fly.toml

# See https://fly.io/docs/reference/configuration/ for information about how to use this file.

app = 'testserver-host'
primary_region = 'cdg'

[build]
  image = 'httptoolkit/testserver:latest'

[env]
  PORTS = '8080'
  METRICS_PORT = '9090'
  TRUST_PROXY_PROTOCOL = 'true'
  CERT_CACHE_DIR = '/usr/src/app/cert_dir'

  # If deploying a separate instance and wanting real certificates, customize these:
  ROOT_DOMAIN = 'testserver.host'
  PROACTIVE_CERT_DOMAINS = 'testserver.host,example.testserver.host,revoked.testserver.host,expired.testserver.host,expired--revoked.testserver.host'

  ACME_PROVIDER = 'google' # or 'letsencrypt', 'zerossl'
  # Set ACME_ACCOUNT_KEY secret (PEM format) - see src/tls-certificates/acme.ts for details

  # Enable in-process DNS server on port 53 for wildcard certs via DNS-01 (requires NS delegation)
  DNS_SERVER = 'true'

[[services]]
  protocol = "tcp"
  internal_port = 8080

  [[services.ports]]
    port = "80"
    handlers = ["proxy_proto"]
  [[services.ports]]
    port = "443"
    handlers = ["proxy_proto"]
  [[services.ports]]
    start_port = 8000
    end_port = 10000
    handlers = ["proxy_proto"]

  # Continually check /echo can return a valid HTTPS response
  [[services.http_checks]]
    interval = 10000
    grace_period = "5s"
    method = "get"
    path = "/echo"
    protocol = "https"
    timeout = 2000
    tls_server_name = "testserver.host"
    tls_skip_verify = true # We don't verify by default, so this works for fresh empty-volume deploys

# DNS server
[[services]]
  protocol = "udp"
  internal_port = 53

  [[services.ports]]
    port = 53

# If we want to scale out within a single region, where there's already an app in the same region
# using this volume, we need to fork it and create another with the same name.
[mounts]
  source = "cert_data"
  destination = "/usr/src/app/cert_dir"

[metrics]
  port = 9090
  path = "/metrics"

[[vm]]
  memory = '512mb'
  cpu_kind = 'shared'
  cpus = 2