rstillwell/Submatter
1
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions
Submatter/docker/opencode/README.md
Randall Stillwell d90ff11f5b
Some checks are pending
CI / Lint, type-check, test (push) Waiting to run
Details
Deploy homelab (CT 116) / Deploy to CT 116 (push) Waiting to run
Details
feat(opencode): ship tooling image with git, node, and build deps 
Extend the Alpine OpenCode base so agent sessions can clone, npm/pnpm
install, and compile native modules; seed Forgejo HTTPS creds at start.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-14 12:16:26 -05:00

2.2 KiB
Raw Blame History

OpenCode on CT 116 (Submatter)

Headless coding harness for Submatter. Prefer this over OpenHands.

Runs opencode serve on :4096 (HTTP API for the worker). Attach a TUI with opencode attach http://…:4096, or use the browser via Traefik once Authentik is happy. The image has no desktop browser — do not use opencode web in compose without an xdg-open stub (entrypoint provides one if you switch back).

Tooling image

docker/opencode/Dockerfile extends ghcr.io/anomalyco/opencode:latest with:

  • git, openssh-client, gh
  • Node.js + npm + pnpm + tsx
  • bash, curl, ripgrep, python3, make, g++ (native module builds)

Forgejo HTTPS auth is seeded from FORGEJO_TOKEN into ~/.git-credentials at container start. Projects live under /workspace/<repo> on the shared volume.

export COMPOSE_PROFILES=opencode
docker compose --project-directory /opt/submatter \
  -f docker/docker-compose.prod.yml --env-file .env \
  build opencode
bash scripts/deploy-prod.sh up

Enable

On CT 116 /opt/submatter/.env:

COMPOSE_PROFILES=opencode
WORKER_SESSION_TYPE=opencode
OPENCODE_SERVER_PASSWORD=<openssl rand -hex 24>
OPENCODE_SERVER_URL=http://opencode:4096
OMNIROUTE_BASE_URL=https://omniroute.stillwell.cloud/v1
OMNIROUTE_API_KEY=<gateway inference key>
FORGEJO_TOKEN=<forgejo pat with repo scope>

Then:

export COMPOSE_PROFILES=opencode
bash scripts/deploy-prod.sh up
# First time / after worker harness code lands:
# bash scripts/deploy-prod.sh build

URLs

Surface URL
Traefik https://opencode.stillwell.cloud (Authentik + basic auth)
Worker API http://opencode:4096 on the echodo Docker network
LAN health curl -u opencode:$OPENCODE_SERVER_PASSWORD http://192.168.68.116:4096/global/health

Auth

  • Browser: Authentik via Traefik (authentik-auth) and OpenCode basic auth.
  • Worker: same basic auth via OPENCODE_SERVER_PASSWORD.
  • Models: @omniroute/opencode-plugin + OMNIROUTE_API_KEY (seeded into auth.json by entrypoint.sh).
  • Git: FORGEJO_TOKEN → HTTPS credential helper for forgejo.stillwell.cloud.

RAM

Container capped at 3 GB (Next.js builds). Keep one concurrent agent until host RAM → 64 GB.