nologin vss \
 && mkdir -p /app \
 && chown vss:vss /app

WORKDIR /app

# Copy the compiled binary from builder
COPY --from=builder --chown=vss:vss /build/target/release/vss-server /app/vss-server

# Copy default configuration file
COPY --chown=vss:vss server/vss-server-config.toml /app/vss-server-config.toml

USER vss:vss

ENV VSS_BIND_ADDRESS=0.0.0.0:8080

EXPOSE 8080
@tnulltnullJun 2, 2026

Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It seems by default this will only bind to localhost. Do we need to set VSS_BIND_ADDRESS to make this work outside of docker/reachable by other docker containers?
  • [P2] Use container-reachable network defaults — /home/tnull/workspace/vss-server/rust/Dockerfile:40-40
    
When the image is run with its default CMD, e.g. docker run -p 8080:8080 ..., /app/vss-server-config.toml still binds VSS to 127.0.0.1 and points PostgreSQL at 127.0.0.1. Inside Docker those are container-loopback addresses, so the published port cannot reach the server and Postgres on
    
another container/host is unreachable unless users override both env vars. Consider shipping a Docker-specific config or setting Docker defaults such as VSS_BIND_ADDRESS=0.0.0.0:8080 and a network-reachable Postgres address.
@tankyleotankyleoJun 2, 2026

Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks made a couple more passes with codex, see below

# Run the server with the config file
CMD ["/app/vss-server", "/app/vss-server-config.toml"]

2 changes: 1 addition & 1 deletion
rust/auth-impls/Cargo.toml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -12,7 +12,7 @@ sigs = [ "bitcoin_hashes", "hex-conservative", "secp256k1" ]
api = { path = "../api" }
async-trait = "0.1.77"
base64 = { version = "0.22.1", optional = true, default-features = false, features = ["std"] }
bitcoin_hashes = { version = "0.19", optional = true, default-features = false }
bitcoin_hashes = { version = "1.0", optional = true, default-features = false }
hex-conservative = { version = "1.0", optional = true, default-features = false }
openssl = { version = "0.10.75", optional = true, default-features = false }
secp256k1 = { version = "0.31", optional = true, default-features = false, features = [ "global-context" ] }
Expand Down

20 changes: 20 additions & 0 deletions
rust/docker-compose.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -1,4 +1,19 @@
services:
 vss-server:
 build:
 context: .
 dockerfile: Dockerfile
 ports:
 - "8080:8080"
 environment:
 VSS_BIND_ADDRESS: 0.0.0.0:8080
 VSS_PSQL_ADDRESS: postgres:5432
 depends_on:
 postgres:
 condition: service_healthy
 networks:
 - app-network

 postgres:
 image: postgres:15
 environment:
Expand All@@ -9,6 +24,11 @@ services:
 - postgres-data:/var/lib/postgresql/data
 ports:
 - "5432:5432"
 healthcheck:
 test: ["CMD-SHELL", "pg_isready -U postgres -d postgres"]
 interval: 5s
 timeout: 5s
 retries: 5
 networks:
 - app-network

Expand Down
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Strip utm_, fbclid, gclid, etc. from all links on page
(function() {
var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',
'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',
'ref', 'ref_src', 'source', 'medium', 'campaign'];
function cleanUrl(url) {
try {
var u = new URL(url, window.location.origin);
var changed = false;
trackingParams.forEach(function(p) {
if (u.searchParams.has(p)) {
u.searchParams.delete(p);
changed = true;
}
});
return changed ? u.toString() : url;
} catch (e) {
return url;
}
}
function cleanLinks() {
document.querySelectorAll('a[href]').forEach(function(a) {
var clean = cleanUrl(a.href);
if (clean !== a.href) a.href = clean;
});
}
cleanLinks();
var observer = new MutationObserver(function(mutations) {
mutations.forEach(function(m) {
m.addedNodes.forEach(function(node) {
if (node.nodeType === 1) {
if (node.tagName === 'A') cleanLinks();
node.querySelectorAll('a[href]').forEach(function(a) {
var clean = cleanUrl(a.href);
if (clean !== a.href) a.href = clean;
});
}
});
});
});
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '

Skip to content
Add rust Dockerfile#80

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

tnull
merged 3 commits into

from

Jun 2, 2026
 Merged


Add rust Dockerfile
#80
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


3 commits


Select commit
Hold shift + click to select a range
c4c26ba

Upgrade bitcoin_hashes to 1.0


tankyleo Jun 2, 2026
71506ab

Add Dockerfile

Jun 2, 2026
e9df9b6

Add vss-server to docker-compose.yml


tankyleo Jun 2, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


1 change: 1 addition & 0 deletions
rust/.dockerignore

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
target/

10 changes: 5 additions & 5 deletions
rust/Cargo.lock

View file


Open in desktop


Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.


