The spoof aliases (maven.neoforged.net, libraries.minecraft.net, etc.) hijacked those hostnames for every mcnet container, so the ONLINE NeoForge install during pre-bake hit the empty mirror (cert path failure). Moved them to the mirror override; core/static modes resolve the real upstreams. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
26 lines
1.1 KiB
YAML
26 lines
1.1 KiB
YAML
# Mirror toggle — full client air-gap upstream mirror (see plan/11).
|
|
# Layer on top of the base: `docker compose -f docker-compose.yml -f docker-compose.mirror.yml up -d`
|
|
# (or `tooling/build-stack.sh --up mirror`). Adds the mirror vhost snippet, the
|
|
# upstream content mount, and publishes :443 for Caddy's `tls internal` certs.
|
|
# Populate the mirror first: tooling/mirror-airgap.sh (+ the proxy-capture step).
|
|
services:
|
|
caddy:
|
|
ports:
|
|
- "443:443"
|
|
volumes:
|
|
- ./caddy/conf.d/20-mirror.caddy:/etc/caddy/conf.d/20-mirror.caddy:ro
|
|
- ./mirror/upstream:/srv/mirror:ro
|
|
networks:
|
|
mcnet:
|
|
# Spoof the real upstream hosts -> Caddy (air-gap runtime only). Includes
|
|
# the base aliases because compose replaces (not merges) the alias list.
|
|
aliases:
|
|
- "auth.${BASE_DOMAIN}"
|
|
- "packwiz.${BASE_DOMAIN}"
|
|
- "meta.prismlauncher.org"
|
|
- "piston-meta.mojang.com"
|
|
- "piston-data.mojang.com"
|
|
- "libraries.minecraft.net"
|
|
- "maven.neoforged.net"
|
|
- "resources.download.minecraft.net"
|