One new `service` widget type (nested discriminated union on `service`) rather than six, so a single config entry shows both docker container health and a service-specific stat (repo count, project list, photo count, workflow count, active users, users/nodes) - avoiding the overhead of configuring a docker widget and a separate service widget per container. All six collectors hit the service's container name + internal port directly on falcon_network, the same container-to- container pattern just proven out for Traefik's own API, avoiding vpn-only/hairpin-NAT entirely. Also adds the public/private config split that was scoped in the original project plan but never built: lib/config/public.ts strips apiToken/apiKey/password fields before the config reaches the browser via SSR or the WS config topic - required before any widget could carry a real secret. Verified via a throwaway secret field that it's absent from both the SSR HTML and the WS config:update frame. Endpoint shapes verified live against the running gitea/coolify/immich/ n8n/umami/headscale containers before committing (unauthenticated requests correctly 401/200 on every target route; gitea's X-Total-Count header confirmed present).
57 lines
2.0 KiB
TypeScript
57 lines
2.0 KiB
TypeScript
import Docker from "dockerode";
|
|
import type { ContainerStats } from "dockerode";
|
|
import pLimit from "p-limit";
|
|
import type { DockerContainerResult } from "@/lib/types/widget-result";
|
|
|
|
const docker = new Docker({
|
|
socketPath: process.env.DOCKER_SOCKET_PATH ?? "/var/run/docker.sock",
|
|
});
|
|
|
|
export const dockerLimit = pLimit(4);
|
|
|
|
function calcCpuPercent(stats: ContainerStats): number | null {
|
|
const cpuDelta = stats.cpu_stats.cpu_usage.total_usage - stats.precpu_stats.cpu_usage.total_usage;
|
|
const systemDelta = stats.cpu_stats.system_cpu_usage - stats.precpu_stats.system_cpu_usage;
|
|
const cpuCount = stats.cpu_stats.online_cpus || stats.cpu_stats.cpu_usage.percpu_usage?.length || 1;
|
|
if (systemDelta <= 0 || cpuDelta < 0) return null;
|
|
return (cpuDelta / systemDelta) * cpuCount * 100;
|
|
}
|
|
|
|
const EPOCH_STARTED_AT = "0001-01-01T00:00:00Z";
|
|
|
|
export async function collectDockerContainer(
|
|
containerName: string,
|
|
showStats: boolean
|
|
): Promise<DockerContainerResult> {
|
|
const container = docker.getContainer(containerName);
|
|
const inspect = await container.inspect();
|
|
|
|
let cpuPercent: number | null = null;
|
|
let memUsageBytes: number | null = null;
|
|
let memLimitBytes: number | null = null;
|
|
|
|
if (showStats && inspect.State.Running) {
|
|
const stats = await container.stats({ stream: false });
|
|
cpuPercent = calcCpuPercent(stats);
|
|
memUsageBytes = stats.memory_stats.usage ?? null;
|
|
memLimitBytes = stats.memory_stats.limit ?? null;
|
|
}
|
|
|
|
const startedAt =
|
|
inspect.State.StartedAt && inspect.State.StartedAt !== EPOCH_STARTED_AT ? inspect.State.StartedAt : null;
|
|
|
|
return {
|
|
status: (inspect.State.Status as DockerContainerResult["status"]) || "unknown",
|
|
health: (inspect.State.Health?.Status as DockerContainerResult["health"]) || "none",
|
|
startedAt,
|
|
uptimeSeconds: startedAt
|
|
? Math.max(0, Math.floor((Date.now() - new Date(startedAt).getTime()) / 1000))
|
|
: null,
|
|
restartCount: inspect.RestartCount ?? 0,
|
|
cpuPercent,
|
|
memUsageBytes,
|
|
memLimitBytes,
|
|
image: inspect.Config.Image,
|
|
};
|
|
}
|