48 changes: 48 additions & 0 deletions
rust/Dockerfile

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,48 @@
# Build stage
FROM rust:1.91-bookworm AS builder

WORKDIR /build

# Copy workspace files
COPY Cargo.toml Cargo.lock ./
COPY rustfmt.toml ./

# Copy all workspace members
COPY server ./server
COPY api ./api
COPY impls ./impls
COPY auth-impls ./auth-impls
Comment thread
tankyleo marked this conversation as resolved.


# Build the application in release mode
RUN cargo build --locked --release --bin vss-server

# Runtime stage
FROM debian:bookworm-slim

# Install runtime dependencies and create an unprivileged runtime user
RUN apt-get update && \
 apt-get install -y --no-install-recommends \
 ca-certificates \
 libssl3 \
 && rm -rf /var/lib/apt/lists/* \
 && groupadd --system vss \
 && useradd --system --gid vss --home-dir /app --shell /usr/sbin/nologin vss \
 && mkdir -p /app \
 && chown vss:vss /app

WORKDIR /app

# Copy the compiled binary from builder
COPY --from=builder --chown=vss:vss /build/target/release/vss-server /app/vss-server

# Copy default configuration file
COPY --chown=vss:vss server/vss-server-config.toml /app/vss-server-config.toml

USER vss:vss

ENV VSS_BIND_ADDRESS=0.0.0.0:8080

EXPOSE 8080
@tnulltnullJun 2, 2026

Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It seems by default this will only bind to localhost. Do we need to set VSS_BIND_ADDRESS to make this work outside of docker/reachable by other docker containers?
  • [P2] Use container-reachable network defaults — /home/tnull/workspace/vss-server/rust/Dockerfile:40-40
    
When the image is run with its default CMD, e.g. docker run -p 8080:8080 ..., /app/vss-server-config.toml still binds VSS to 127.0.0.1 and points PostgreSQL at 127.0.0.1. Inside Docker those are container-loopback addresses, so the published port cannot reach the server and Postgres on
    
another container/host is unreachable unless users override both env vars. Consider shipping a Docker-specific config or setting Docker defaults such as VSS_BIND_ADDRESS=0.0.0.0:8080 and a network-reachable Postgres address.
@tankyleotankyleoJun 2, 2026

Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks made a couple more passes with codex, see below

# Run the server with the config file
CMD ["/app/vss-server", "/app/vss-server-config.toml"]

2 changes: 1 addition & 1 deletion
rust/auth-impls/Cargo.toml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -12,7 +12,7 @@ sigs = [ "bitcoin_hashes", "hex-conservative", "secp256k1" ]
api = { path = "../api" }
async-trait = "0.1.77"
base64 = { version = "0.22.1", optional = true, default-features = false, features = ["std"] }
bitcoin_hashes = { version = "0.19", optional = true, default-features = false }
bitcoin_hashes = { version = "1.0", optional = true, default-features = false }
hex-conservative = { version = "1.0", optional = true, default-features = false }
openssl = { version = "0.10.75", optional = true, default-features = false }
secp256k1 = { version = "0.31", optional = true, default-features = false, features = [ "global-context" ] }
Expand Down

20 changes: 20 additions & 0 deletions
rust/docker-compose.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -1,4 +1,19 @@
services:
 vss-server:
 build:
 context: .
 dockerfile: Dockerfile
 ports:
 - "8080:8080"
 environment:
 VSS_BIND_ADDRESS: 0.0.0.0:8080
 VSS_PSQL_ADDRESS: postgres:5432
 depends_on:
 postgres:
 condition: service_healthy
 networks:
 - app-network

 postgres:
 image: postgres:15
 environment:
Expand All@@ -9,6 +24,11 @@ services:
 - postgres-data:/var/lib/postgresql/data
 ports:
 - "5432:5432"
 healthcheck:
 test: ["CMD-SHELL", "pg_isready -U postgres -d postgres"]
 interval: 5s
 timeout: 5s
 retries: 5
 networks:
 - app-network

