b0f07f63ff
WebCrypto has Ed25519 but no ML-DSA, so the post-quantum half is compiled from the same pkg/pqid the server verifies with. One implementation of the scheme in the project means a client and server cannot disagree about signing. The Ed25519 half is stored as its 32-byte seed rather than the expanded key, since the seed cannot encode an inconsistent pair, and the public key is derived rather than stored so a client cannot present one that does not match what it signs with. Verified end to end in a JS runtime: 1984-byte public key, 3373-byte signature, derived key matches, malformed input returns an error rather than crashing the module. 3.4MB, 0.9MB gzipped. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
51 lines
1.5 KiB
YAML
51 lines
1.5 KiB
YAML
services:
|
|
postgres:
|
|
image: postgres:16-alpine
|
|
environment:
|
|
POSTGRES_USER: arcade
|
|
POSTGRES_PASSWORD: arcade_dev
|
|
POSTGRES_DB: arcade
|
|
ports: ["5432:5432"]
|
|
volumes:
|
|
- pgdata:/var/lib/postgresql/data
|
|
- ./migrations:/docker-entrypoint-initdb.d:ro
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U arcade"]
|
|
interval: 2s
|
|
timeout: 3s
|
|
retries: 20
|
|
|
|
redis:
|
|
image: redis:7-alpine
|
|
ports: ["6379:6379"]
|
|
volumes:
|
|
- redisdata:/data
|
|
healthcheck:
|
|
test: ["CMD", "redis-cli", "ping"]
|
|
interval: 2s
|
|
timeout: 3s
|
|
retries: 20
|
|
|
|
arcade:
|
|
build: .
|
|
environment:
|
|
# On a cloned VM, point these at the core machine instead. They are the
|
|
# only configuration a clone needs; identity and role are worked out at
|
|
# runtime. See docs/SCALING.md.
|
|
ARCADE_DSN: postgres://arcade:arcade_dev@postgres:5432/arcade
|
|
ARCADE_REDIS: redis:6379
|
|
ARCADE_ADDR: ":8080"
|
|
# Development funding. Leave unset in any real deployment.
|
|
ARCADE_DEV_FAUCET: "${ARCADE_DEV_FAUCET:-0}"
|
|
ALBY_URL: http://10.30.20.43:58000
|
|
ALBY_TOKEN: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwZXJtaXNzaW9uIjoiZnVsbCIsImV4cCI6MjY0OTg5MDE4OH0.IpemVy-_6PgWwlGtVtHRMZlpUR179jKamAl9fpbQE_o
|
|
ports: ["8080:8080"]
|
|
depends_on:
|
|
postgres: { condition: service_healthy }
|
|
redis: { condition: service_healthy }
|
|
restart: unless-stopped
|
|
|
|
volumes:
|
|
pgdata:
|
|
redisdata:
|