Process feedback

Author: Jelcoo

ix-dev/community/calagopus/app.yaml

@@ -1,37 +1,14 @@
 app_version: 1.0.3
-capabilities:
-- description: Calagopus is able to change file ownership arbitrarily
-  name: CHOWN
-- description: Calagopus is able to bypass file permission checks
-  name: DAC_OVERRIDE
-- description: Calagopus is able to bypass permission checks for file operations
-  name: FOWNER
-- description: Calagopus is able to send signals to any process
-  name: KILL
-- description: Calagopus is able to set file capabilities on other files
-  name: SETFCAP
-- description: Calagopus is able to change group ID of processes
-  name: SETGID
-- description: Calagopus is able to transfer capabilities between processes
-  name: SETPCAP
-- description: Calagopus is able to change user ID of processes
-  name: SETUID
 categories:
 - games
 date_added: '2026-04-28'
-description: Calagopus is a modern, open-source game server management panel built
+description: A modern game server management panel built
   in Rust. Deploy, monitor, and manage Minecraft, Hytale, and other game servers with
   industry-leading performance.
 home: https://calagopus.com/
 host_mounts:
 - description: Docker socket
   host_path: /var/run/docker.sock
-- description: Wings configuration directory\
-  host_path: /etc/pterodactyl
-- description: Wings data directory
-  host_path: /var/lib/pterodactyl
-- description: Wings temporary directory
-  host_path: /tmp/pterodactyl
 icon: https://media.sys.truenas.net/apps/calagopus/icons/icon.svg
 keywords:
 - calagopus

ix-dev/community/calagopus/ix_values.yaml

@@ -28,9 +28,6 @@ consts:
   data_path: /var/lib/calagopus
   log_path: /var/log/calagopus
   wings_config_path: /var/lib/calagopus/wings-config.yml
-  wings_etc_path: /etc/pterodactyl
-  wings_data_path: /var/lib/pterodactyl
-  wings_tmp_path: /tmp/pterodactyl
   notes_body: |
     The first time you visit the panel you will be greeted by the Out Of Box
     Experience (OOBE) wizard which lets you create the initial administrator
@@ -40,18 +37,16 @@ consts:
     registered for you on first start. You can begin creating servers from the
     panel right away.
 
-    Game server data is stored on the host under `/var/lib/pterodactyl/volumes`.
-    This path cannot be changed because Wings spawns sibling containers via the
-    Docker socket and those containers reference host paths that must match the
-    paths inside the Calagopus container. If you need server data on a different
-    pool, create a bind mount from your desired location to `/var/lib/pterodactyl`
-    on the host before installing this app.
+    Game server volumes, backups, archives and Wings's working directories are
+    all stored under the dataset you select for "Wings Data Storage". Wings
+    spawns sibling containers via the Docker socket; those sibling containers
+    bind-mount paths under the Wings data dataset directly from the host, so
+    that dataset is mounted into the Calagopus container at the same path it
+    has on the host.
 
-    Wings logs are written inside the container at `/var/log/pterodactyl` and are
-    not persisted to a host directory (TrueNAS does not allow apps to mount paths
-    under `/var/log`). The Panel logs (`/var/log/calagopus`) are persisted via the
-    "Calagopus Logs Storage" option, and Wings logs remain accessible through
-    `docker logs` on the container.
+    Wings runtime logs are written under the same Wings data dataset (under
+    `<wings_data>/logs`). Panel logs are persisted separately via the
+    "Calagopus Logs Storage" option.
 
     For details on every available environment variable, see the upstream
     environment documentation: https://calagopus.com/docs/panel/environment