Expand Down
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Auto-enable theater mode on YouTube
(function() {
function tryTheater() {
var btn = document.querySelector('button[aria-label="Theater mode"], ytd-player #player button[title="Theater mode"]');
if (btn && !btn.classList.contains('activated')) {
btn.click();
}
}
// Try immediately
tryTheater();
// Try after navigation (SPA)
var lastUrl = location.href;
setInterval(function() {
if (location.href !== lastUrl) {
lastUrl = location.href;
setTimeout(tryTheater, 500);
}
}, 1000);
// Also try on player load
var observer = new MutationObserver(tryTheater);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Add rust Dockerfile#80

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

tnull
merged 3 commits into

from

Jun 2, 2026
 Merged


Add rust Dockerfile
#80
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


3 commits


Select commit
Hold shift + click to select a range
c4c26ba

Upgrade bitcoin_hashes to 1.0


tankyleo Jun 2, 2026
71506ab

Add Dockerfile

Jun 2, 2026
e9df9b6

Add vss-server to docker-compose.yml


tankyleo Jun 2, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


1 change: 1 addition & 0 deletions
rust/.dockerignore

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
target/

10 changes: 5 additions & 5 deletions
rust/Cargo.lock

View file


Open in desktop


Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.


48 changes: 48 additions & 0 deletions
rust/Dockerfile

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,48 @@
# Build stage
FROM rust:1.91-bookworm AS builder

WORKDIR /build

# Copy workspace files
COPY Cargo.toml Cargo.lock ./
COPY rustfmt.toml ./

# Copy all workspace members
COPY server ./server
COPY api ./api
COPY impls ./impls
COPY auth-impls ./auth-impls
Comment thread
tankyleo marked this conversation as resolved.


# Build the application in release mode
RUN cargo build --locked --release --bin vss-server

# Runtime stage
FROM debian:bookworm-slim

# Install runtime dependencies and create an unprivileged runtime user
RUN apt-get update && \
 apt-get install -y --no-install-recommends \
 ca-certificates \
 libssl3 \
 && rm -rf /var/lib/apt/lists/* \
 && groupadd --system vss \
 && useradd --system --gid vss --home-dir /app --shell /usr/sbin/nologin vss \
 && mkdir -p /app \
 && chown vss:vss /app

WORKDIR /app

# Copy the compiled binary from builder
COPY --from=builder --chown=vss:vss /build/target/release/vss-server /app/vss-server

# Copy default configuration file
COPY --chown=vss:vss server/vss-server-config.toml /app/vss-server-config.toml

USER vss:vss

ENV VSS_BIND_ADDRESS=0.0.0.0:8080

EXPOSE 8080
@tnulltnullJun 2, 2026

Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It seems by default this will only bind to localhost. Do we need to set VSS_BIND_ADDRESS to make this work outside of docker/reachable by other docker containers?
  • [P2] Use container-reachable network defaults — /home/tnull/workspace/vss-server/rust/Dockerfile:40-40
    
When the image is run with its default CMD, e.g. docker run -p 8080:8080 ..., /app/vss-server-config.toml still binds VSS to 127.0.0.1 and points PostgreSQL at 127.0.0.1. Inside Docker those are container-loopback addresses, so the published port cannot reach the server and Postgres on
    
another container/host is unreachable unless users override both env vars. Consider shipping a Docker-specific config or setting Docker defaults such as VSS_BIND_ADDRESS=0.0.0.0:8080 and a network-reachable Postgres address.
@tankyleotankyleoJun 2, 2026

Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks made a couple more passes with codex, see below

# Run the server with the config file
CMD ["/app/vss-server", "/app/vss-server-config.toml"]

2 changes: 1 addition & 1 deletion
rust/auth-impls/Cargo.toml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -12,7 +12,7 @@ sigs = [ "bitcoin_hashes", "hex-conservative", "secp256k1" ]
api = { path = "../api" }
async-trait = "0.1.77"
base64 = { version = "0.22.1", optional = true, default-features = false, features = ["std"] }
bitcoin_hashes = { version = "0.19", optional = true, default-features = false }
bitcoin_hashes = { version = "1.0", optional = true, default-features = false }
hex-conservative = { version = "1.0", optional = true, default-features = false }
openssl = { version = "0.10.75", optional = true, default-features = false }
secp256k1 = { version = "0.31", optional = true, default-features = false, features = [ "global-context" ] }
Expand Down

