compose_example.yml

@@ -76,22 +76,40 @@ services:
       retries: 20
     command: ["-c", "wal_level=logical"]
 
-  db-publish:
+  replikey:
     restart: always
-    image: alpine/socat
+    image: l1drm/replikey:latest
+    profiles: [replikey-master]
     user: "${MISSKEY_UID}:${MISSKEY_GID}"
     links:
       - db
+      - redis
     networks:
       - internal_network
       - external_network
     ports:
-      - "5433:5433"
+      - "5443:5443"
     volumes:
-      - ./replication:/data
+      - ./replikey:/etc/replikey:ro
     command: [
-        "OPENSSL-LISTEN:5433,openssl-min-proto-version=TLS1.2,cert=/data/certs/server.pub.pem,key=/data/certs/server.key.pem,cafile=/data/certs/ca.pem,fork,reuseaddr",
-        "TCP4:db:5432"
+        "network",
+        "reverse-proxy",
+        "--listen",
+        "0.0.0.0:5443",
+        "--cert",
+        "/etc/replikey/cert.pem",
+        "--key",
+        "/etc/replikey/key.pem",
+        "--ca",
+        "/etc/replikey/ca.pem",
+        "--redis-sni",
+        "${MTLS_REDIS_SNI}",
+        "--redis-target",
+        "redis:6379",
+        "--postgres-sni",
+        "${MTLS_POSTGRES_SNI}",
+        "--postgres-target",
+        "db:5432",
       ]
 
 #  mcaptcha: