Checkpoint peering identity and opt-in discovery

docker-compose.yml

@@ -66,6 +66,10 @@ services:
         source: ${SCRAPER_DATA_PATH:-./data/scraper}
         target: /data/scraper
         bind: {create_host_path: false}
+      - type: bind
+        source: ${PEER_DATA_PATH:-./data/peering}
+        target: /data/peering
+        read_only: true
     environment:
       DATA: /data
       LIBRARY: /library
@@ -75,6 +79,7 @@ services:
       SCRAPER_HOST: 0.0.0.0
       SCRAPER_PORT: "8091"
       SCRAPER_TOKEN_FILE: /run/secrets/scraper_token
+      PEER_DATA: /data/peering
       SOURCE_PLUGIN_URL: ${SOURCE_PLUGIN_URL:-}
       MANGADEX_PLUGIN_URL: ${MANGADEX_PLUGIN_URL:-}
     networks: [backend, egress, plugin_backend]
@@ -110,6 +115,39 @@ services:
       start_period: 60s
       retries: 3
 
+  peer-gateway:
+    <<: *app
+    profiles: [peering]
+    command: [node, peering/gateway.js]
+    ports: ["${PEER_BIND:-127.0.0.1}:${PEER_PORT:-8093}:8093"]
+    volumes:
+      - type: bind
+        source: ${LIBRARY_PATH:-./library}
+        target: /library
+        read_only: true
+        bind: {create_host_path: false}
+      - type: bind
+        source: ${PEER_DATA_PATH:-./data/peering}
+        target: /data/peering
+        read_only: true
+      - type: bind
+        source: ${PEER_USAGE_PATH:-./data/peering-usage}
+        target: /data/peering-usage
+    environment:
+      LIBRARY: /library
+      PEER_DATA: /data/peering
+      PEER_USAGE_FILE: /data/peering-usage/usage.json
+      PEER_HOST: 0.0.0.0
+      PEER_PORT: "8093"
+    # Docker Desktop does not publish host ports from an internal-only network.
+    networks: [backend, egress]
+    healthcheck:
+      test: [CMD, node, tools/healthcheck-peer.js]
+      interval: 30s
+      timeout: 5s
+      start_period: 30s
+      retries: 3
+
   source-plugin-weebcentral:
     image: ${APP_IMAGE:-mangacircus:local}
     build: