Ryan Malloy
df628aa56f
Adds the homeassistant service to the external caddy network with
labels for juliet.warehack.ing so caddy-docker-proxy issues a public
cert and proxies traffic to port 8123. Uses the same streaming-
friendly transport tuning the docs-site service uses, because HA's
frontend keeps long-lived WebSockets open for lovelace state pushes
and config flows -- without stream_timeout: 24h etc., caddy closes
the socket every ~15s and the UI churns reconnects.
Keeps the 8123 host-port mapping intact for direct localhost dev
access; public traffic flows over the caddy bridge.
dev/ha-config/configuration.yaml (not tracked here -- root-owned in
the HA container) was updated separately to add:
http:
use_x_forwarded_for: true
trusted_proxies:
- 10.10.16.0/20 # caddy bridge subnet
Without that block HA rejects the OAuth redirect_uri at login because
the auth check sees the internal docker IP instead of the public host.
102 lines
3.7 KiB
YAML
102 lines
3.7 KiB
YAML
# Local dev stack: real Home Assistant talking to a MockPanel running on
|
|
# the host. Lets you click around the UI and grab screenshots without a
|
|
# physical Omni controller.
|
|
#
|
|
# make dev-up # start
|
|
# make dev-logs # tail HA logs
|
|
# make dev-down # stop and clean
|
|
#
|
|
# On every container start the HA service pip-installs the local
|
|
# `omni-pca` library from ../ into site-packages (the version pinned in
|
|
# the integration manifest isn't on PyPI yet, and we want our latest
|
|
# v1/ subpackage available either way). Source changes in src/omni_pca
|
|
# require a ``docker compose restart homeassistant`` to take effect.
|
|
#
|
|
# Once running, open http://localhost:8123 and:
|
|
# 1. Onboard with any name / location.
|
|
# 2. Settings -> Devices & Services -> Add Integration ->
|
|
# "HAI/Leviton Omni Panel".
|
|
# 3. Use one of:
|
|
# Mock panel (TCP):
|
|
# host host.docker.internal
|
|
# port 14369
|
|
# transport TCP
|
|
# controller_key 000102030405060708090a0b0c0d0e0f
|
|
# Real panel (UDP, v1 wire protocol):
|
|
# host <panel IP, e.g. 192.168.1.9>
|
|
# port 4369
|
|
# transport UDP
|
|
# controller_key <32 hex chars from the panel's .pca file>
|
|
|
|
services:
|
|
mock-panel:
|
|
image: ghcr.io/astral-sh/uv:python3.14-bookworm-slim
|
|
working_dir: /tmp/mock
|
|
volumes:
|
|
- ../src:/tmp/mock/src:ro
|
|
- ./run_mock_panel.py:/tmp/mock/run_mock_panel.py:ro
|
|
environment:
|
|
PYTHONPATH: /tmp/mock/src
|
|
command:
|
|
- sh
|
|
- -c
|
|
- "uv pip install --system --quiet cryptography && python /tmp/mock/run_mock_panel.py --host 0.0.0.0 --port 14369"
|
|
ports:
|
|
- "14369:14369"
|
|
networks:
|
|
- default
|
|
|
|
homeassistant:
|
|
image: ghcr.io/home-assistant/home-assistant:2026.5
|
|
container_name: omni-pca-dev-ha
|
|
depends_on:
|
|
- mock-panel
|
|
volumes:
|
|
- ./ha-config:/config
|
|
- ../custom_components/omni_pca:/config/custom_components/omni_pca:ro
|
|
# Make the whole library project (pyproject + src/ + dist/) available
|
|
# so the entrypoint override below can pip-install from local source
|
|
# before /init starts. This gives HA real dist-info for
|
|
# ``omni-pca==2026.5.10`` (which isn't on PyPI yet) and ensures the
|
|
# v1 subpackage is present.
|
|
- ../:/opt/omni-pca-src:ro
|
|
# Keep 8123 mapped on localhost for direct access during development;
|
|
# public traffic comes in via caddy-docker-proxy on the `caddy` net.
|
|
ports:
|
|
- "8123:8123"
|
|
extra_hosts:
|
|
- "host.docker.internal:host-gateway"
|
|
environment:
|
|
- TZ=America/Boise
|
|
networks:
|
|
- default
|
|
- caddy
|
|
labels:
|
|
caddy: juliet.warehack.ing
|
|
caddy.reverse_proxy: "{{upstreams 8123}}"
|
|
# HA uses WebSockets for the frontend (lovelace state updates,
|
|
# config flow, etc.) so we need the streaming-friendly settings
|
|
# from CLAUDE.md, otherwise caddy closes the socket every ~15s.
|
|
caddy.reverse_proxy.flush_interval: "-1"
|
|
caddy.reverse_proxy.transport: http
|
|
caddy.reverse_proxy.transport.read_timeout: "0"
|
|
caddy.reverse_proxy.transport.write_timeout: "0"
|
|
caddy.reverse_proxy.transport.keepalive: 5m
|
|
caddy.reverse_proxy.transport.keepalive_idle_conns: "10"
|
|
caddy.reverse_proxy.stream_timeout: 24h
|
|
caddy.reverse_proxy.stream_close_delay: 5s
|
|
# HA's image entrypoint is /init (s6-overlay). We pre-install our
|
|
# local library against site-packages so HA's manifest-requirement
|
|
# check finds it, then exec /init normally.
|
|
entrypoint:
|
|
- sh
|
|
- -c
|
|
- |
|
|
set -e
|
|
pip install --quiet --no-deps --upgrade /opt/omni-pca-src
|
|
exec /init
|
|
|
|
networks:
|
|
caddy:
|
|
external: true
|