Docker deployment

Give your public edge a reproducible home.

Build from the repository

WireRift ships a Dockerfile and a Compose example. Clone the source and build the image locally.

git clone https://github.com/WireRift/WireRift.git
cd WireRift
docker build -t wirerift-server .

Run the server

Publish the control and public edge ports. Persist certificate data so restarts do not discard it. Replace the domain, email and token before running.

docker run -d --name wirerift-server \
  -p 4443:4443 -p 80:80 -p 443:443 \
  -e WIRERIFT_TOKEN=YOUR_TOKEN \
  -v wirerift-certs:/data/certs \
  wirerift-server \
  -domain tunnel.example.com -acme-email you@example.com

This example configures the public HTTPS edge. Configure the separate control TLS certificate/key options before sending authenticated client traffic over an untrusted network.

Use the Compose example

The upstream Compose file maps a limited TCP port range and binds the dashboard to host loopback. Customize its domain, token, certificate options and firewall rules for your environment.

# Review and customize docker-compose.yml first
docker compose up -d
docker compose logs -f wirerift-server

Check the public edge

The /healthz endpoint is available without authentication. Use it to tell whether the server is responding; then test an actual tunnel separately.

curl -f http://tunnel.example.com/healthz