64 lines
2.3 KiB
Bash
64 lines
2.3 KiB
Bash
#!/bin/sh
|
|
set -e
|
|
|
|
# Expose API and Gateway inside container. Do NOT publish API outside docker network.
|
|
ipfs config Addresses.API /ip4/0.0.0.0/tcp/5001
|
|
ipfs config Addresses.Gateway /ip4/0.0.0.0/tcp/8080
|
|
|
|
# Gateway should not fetch from the wider network; serve only local content
|
|
ipfs config --json Gateway.NoFetch true
|
|
|
|
# DHT client mode with accelerated providing
|
|
ipfs config --json Routing '{ "Type": "dhtclient", "AcceleratedDHTClient": true }'
|
|
|
|
# Reprovider config name changed in go-ipfs 0.38+. Try the new key first, then fall back.
|
|
PROVIDER_CFG='{ "Interval": "22h", "Strategy": "pinned+mfs", "Enabled": true }'
|
|
if ! ipfs config --json Provide "$PROVIDER_CFG" 2>/dev/null; then
|
|
ipfs config --json Reprovider "$PROVIDER_CFG"
|
|
fi
|
|
|
|
# Keep connection manager within reasonable bounds
|
|
ipfs config --json Swarm.ConnMgr '{ "Type": "basic", "LowWater": 50, "HighWater": 200, "GracePeriod": "20s" }'
|
|
|
|
SWARM_KEY_PATH="/data/ipfs/swarm.key"
|
|
|
|
# Helpers to apply optional JSON blobs from env
|
|
set_json_if_present() {
|
|
# $1 - config path, $2 - env value
|
|
if [ -n "$2" ]; then
|
|
ipfs config --json "$1" "$2"
|
|
fi
|
|
}
|
|
|
|
# Disable AutoConf only when running with a private swarm key
|
|
if [ -f "$SWARM_KEY_PATH" ] && [ -s "$SWARM_KEY_PATH" ]; then
|
|
ipfs config --json AutoConf.Enabled false
|
|
ipfs config --json AutoTLS.Enabled false
|
|
ipfs config --json Bootstrap "[]"
|
|
ipfs config --json DNS.Resolvers "{}"
|
|
ipfs config --json Ipns.DelegatedPublishers "[]"
|
|
ipfs config --json Swarm.Transports.Network '{ "TCP": true, "Websocket": false }'
|
|
ipfs config --json Peering.Peers "[]"
|
|
else
|
|
ipfs config --json AutoConf.Enabled true
|
|
fi
|
|
|
|
set_json_if_present Bootstrap "${IPFS_PRIVATE_BOOTSTRAP:-}"
|
|
set_json_if_present Peering.Peers "${IPFS_PEERING_PEERS:-}"
|
|
|
|
set_json_if_present Addresses.Announce "${IPFS_ANNOUNCE_ADDRESSES:-}"
|
|
if [ -z "${IPFS_NOANNOUNCE_ADDRESSES:-}" ]; then
|
|
ipfs config --json Addresses.NoAnnounce '["/ip4/127.0.0.1","/ip6/::1"]'
|
|
else
|
|
set_json_if_present Addresses.NoAnnounce "${IPFS_NOANNOUNCE_ADDRESSES}"
|
|
fi
|
|
|
|
if [ -n "${IPFS_SWARM_ANNOUNCE_PRIVATE:-}" ]; then
|
|
set_json_if_present Swarm.AddrFilters "${IPFS_SWARM_ANNOUNCE_PRIVATE}"
|
|
fi
|
|
# CORS for RPC API (visible only in docker network)
|
|
ipfs config --json API.HTTPHeaders.Access-Control-Allow-Origin '["*"]'
|
|
ipfs config --json API.HTTPHeaders.Access-Control-Allow-Methods '["PUT","POST","GET"]'
|
|
|
|
echo "IPFS init script applied"
|