20 changes: 20 additions & 0 deletions
rust/docker-compose.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -1,4 +1,19 @@
services:
 vss-server:
 build:
 context: .
 dockerfile: Dockerfile
 ports:
 - "8080:8080"
 environment:
 VSS_BIND_ADDRESS: 0.0.0.0:8080
 VSS_PSQL_ADDRESS: postgres:5432
 depends_on:
 postgres:
 condition: service_healthy
 networks:
 - app-network

 postgres:
 image: postgres:15
 environment:
Expand All@@ -9,6 +24,11 @@ services:
 - postgres-data:/var/lib/postgresql/data
 ports:
 - "5432:5432"
 healthcheck:
 test: ["CMD-SHELL", "pg_isready -U postgres -d postgres"]
 interval: 5s
 timeout: 5s
 retries: 5
 networks:
 - app-network

Expand Down
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Remove or un-stick sticky/fixed headers that block content
(function() {
function unstick() {
document.querySelectorAll('header, nav, [role="banner"], .header, .navbar, .sticky, .fixed-top, [style*="position: fixed"], [style*="position:sticky"]').forEach(function(el) {
if (el.style.position === 'fixed' || el.style.position === 'sticky' || getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {
el.style.position = 'static';
el.style.top = 'auto';
el.style.zIndex = 'auto';
}
});
}
unstick();
var observer = new MutationObserver(unstick);
observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });
})();
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Add rust Dockerfile#80

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

tnull
merged 3 commits into

from

Jun 2, 2026
 Merged


Add rust Dockerfile
#80
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


3 commits


Select commit
Hold shift + click to select a range
c4c26ba

Upgrade bitcoin_hashes to 1.0


tankyleo Jun 2, 2026
71506ab

Add Dockerfile

Jun 2, 2026
e9df9b6

Add vss-server to docker-compose.yml


tankyleo Jun 2, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


1 change: 1 addition & 0 deletions
rust/.dockerignore

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
target/

10 changes: 5 additions & 5 deletions
rust/Cargo.lock

View file


Open in desktop


Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.


48 changes: 48 additions & 0 deletions
rust/Dockerfile

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,48 @@
# Build stage
FROM rust:1.91-bookworm AS builder

WORKDIR /build

# Copy workspace files
COPY Cargo.toml Cargo.lock ./
COPY rustfmt.toml ./

# Copy all workspace members
COPY server ./server
COPY api ./api
COPY impls ./impls
COPY auth-impls ./auth-impls
Comment thread
tankyleo marked this conversation as resolved.


# Build the application in release mode
RUN cargo build --locked --release --bin vss-server

# Runtime stage
FROM debian:bookworm-slim

# Install runtime dependencies and create an unprivileged runtime user
RUN apt-get update && \
 apt-get install -y --no-install-recommends \
 ca-certificates \
 libssl3 \
 && rm -rf /var/lib/apt/lists/* \
 && groupadd --system vss \
 && useradd --system --gid vss --home-dir /app --shell /usr/sbin/nologin vss \
 && mkdir -p /app \
 && chown vss:vss /app

WORKDIR /app

# Copy the compiled binary from builder
COPY --from=builder --chown=vss:vss /build/target/release/vss-server /app/vss-server

# Copy default configuration file
COPY --chown=vss:vss server/vss-server-config.toml /app/vss-server-config.toml

USER vss:vss

ENV VSS_BIND_ADDRESS=0.0.0.0:8080

EXPOSE 8080
@tnulltnullJun 2, 2026

Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It seems by default this will only bind to localhost. Do we need to set VSS_BIND_ADDRESS to make this work outside of docker/reachable by other docker containers?
  • [P2] Use container-reachable network defaults — /home/tnull/workspace/vss-server/rust/Dockerfile:40-40
    
When the image is run with its default CMD, e.g. docker run -p 8080:8080 ..., /app/vss-server-config.toml still binds VSS to 127.0.0.1 and points PostgreSQL at 127.0.0.1. Inside Docker those are container-loopback addresses, so the published port cannot reach the server and Postgres on
    
another container/host is unreachable unless users override both env vars. Consider shipping a Docker-specific config or setting Docker defaults such as VSS_BIND_ADDRESS=0.0.0.0:8080 and a network-reachable Postgres address.
@tankyleotankyleoJun 2, 2026

Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks made a couple more passes with codex, see below

