fix(logto): fix postgres role error and update to 1.41.0

The postgres healthcheck ran pg_isready without -U while POSTGRES_USER
was set to logto, so every probe attempted to connect as role
"postgres" and spammed FATAL: role "postgres" does not exist.
Pass -U logto -d logto explicitly and set POSTGRES_DB.

Also fix LOGTO_ENDPOINT pointing at the admin domain instead of the
main domain, update Logto 1.27.0 -> 1.41.0, use ${password:32} for the
generated password, drop the ephemeral host port publishing and add
restart policies.

Closes #130

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

blueprints/kener/docker-compose.yml

@@ -1,35 +1,39 @@
+version: "3.8"
+
 services:
   kener:
     image: rajnandan1/kener:latest
     environment:
       - TZ=${TZ}
       - KENER_SECRET_KEY=${KENER_SECRET_KEY} # 🔐 API key / secret
-      - ORIGIN=${ORIGIN}
-      - REDIS_URL=${REDIS_URL}
       - DATABASE_URL=${DATABASE_URL}
       - KENER_BASE_PATH=${KENER_BASE_PATH}
+      - ORIGIN=${ORIGIN}
       - RESEND_API_KEY=${RESEND_API_KEY} # 🔐 API key
       - RESEND_SENDER_EMAIL=${RESEND_SENDER_EMAIL}
     ports:
       - 3000
     volumes:
       - kener_db:/app/database
-    depends_on:
-      redis:
-        condition: service_healthy
+      - ../files/uploads:/app/uploads
     restart: unless-stopped
 
-  redis:
-    image: redis:7-alpine
-    volumes:
-      - kener_redis:/data
-    healthcheck:
-      test: ["CMD", "redis-cli", "ping"]
-      interval: 10s
-      timeout: 5s
-      retries: 5
+  postgres:
+    image: postgres:alpine
+    environment:
+      - POSTGRES_USER=${POSTGRES_USER}
+      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD} # 🔐 DB password
+      - POSTGRES_DB=${POSTGRES_DB}
+    restart: unless-stopped
+
+  mysql:
+    image: mariadb:11
+    environment:
+      - MYSQL_USER=${MYSQL_USER}
+      - MYSQL_PASSWORD=${MYSQL_PASSWORD} # 🔐 DB password
+      - MYSQL_DATABASE=${MYSQL_DATABASE}
+      - MYSQL_RANDOM_ROOT_PASSWORD=true
     restart: unless-stopped
 
 volumes:
   kener_db: {}
-  kener_redis: {}

blueprints/kener/template.toml

@@ -1,6 +1,8 @@
 [variables]
 main_domain = "${domain}"
 KENER_SECRET_KEY = "${password:64}"
+POSTGRES_PASSWORD = "${password:32}"
+MYSQL_PASSWORD = "${password:32}"
 
 [config]
 [[config.domains]]
@@ -11,9 +13,25 @@ host = "${main_domain}"
 [config.env]
 TZ = "Etc/UTC"
 KENER_SECRET_KEY = "${KENER_SECRET_KEY}" # 🔐 API key / secret
-ORIGIN = "https://${main_domain}"
-REDIS_URL = "redis://redis:6379"
 DATABASE_URL = "sqlite://./database/kener.sqlite.db"
 KENER_BASE_PATH = ""
+ORIGIN = "http://localhost:3000"
 RESEND_API_KEY = ""
 RESEND_SENDER_EMAIL = "Accounts <accounts@resend.dev>"
+POSTGRES_USER = "user"
+POSTGRES_DB = "kener_db"
+MYSQL_USER = "user"
+MYSQL_DATABASE = "kener_db"
+MYSQL_RANDOM_ROOT_PASSWORD = "true"
+MYSQL_PASSWORD = "${MYSQL_PASSWORD}" # 🔐 DB password
+POSTGRES_PASSWORD = "${POSTGRES_PASSWORD}" # 🔐 DB password
+
+[[config.mounts]]
+type = "volume"
+source = "kener_db"
+target = "/app/database"
+
+[[config.mounts]]
+type = "bind"
+source = "../files/uploads"
+target = "/app/uploads"

blueprints/logto/docker-compose.yml

@@ -1,14 +1,11 @@
 services:
   app:
+    image: ghcr.io/logto-io/logto:1.41.0
+    restart: unless-stopped
     depends_on:
       postgres:
         condition: service_healthy
-    image: ghcr.io/logto-io/logto:1.27.0
     entrypoint: ["sh", "-c", "npm run cli db seed -- --swe && npm start"]
-    ports:
-      - 3001
-      - 3002
-
     environment:
       TRUST_PROXY_HEADER: 1
       DB_URL: postgres://logto:${LOGTO_POSTGRES_PASSWORD}@postgres:5432/logto
@@ -18,20 +15,19 @@ services:
       - logto-connectors:/etc/logto/packages/core/connectors
   postgres:
     image: postgres:17-alpine
-    user: postgres
-
+    restart: unless-stopped
     environment:
       POSTGRES_USER: logto
       POSTGRES_PASSWORD: ${LOGTO_POSTGRES_PASSWORD}
+      POSTGRES_DB: logto
     volumes:
       - postgres-data:/var/lib/postgresql/data
     healthcheck:
-      test: ["CMD-SHELL", "pg_isready"]
+      test: ["CMD-SHELL", "pg_isready -U logto -d logto"]
       interval: 10s
       timeout: 5s
       retries: 5
 
-
 volumes:
   logto-connectors:
   postgres-data:

blueprints/logto/meta.json

@@ -1,7 +1,7 @@
 {
   "id": "logto",
   "name": "Logto",
-  "version": "1.27.0",
+  "version": "1.41.0",
   "description": "Logto is an open-source Identity and Access Management (IAM) platform designed to streamline Customer Identity and Access Management (CIAM) and Workforce Identity Management.",
   "logo": "logto.png",
   "links": {

blueprints/logto/template.toml

@@ -1,7 +1,7 @@
 [variables]
 main_domain = "${domain}"
 admin_domain = "${domain}"
-postgres_password = "${password}"
+postgres_password = "${password:32}"
 
 [config]
 mounts = []
@@ -17,6 +17,6 @@ port = 3_002
 host = "${admin_domain}"
 
 [config.env]
-LOGTO_ENDPOINT = "http://${admin_domain}"
+LOGTO_ENDPOINT = "http://${main_domain}"
 LOGTO_ADMIN_ENDPOINT = "http://${admin_domain}"
 LOGTO_POSTGRES_PASSWORD = "${postgres_password}"