Tronax
de353f0218
Introduce the Kotlin/Compose Android companion app and extend the TMDB proxy into a combo server that synchronizes the whole library as an encrypted snapshot, with all three components (Go server, Android, desktop) sharing one zero-knowledge crypto envelope and JSON schema. - server: add PostgreSQL-backed /sync/library (GET/PUT) with optimistic concurrency (revision + 409 on conflict); sync stays disabled unless DATABASE_URL is set. Add docker-compose with Postgres. - desktop: add libsodium CryptoEnvelope, LibrarySerializer and SyncClient; storage-mode and passphrase settings; a "Sync now" toolbar action with conflict resolution. - android: Room-backed library with local/cloud storage modes, encrypted sync client, and settings UI. The proxy server (URL + token) can be configured as a TMDB proxy even in local-only mode. Crypto is identical across platforms: Argon2id (libsodium crypto_pwhash, INTERACTIVE) + XChaCha20-Poly1305 in a versioned "UMTS" envelope, so a snapshot encrypted on one client decrypts on the other. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
44 lines
1.3 KiB
YAML
44 lines
1.3 KiB
YAML
# Kombi-Server: TMDB-Proxy + verschlüsselter Bibliotheks-Sync.
|
|
# Auf Unraid: dieses Compose-File über "Compose Manager" einbinden oder die
|
|
# beiden Container (db + app) einzeln anlegen. Werte aus .env beziehen.
|
|
services:
|
|
db:
|
|
image: postgres:16-alpine
|
|
restart: unless-stopped
|
|
environment:
|
|
POSTGRES_USER: umt
|
|
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-change-me}
|
|
POSTGRES_DB: umt
|
|
volumes:
|
|
- umt_pgdata:/var/lib/postgresql/data
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U umt -d umt"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 5
|
|
|
|
app:
|
|
build: .
|
|
image: umt-combo-server:latest
|
|
restart: unless-stopped
|
|
depends_on:
|
|
db:
|
|
condition: service_healthy
|
|
ports:
|
|
- "8080:8080"
|
|
environment:
|
|
LISTEN_ADDR: ":8080"
|
|
PUBLIC_URL: ${PUBLIC_URL}
|
|
TMDB_API_KEY: ${TMDB_API_KEY}
|
|
OIDC_ISSUER: ${OIDC_ISSUER}
|
|
OIDC_CLIENT_ID: ${OIDC_CLIENT_ID}
|
|
OIDC_CLIENT_SECRET: ${OIDC_CLIENT_SECRET}
|
|
OIDC_REDIRECT_URL: ${OIDC_REDIRECT_URL}
|
|
SESSION_SECRET: ${SESSION_SECRET}
|
|
ALLOWED_GROUPS: ${ALLOWED_GROUPS:-}
|
|
TOKEN_TTL_DAYS: ${TOKEN_TTL_DAYS:-90}
|
|
# Library-Sync: leer lassen, um den Sync zu deaktivieren.
|
|
DATABASE_URL: postgres://umt:${POSTGRES_PASSWORD:-change-me}@db:5432/umt?sslmode=disable
|
|
|
|
volumes:
|
|
umt_pgdata:
|