chore(docker): compose cleanup

- added healtchecks to all relevant services
- dex sqlite3 storage
- db volume to preserve storage
- runner and api correct ssh gateway env vars
- expose jaeger, minio and maildev ports

Signed-off-by: Toma Puljak <[email protected]>

Author: Tpuljak

.dockerignore

@@ -16,4 +16,5 @@ docker
 libs/sdk-python
 libs/sdk-typescript
 libs/api-client-python
-libs/api-client-python-async
+libs/api-client-python-async
+Dockerfile

apps/api/.env

@@ -73,7 +73,7 @@ CRON_TIMEZONE=
 
 SSH_GATEWAY_API_KEY=ssh_secret_api_token
 SSH_GATEWAY_COMMAND="ssh -p 2222 {{TOKEN}}@localhost"
-SSH_GATEWAY_PUBLIC_KEY="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"
+SSH_GATEWAY_PUBLIC_KEY="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"
 
 PROXY_TEMPLATE_URL=http://{{PORT}}-{{sandboxId}}.proxy.localhost:4000
 

apps/api/Dockerfile

@@ -1,7 +1,7 @@
 FROM docker:28.2.2-dind-alpine3.22 AS daytona
 
 # Install nodejs
-RUN apk --update add --no-cache nodejs=22.16.0-r2 npm bash
+RUN apk --update add --no-cache nodejs=22.16.0-r2 npm bash curl
 RUN npm install -g corepack && corepack enable
 
 WORKDIR /daytona
@@ -41,7 +41,7 @@ ENV OIDC_MANAGEMENT_API_CLIENT_ID=
 ENV OIDC_MANAGEMENT_API_CLIENT_SECRET=
 ENV OIDC_MANAGEMENT_API_AUDIENCE=
 
-ENV DEFAULT_SNAPSHOT=ubuntu:22.04
+ENV DEFAULT_SNAPSHOT=daytonaio/sandbox:0.5.0
 ENV DASHBOARD_URL=http://localhost:3000/dashboard
 ENV DASHBOARD_BASE_API_URL=http://localhost:3000
 
@@ -99,9 +99,25 @@ ENV DEFAULT_RUNNER_CAPACITY=100
 ENV DEFAULT_RUNNER_REGION=us
 ENV DEFAULT_RUNNER_CLASS=small
 
+ENV DEFAULT_ORG_QUOTA_TOTAL_CPU_QUOTA=10000
+ENV DEFAULT_ORG_QUOTA_TOTAL_MEMORY_QUOTA=10000
+ENV DEFAULT_ORG_QUOTA_TOTAL_DISK_QUOTA=100000
+ENV DEFAULT_ORG_QUOTA_MAX_CPU_PER_SANDBOX=100
+ENV DEFAULT_ORG_QUOTA_MAX_MEMORY_PER_SANDBOX=100
+ENV DEFAULT_ORG_QUOTA_MAX_DISK_PER_SANDBOX=1000
+ENV DEFAULT_ORG_QUOTA_SNAPSHOT_QUOTA=1000
+ENV DEFAULT_ORG_QUOTA_MAX_SNAPSHOT_SIZE=1000
+ENV DEFAULT_ORG_QUOTA_VOLUME_QUOTA=10000
+
 ENV SSH_GATEWAY_API_KEY=ssh_secret_api_token
 ENV SSH_GATEWAY_COMMAND="ssh -p 2222 {{TOKEN}}@localhost"
+ENV SSH_GATEWAY_PUBLIC_KEY="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"
+
+ENV RUNNER_DECLARATIVE_BUILD_SCORE_THRESHOLD=10
+ENV RUNNER_AVAILABILITY_SCORE_THRESHOLD=10
 
 ENV RUN_MIGRATIONS=true
 
+HEALTHCHECK CMD [ "curl", "-f", "http://localhost:3000/api/config" ]
+
 ENTRYPOINT ["sh", "-c", "dockerd-entrypoint.sh & node dist/apps/api/main.js"]

apps/docs/src/content/docs/en/oss-deployment.mdx

@@ -174,21 +174,20 @@ Below is a full list of environment variables with their default values:
 