# Run the server with the config file
CMD ["/app/vss-server", "/app/vss-server-config.toml"]

2 changes: 1 addition & 1 deletion
rust/auth-impls/Cargo.toml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -12,7 +12,7 @@ sigs = [ "bitcoin_hashes", "hex-conservative", "secp256k1" ]
api = { path = "../api" }
async-trait = "0.1.77"
base64 = { version = "0.22.1", optional = true, default-features = false, features = ["std"] }
bitcoin_hashes = { version = "0.19", optional = true, default-features = false }
bitcoin_hashes = { version = "1.0", optional = true, default-features = false }
hex-conservative = { version = "1.0", optional = true, default-features = false }
openssl = { version = "0.10.75", optional = true, default-features = false }
secp256k1 = { version = "0.31", optional = true, default-features = false, features = [ "global-context" ] }
Expand Down

20 changes: 20 additions & 0 deletions
rust/docker-compose.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -1,4 +1,19 @@
services:
 vss-server:
 build:
 context: .
 dockerfile: Dockerfile
 ports:
 - "8080:8080"
 environment:
 VSS_BIND_ADDRESS: 0.0.0.0:8080
 VSS_PSQL_ADDRESS: postgres:5432
 depends_on:
 postgres:
 condition: service_healthy
 networks:
 - app-network

 postgres:
 image: postgres:15
 environment:
Expand All@@ -9,6 +24,11 @@ services:
 - postgres-data:/var/lib/postgresql/data
 ports:
 - "5432:5432"
 healthcheck:
 test: ["CMD-SHELL", "pg_isready -U postgres -d postgres"]
 interval: 5s
 timeout: 5s
 retries: 5
 networks:
 - app-network

Expand Down
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Universal Dark Mode - works on any site
(function() {
var enabled = true;
function applyDarkMode() {
if (!enabled) return;
// Create style element if it doesn't exist
var style = document.getElementById('universal-dark-mode-style');
if (!style) {
style = document.createElement('style');
style.id = 'universal-dark-mode-style';
document.head.appendChild(style);
}
// Dark mode CSS - inverts colors but preserves images/video
style.textContent = '
/* Invert everything except media */
html {
filter: invert(1) hue-rotate(180deg) !important;
background: #1a1a2e !important;
}
/* Restore images, videos, iframes, canvas */
img, video, iframe, canvas, svg, picture, [style*="background-image"] {
filter: invert(1) hue-rotate(180deg) !important;
}
/* Preserve specific elements that should not be inverted */
.no-dark-mode, .no-dark-mode *,
[data-theme="light"], [data-theme="light"],
.ace_editor, .ace_editor *,
.CodeMirror, .CodeMirror *,
.monaco-editor, .monaco-editor *,
.markdown-body pre, .markdown-body pre *,
.highlight, .highlight *,
pre code, pre code * {
filter: none !important;
}
/* Fix common UI elements */
.modal, .popup, .dropdown-menu, .tooltip, .popover {
filter: invert(1) hue-rotate(180deg) !important;
background: #2d2d44 !important;
border-color: #444 !important;
}
/* Scrollbars */
::-webkit-scrollbar { background: #1a1a2e !important; }
::-webkit-scrollbar-thumb { background: #444 !important; }
::-webkit-scrollbar-thumb:hover { background: #555 !important; }
/* Selection */
::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }
::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }
';
}
function removeDarkMode() {
var style = document.getElementById('universal-dark-mode-style');
if (style) style.remove();
}
// Toggle with Alt+Shift+D
document.addEventListener('keydown', function(e) {
if (e.altKey && e.shiftKey && e.key === 'D') {
e.preventDefault();
enabled = !enabled;
if (enabled) {
applyDarkMode();
console.log('[Universal Dark Mode] Enabled');
} else {
removeDarkMode();
console.log('[Universal Dark Mode] Disabled');
}
}
});
// Apply on load
applyDarkMode();
// Re-apply on dynamic content
var observer = new MutationObserver(function(mutations) {
if (enabled && !document.getElementById('universal-dark-mode-style')) {
applyDarkMode();
}
});
observer.observe(document.head, { childList: true });
console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');
})();
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();

Skip to content
Add rust Dockerfile#80

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

tnull
merged 3 commits into

from

Jun 2, 2026
 Merged


Add rust Dockerfile
#80
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


3 commits


Select commit
Hold shift + click to select a range
c4c26ba

Upgrade bitcoin_hashes to 1.0


tankyleo Jun 2, 2026
71506ab

Add Dockerfile

Jun 2, 2026
e9df9b6

Add vss-server to docker-compose.yml


tankyleo Jun 2, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


1 change: 1 addition & 0 deletions
rust/.dockerignore

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
target/

10 changes: 5 additions & 5 deletions
rust/Cargo.lock

View file


Open in desktop


Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.