ix-dev/community/calagopus/questions.yaml

@@ -56,23 +56,6 @@ questions:
             default: ""
             required: true
             private: true
-        - variable: app_primary
-          label: Primary Instance
-          description: |
-            Designates whether this Panel instance is the primary one in a clustered environment.</br>
-            The primary instance is responsible for running background tasks (e.g. cleanup jobs).</br>
-            Leave this enabled unless you are running multiple Panel instances against the same database.
-          schema:
-            type: boolean
-            default: true
-        - variable: app_debug
-          label: Enable Debug Mode
-          description: |
-            When enabled, the Panel produces more verbose logs and detailed error pages.</br>
-            Useful for troubleshooting but should be disabled in production as it can expose sensitive information.
-          schema:
-            type: boolean
-            default: false
         - variable: enable_wings_proxy
           label: Enable Wings Proxy
           description: |
@@ -82,40 +65,6 @@ questions:
           schema:
             type: boolean
             default: true
-        - variable: use_decryption_cache
-          label: Use Decryption Cache
-          description: |
-            Caches decrypted values in memory and Redis for improved performance.</br>
-            This is slightly less secure since decrypted data is held in the cache.
-          schema:
-            type: boolean
-            default: true
-        - variable: use_internal_cache
-          label: Use Internal Cache
-          description: |
-            Caches short-lived values in app memory in addition to Redis.</br>
-            Improves performance at the cost of slightly higher memory usage.
-          schema:
-            type: boolean
-            default: true
-        - variable: server_name
-          label: Server Name
-          description: |
-            Optional name used to identify this Panel instance in logs and Sentry error reports.</br>
-            Useful when running multiple Panel instances against the same database.
-          schema:
-            type: string
-            default: ""
-        - variable: sentry_url
-          label: Sentry DSN
-          description: |
-            Optional Sentry DSN for error reporting.</br>
-            Format: https://&lt;public_key&gt;@sentry.io/&lt;project_id&gt;</br>
-            Leave empty to disable Sentry integration.
-          schema:
-            type: string
-            default: ""
-            private: true
         - variable: trusted_proxies
           label: Trusted Proxies
           description: |
@@ -251,15 +200,6 @@ questions:
                         required: true
                         $ref:
                           - definitions/node_bind_ip
-        - variable: host_network
-          label: Host Network
-          description: |
-            Bind to the host network.</br>
-            This will give the container direct access to the host's network interfaces.</br>
-            Required for some Wings allocations setups where game servers must be reachable on a wide range of host ports.
-          schema:
-            type: boolean
-            default: false
 
   - variable: storage
     label: ""
@@ -423,6 +363,93 @@ questions:
                         show_if: [["acl_enable", "=", false]]
                         required: true
 
+        - variable: wings_data
+          label: Wings Data Storage
+          description: |
+            Stores all data managed by the integrated Wings instance: game server volumes,
+            backups, archives, runtime mounts, working files and logs.</br>
+            </br>
+            This dataset is mounted into the Calagopus container at the same path it has
+            on the host. This is required because Wings spawns sibling containers via the
+            Docker socket, and those sibling containers bind-mount paths under this dataset
+            directly from the host - so the host path and the container path must match.</br>
+            </br>
+            Pick a dataset on the pool where you want game server data to live. Server
+            volumes can grow large, so plan accordingly.
+          schema:
+            type: dict
+            attrs:
+              - variable: type
+                label: Type
+                description: |
+                  ixVolume: Is dataset created automatically by the system.</br>
+                  Host Path: Is a path that already exists on the system.
+                schema:
+                  type: string
+                  required: true
+                  default: "ix_volume"
+                  enum:
+                    - value: "host_path"
+                      description: Host Path (Path that already exists on the system)
+                    - value: "ix_volume"
+                      description: ixVolume (Dataset created automatically by the system)
+              - variable: ix_volume_config
+                label: ixVolume Configuration
+                description: The configuration for the ixVolume dataset.
+                schema:
+                  type: dict
+                  show_if: [["type", "=", "ix_volume"]]
+                  $ref:
+                    - "normalize/ix_volume"
+                  attrs:
+                    - variable: acl_enable
+                      label: Enable ACL
+                      description: Enable ACL for the storage.
+                      schema:
+                        type: boolean
+                        default: false
+                    - variable: dataset_name
+                      label: Dataset Name
+                      description: The name of the dataset to use for storage.
+                      schema:
+                        type: string
+                        required: true
+                        hidden: true
+                        default: "wings_data"
+                    - variable: acl_entries
+                      label: ACL Configuration
+                      schema:
+                        type: dict
+                        show_if: [["acl_enable", "=", true]]
+                        attrs: []
+              - variable: host_path_config
+                label: Host Path Configuration
+                schema:
+                  type: dict
+                  show_if: [["type", "=", "host_path"]]
+                  attrs:
+                    - variable: acl_enable
+                      label: Enable ACL
+                      description: Enable ACL for the storage.
+                      schema:
+                        type: boolean
+                        default: false
+                    - variable: acl
+                      label: ACL Configuration
+                      schema:
+                        type: dict
+                        show_if: [["acl_enable", "=", true]]
+                        attrs: []
+                        $ref:
+                          - "normalize/acl"
+                    - variable: path
+                      label: Host Path
+                      description: The host path to use for storage.
+                      schema:
+                        type: hostpath
+                        show_if: [["acl_enable", "=", false]]
+                        required: true
+
         - variable: postgres_data
           label: PostgreSQL Data Storage
           description: |

