supertokens/supertokens-docker-mysql

Dockerfile for SuperTokens with MySQL

Quickstart

# This will start with an in memory database.

$ docker run -p 3567:3567 -d registry.supertokens.io/supertokens/supertokens-mysql

Configuration

You can use your own config.yaml file as a shared volume or pass the key-values as environment variables.

If you do both, only the shared config.yaml file will be considered.

Using environment variable

Available environment variables

• Core
  • API_KEYS
  • SUPERTOKENS_HOST
  • SUPERTOKENS_PORT
  • ACCESS_TOKEN_VALIDITY
  • ACCESS_TOKEN_BLACKLISTING
  • ACCESS_TOKEN_SIGNING_KEY_DYNAMIC
  • ACCESS_TOKEN_DYNAMIC_SIGNING_KEY_UPDATE_INTERVAL
  • REFRESH_TOKEN_VALIDITY
  • PASSWORD_RESET_TOKEN_LIFETIME
  • EMAIL_VERIFICATION_TOKEN_LIFETIME
  • INFO_LOG_PATH
  • ERROR_LOG_PATH
  • MAX_SERVER_POOL_SIZE
  • PASSWORDLESS_MAX_CODE_INPUT_ATTEMPTS
  • PASSWORDLESS_CODE_LIFETIME
  • DISABLE_TELEMETRY
  • BASE_PATH
  • PASSWORD_HASHING_ALG
  • ARGON2_ITERATIONS
  • ARGON2_MEMORY_KB
  • ARGON2_PARALLELISM
  • ARGON2_HASHING_POOL_SIZE
  • BCRYPT_LOG_ROUNDS
  • LOG_LEVEL
  • FIREBASE_PASSWORD_HASHING_POOL_SIZE
  • FIREBASE_PASSWORD_HASHING_SIGNER_KEY
  • IP_ALLOW_REGEX
  • IP_DENY_REGEX
  • TOTP_MAX_ATTEMPTS
  • TOTP_RATE_LIMIT_COOLDOWN_SEC
• MySQL:
  • MYSQL_CONNECTION_URI
  • MYSQL_USER
  • MYSQL_PASSWORD
  • MYSQL_CONNECTION_POOL_SIZE
  • MYSQL_HOST
  • MYSQL_PORT
  • MYSQL_DATABASE_NAME
  • MYSQL_TABLE_NAMES_PREFIX
  • MYSQL_IDLE_CONNECTION_TIMEOUT
  • MYSQL_MINIMUM_IDLE_CONNECTIONS

docker run \
	-p 3567:3567 \
	-e MYSQL_CONNECTION_URI="mysql://username:password@host:port/dbName" \
	-d registry.supertokens.io/supertokens/supertokens-mysql

# OR

docker run \
	-p 3567:3567 \
	-e MYSQL_USER="mysqlUser" \
	-e MYSQL_HOST="192.168.1.2" \
	-e MYSQL_PORT="3306" \
	-e MYSQL_PASSWORD="password" \
	-d registry.supertokens.io/supertokens/supertokens-mysql

Using custom config file

• In your config.yaml file, please make sure you store the following key / values:
  • core_config_version: 0
  • host: "0.0.0.0"
  • mysql_config_version: 0
  • info_log_path: null (to log in docker logs)
  • error_log_path: null (to log in docker logs)
• The path for the config.yaml file in the container is /usr/lib/supertokens/config.yaml

$ docker run \
	-p 3567:3567 \
	-v /path/to/config.yaml:/usr/lib/supertokens/config.yaml \
	-d registry.supertokens.io/supertokens/supertokens-mysql

Logging

• By default, all the logs will be available via the docker logs <container-name> command.
• You can setup logging to a shared volume by:
  • Setting the info_log_path and error_log_path variables in your config.yaml file (or passing the values asn env variables).
  • Mounting the shared volume for the logging directory.

$ docker run \
	-p 3567:3567 \
	-v /path/to/logsFolder:/home/logsFolder \
	-e INFO_LOG_PATH="/home/logsFolder/info.log" \
	-e ERROR_LOG_PATH="/home/logsFolder/error.log" \
	-e MYSQL_USER="mysqlUser" \
	-e MYSQL_PASSWORD="password" \
	-d registry.supertokens.io/supertokens/supertokens-mysql

Database setup

• Before you start this container, make sure to initialize your database.
• You do not need to ensure that the MySQL database has started before this container is started. During bootup, SuperTokens will wait for ~1 hour for a MySQL instance to be available.
• If MYSQL_USER, MYSQL_PASSWORD and MYSQL_CONNECTION_URI are not provided, then SuperTokens will use an in memory database.

Read-only root fs

• If you wish to run this container with a read-only root filesystem, you can do so.
• The container still needs a temp area, where it can write its stuff, and also needs to be able to execute from there.
• You will have to create a mount for /lib/supertokens/temp/

docker run \
	-p 3567:3567 \
	--mount source=/path/on/host/machine,destination=/lib/supertokens/temp/,type=bind \
	--read-only \
	-d registry.supertokens.io/supertokens/supertokens-mysql

docker run \
	-p 3567:3567 \
	--tmpfs=/lib/supertokens/temp/:exec \
	--read-only \
	-d registry.supertokens.io/supertokens/supertokens-mysql