 ### Runner
 
-| Variable                   | Type    | Default Value                                | Description                           |
-| -------------------------- | ------- | -------------------------------------------- | ------------------------------------- |
-| `VERSION`                  | string  | `0.0.1`                                      | Runner service version                |
-| `ENVIRONMENT`              | string  | `development`                                | Application environment               |
-| `API_PORT`                 | number  | `3003`                                       | Runner API service port               |
-| `API_TOKEN`                | string  | `secret_api_token`                           | Runner API authentication token       |
-| `DAYTONA_BINARY_PATH`      | string  | `/workspaces/daytona/dist/apps/daemon-amd64` | Path to Daytona daemon binary         |
-| `LOG_FILE_PATH`            | string  | `/home/daytona/runner/runner.log`            | Path to runner log file               |
-| `RESOURCE_LIMITS_DISABLED` | boolean | `true`                                       | Disable resource limits for sandboxes |
-| `AWS_ENDPOINT_URL`         | string  | `http://minio:9000`                          | AWS S3-compatible storage endpoint    |
-| `AWS_REGION`               | string  | `us-east-1`                                  | AWS region                            |
-| `AWS_ACCESS_KEY_ID`        | string  | `minioadmin`                                 | AWS access key ID                     |
-| `AWS_SECRET_ACCESS_KEY`    | string  | `minioadmin`                                 | AWS secret access key                 |
-| `AWS_DEFAULT_BUCKET`       | string  | `daytona`                                    | AWS default bucket name               |
-| `SERVER_URL`               | string  | `http://api:3000/api`                        | Daytona API server URL                |
+| Variable                   | Type    | Default Value                     | Description                           |
+| -------------------------- | ------- | --------------------------------- | ------------------------------------- |
+| `VERSION`                  | string  | `0.0.1`                           | Runner service version                |
+| `ENVIRONMENT`              | string  | `development`                     | Application environment               |
+| `API_PORT`                 | number  | `3003`                            | Runner API service port               |
+| `API_TOKEN`                | string  | `secret_api_token`                | Runner API authentication token       |
+| `LOG_FILE_PATH`            | string  | `/home/daytona/runner/runner.log` | Path to runner log file               |
+| `RESOURCE_LIMITS_DISABLED` | boolean | `true`                            | Disable resource limits for sandboxes |
+| `AWS_ENDPOINT_URL`         | string  | `http://minio:9000`               | AWS S3-compatible storage endpoint    |
+| `AWS_REGION`               | string  | `us-east-1`                       | AWS region                            |
+| `AWS_ACCESS_KEY_ID`        | string  | `minioadmin`                      | AWS access key ID                     |
+| `AWS_SECRET_ACCESS_KEY`    | string  | `minioadmin`                      | AWS secret access key                 |
+| `AWS_DEFAULT_BUCKET`       | string  | `daytona`                         | AWS default bucket name               |
+| `SERVER_URL`               | string  | `http://api:3000/api`             | Daytona API server URL                |
 
 ### SSH Gateway
 

apps/proxy/Dockerfile

@@ -41,4 +41,6 @@ ENV OIDC_AUDIENCE=daytona
 ENV REDIS_HOST=redis
 ENV REDIS_PORT=6379
 
+HEALTHCHECK CMD [ "curl", "-f", "http://localhost:4000/health" ]
+
 ENTRYPOINT ["daytona-proxy"]

apps/runner/.env

@@ -6,7 +6,6 @@ API_TOKEN=secret_api_token
 
 DAYTONA_BINARY_URL=https://daytona.io/daytona
 TERMINAL_BINARY_URL=https://daytona-ai-saas-stage.s3.us-east-1.amazonaws.com/term
-DAYTONA_BINARY_PATH=/workspaces/daytona/dist/apps/daemon-amd64
 TERMINAL_BINARY_PATH=/workspaces/daytona/.tmp/binaries/terminal
 LOG_FILE_PATH=/home/daytona/runner/runner.log
 
@@ -19,6 +18,6 @@ AWS_DEFAULT_BUCKET=daytona
 LOG_LEVEL=debug
 
 SSH_GATEWAY_ENABLE=true
-SSH_PUBLIC_KEY="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"
+SSH_PUBLIC_KEY="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"
 
 SSH_HOST_KEY_PATH=/workspaces/daytona/tmp/runner/id_rsa

apps/runner/Dockerfile

@@ -19,6 +19,8 @@ RUN SKIP_COMPUTER_USE_BUILD=true yarn nx build runner --configuration=production
 
 FROM docker:28.2.2-dind-alpine3.22 AS runner
 
+RUN apk add --no-cache curl
+
 WORKDIR /usr/local/bin
 
 COPY --from=build /daytona/dist/apps/runner daytona-runner
@@ -32,7 +34,6 @@ ENV ENVIRONMENT=development
 ENV API_PORT=3003
 ENV API_TOKEN=secret_api_token
 
-ENV DAYTONA_BINARY_PATH=/workspaces/daytona/dist/apps/daemon-amd64
 ENV LOG_FILE_PATH=/home/daytona/runner/runner.log
 
 ENV RESOURCE_LIMITS_DISABLED=true
@@ -45,4 +46,9 @@ ENV AWS_DEFAULT_BUCKET=daytona
 
 ENV SERVER_URL=http://api:3000/api
 
-ENTRYPOINT ["sh", "-c", "dockerd & daytona-runner"]
+ENV SSH_GATEWAY_ENABLE=true
+ENV SSH_PUBLIC_KEY="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"
+
+HEALTHCHECK CMD [ "curl", "-f", "http://localhost:3003/" ]
+
+ENTRYPOINT ["sh", "-c", "/usr/local/bin/dockerd-entrypoint.sh & daytona-runner"]