ix-dev/community/calagopus/templates/docker-compose.yaml

@@ -1,19 +1,31 @@
 {% set tpl = ix_lib.base.render.Render(values) %}
 
 {% set calagopus_net = tpl.networks.create_internal("calagopus-net") %}
+{% set wings_host_path = tpl.funcs.get_host_path(values.storage.wings_data) %}
 
 {# Main Calagopus AIO container (Panel + Wings) #}
 {% set c1 = tpl.add_container(values.consts.calagopus_container_name, "image") %}
 {% do c1.add_network(calagopus_net) %}
 
 {% set wings_init = tpl.add_container(values.consts.wings_init_container_name, "image") %}
 {% do wings_init.setup_as_helper() %}
-{% do wings_init.set_user(0, 0) %}
 {% do wings_init.set_entrypoint(["/bin/sh", "-c"]) %}
-{% do wings_init.set_command(["[ -s %s ] || echo '{}' > %s" | format(values.consts.wings_config_path, values.consts.wings_config_path)]) %}
+{% set wings_seed_yaml -%}
+system:
+  root_directory: {{ wings_host_path }}
+  log_directory: {{ wings_host_path }}/logs
+  data_directory: {{ wings_host_path }}/volumes
+  vmount_directory: {{ wings_host_path }}/vmounts
+  archive_directory: {{ wings_host_path }}/archives
+  backup_directory: {{ wings_host_path }}/backups
+  tmp_directory: {{ wings_host_path }}/tmp
+{%- endset %}
+{% do wings_init.set_command([
+  "[ -s " ~ values.consts.wings_config_path ~ " ] || cat > " ~ values.consts.wings_config_path ~ " <<'EOF'\n" ~ wings_seed_yaml ~ "\nEOF"
+]) %}
 {% do wings_init.add_storage(values.consts.data_path, values.storage.data) %}
 
-{# Permissions init container - prepares storage for postgres and the panel data dir #}
+{# Permissions init container - prepares storage for postgres and the redis temp volume #}
 {% set perm_container = tpl.deps.perms(values.consts.perms_container_name) %}
 
 {# PostgreSQL dependency #}
@@ -34,31 +46,27 @@
 {% set redis = tpl.deps.redis(values.consts.redis_container_name, "redis_image", redis_config, perm_container) %}
 {% do redis.container.add_network(calagopus_net) %}
 
-{# AIO image manages sibling containers via the docker socket and therefore needs to run as root #}
-{% do c1.set_user(0, 0) %}
-{% do c1.add_caps(["CHOWN", "DAC_OVERRIDE", "FOWNER", "KILL", "SETFCAP", "SETGID", "SETPCAP", "SETUID"]) %}
-
 {# Health check on the panel HTTP port #}
-{% do c1.healthcheck.set_test("netcat", {"port": values.consts.internal_web_port}) %}
+{% do c1.healthcheck.set_test("netcat", {"port": values.network.web_port.port_number}) %}
 
 {# Dependencies must come up healthy before the panel starts #}
 {% do c1.depends.add_dependency(values.consts.postgres_container_name, "service_healthy") %}
 {% do c1.depends.add_dependency(values.consts.redis_container_name, "service_healthy") %}
 {% do c1.depends.add_dependency(values.consts.wings_init_container_name, "service_completed_successfully") %}
 