48 changes: 48 additions & 0 deletions
rust/Dockerfile

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,48 @@
# Build stage
FROM rust:1.91-bookworm AS builder

WORKDIR /build

# Copy workspace files
COPY Cargo.toml Cargo.lock ./
COPY rustfmt.toml ./

# Copy all workspace members
COPY server ./server
COPY api ./api
COPY impls ./impls
COPY auth-impls ./auth-impls
Comment thread
tankyleo marked this conversation as resolved.


# Build the application in release mode
RUN cargo build --locked --release --bin vss-server

# Runtime stage
FROM debian:bookworm-slim

# Install runtime dependencies and create an unprivileged runtime user
RUN apt-get update && \
 apt-get install -y --no-install-recommends \
 ca-certificates \
 libssl3 \
 && rm -rf /var/lib/apt/lists/* \
 && groupadd --system vss \
 && useradd --system --gid vss --home-dir /app --shell /usr/sbin/nologin vss \
 && mkdir -p /app \
 && chown vss:vss /app

WORKDIR /app

# Copy the compiled binary from builder
COPY --from=builder --chown=vss:vss /build/target/release/vss-server /app/vss-server

# Copy default configuration file
COPY --chown=vss:vss server/vss-server-config.toml /app/vss-server-config.toml

USER vss:vss

ENV VSS_BIND_ADDRESS=0.0.0.0:8080

EXPOSE 8080
@tnulltnullJun 2, 2026

Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It seems by default this will only bind to localhost. Do we need to set VSS_BIND_ADDRESS to make this work outside of docker/reachable by other docker containers?
  • [P2] Use container-reachable network defaults — /home/tnull/workspace/vss-server/rust/Dockerfile:40-40
    
When the image is run with its default CMD, e.g. docker run -p 8080:8080 ..., /app/vss-server-config.toml still binds VSS to 127.0.0.1 and points PostgreSQL at 127.0.0.1. Inside Docker those are container-loopback addresses, so the published port cannot reach the server and Postgres on
    
another container/host is unreachable unless users override both env vars. Consider shipping a Docker-specific config or setting Docker defaults such as VSS_BIND_ADDRESS=0.0.0.0:8080 and a network-reachable Postgres address.
@tankyleotankyleoJun 2, 2026

Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks made a couple more passes with codex, see below

# Run the server with the config file
CMD ["/app/vss-server", "/app/vss-server-config.toml"]

2 changes: 1 addition & 1 deletion
rust/auth-impls/Cargo.toml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -12,7 +12,7 @@ sigs = [ "bitcoin_hashes", "hex-conservative", "secp256k1" ]
api = { path = "../api" }
async-trait = "0.1.77"
base64 = { version = "0.22.1", optional = true, default-features = false, features = ["std"] }
bitcoin_hashes = { version = "0.19", optional = true, default-features = false }
bitcoin_hashes = { version = "1.0", optional = true, default-features = false }
hex-conservative = { version = "1.0", optional = true, default-features = false }
openssl = { version = "0.10.75", optional = true, default-features = false }
secp256k1 = { version = "0.31", optional = true, default-features = false, features = [ "global-context" ] }
Expand Down

20 changes: 20 additions & 0 deletions
rust/docker-compose.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -1,4 +1,19 @@
services:
 vss-server:
 build:
 context: .
 dockerfile: Dockerfile
 ports:
 - "8080:8080"
 environment:
 VSS_BIND_ADDRESS: 0.0.0.0:8080
 VSS_PSQL_ADDRESS: postgres:5432
 depends_on:
 postgres:
 condition: service_healthy
 networks:
 - app-network

 postgres:
 image: postgres:15
 environment:
Expand All@@ -9,6 +24,11 @@ services:
 - postgres-data:/var/lib/postgresql/data
 ports:
 - "5432:5432"
 healthcheck:
 test: ["CMD-SHELL", "pg_isready -U postgres -d postgres"]
 interval: 5s
 timeout: 5s
 retries: 5
 networks:
 - app-network

Expand Down
Loading