 {# Core environment - mirrors the upstream calagopus compose.yml #}
-{% do c1.environment.add_env("PORT", values.consts.internal_web_port) %}
+{% do c1.environment.add_env("PORT", values.network.web_port.port_number) %}
 {% do c1.environment.add_env("BIND", "0.0.0.0") %}
 {% do c1.environment.add_env("DATABASE_URL", postgres.get_url("postgresql")) %}
 {% do c1.environment.add_env("DATABASE_MIGRATE", "true") %}
 {% do c1.environment.add_env("REDIS_MODE", "redis") %}
 {% do c1.environment.add_env("REDIS_URL", redis.get_url("redis")) %}
 {% do c1.environment.add_env("APP_ENCRYPTION_KEY", values.calagopus.encryption_key) %}
-{% do c1.environment.add_env("APP_PRIMARY", values.calagopus.app_primary) %}
-{% do c1.environment.add_env("APP_DEBUG", values.calagopus.app_debug) %}
+{% do c1.environment.add_env("APP_PRIMARY", "true") %}
+{% do c1.environment.add_env("APP_DEBUG", "false") %}
 {% do c1.environment.add_env("APP_ENABLE_WINGS_PROXY", values.calagopus.enable_wings_proxy) %}
-{% do c1.environment.add_env("APP_USE_DECRYPTION_CACHE", values.calagopus.use_decryption_cache) %}
-{% do c1.environment.add_env("APP_USE_INTERNAL_CACHE", values.calagopus.use_internal_cache) %}
+{% do c1.environment.add_env("APP_USE_DECRYPTION_CACHE", "true") %}
+{% do c1.environment.add_env("APP_USE_INTERNAL_CACHE", "true") %}
 {% do c1.environment.add_env("APP_LOG_DIRECTORY", values.consts.log_path) %}
 
 {# AIO-specific: where the integrated wings reads its bootstrap configuration from.
@@ -69,45 +77,23 @@
   {% do c1.environment.add_env("APP_TRUSTED_PROXIES", values.calagopus.trusted_proxies | join(",")) %}
 {% endif %}
 
-{% if values.calagopus.server_name %}
-  {% do c1.environment.add_env("SERVER_NAME", values.calagopus.server_name) %}
-{% endif %}
-
-{% if values.calagopus.sentry_url %}
-  {% do c1.environment.add_env("SENTRY_URL", values.calagopus.sentry_url) %}
-{% endif %}
-
 {% do c1.environment.add_user_envs(values.calagopus.additional_envs) %}
 
 {# Ports - panel HTTP and Wings SFTP #}
-{% if not values.network.host_network %}
-  {% do c1.add_port(values.network.web_port, {"container_port": values.consts.internal_web_port}) %}
-  {% do c1.add_port(values.network.sftp_port, {"container_port": values.consts.internal_sftp_port}) %}
-{% endif %}
+{% do c1.add_port(values.network.web_port, {"container_port": values.consts.internal_web_port}) %}
+{% do c1.add_port(values.network.sftp_port, {"container_port": values.consts.internal_sftp_port}) %}
 
 {# Panel-managed storage (configurable via questions.yaml) #}
 {% do c1.add_storage(values.consts.data_path, values.storage.data) %}
 {% do c1.add_storage(values.consts.log_path, values.storage.logs) %}
 
+{# Wings data: same host path inside the container as on the host so sibling containers
+   spawned via the docker socket can bind-mount paths under it. #}
+{% do c1.add_storage(wings_host_path, values.storage.wings_data) %}
+
 {# Docker socket - required for Wings to manage game server containers #}
 {% do c1.add_docker_socket(read_only=False) %}
 
-{# Wings host bind mounts. These paths MUST be identical on host and container because
-   Wings spawns sibling containers (via the docker socket) that reference these host
-   paths directly. They are intentionally not exposed in questions.yaml. #}
-{% set wings_host_paths = [
-  (values.consts.wings_etc_path, values.consts.wings_etc_path, false),
-  (values.consts.wings_data_path, values.consts.wings_data_path, false),
-  (values.consts.wings_tmp_path, values.consts.wings_tmp_path, false),
-] %}
-{% for host_path, container_path, read_only in wings_host_paths %}
-  {% do c1.add_storage(container_path, {
-    "type": "host_path",
-    "read_only": read_only,
-    "host_path_config": {"path": host_path, "create_host_path": true},
-  }) %}
-{% endfor %}
-
 {# User-defined extra storage #}
 {% for store in values.storage.additional_storage %}
   {% do c1.add_storage(store.mount_path, store) %}