-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathcompose.yaml
More file actions
70 lines (66 loc) · 1.38 KB
/
Copy pathcompose.yaml
File metadata and controls
70 lines (66 loc) · 1.38 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
x-service-defaults: &service-defaults
platform: linux/amd64
pull_policy: never
security_opt:
- no-new-privileges:true
cap_drop:
- ALL
logging:
driver: local
options:
max-size: 10m
max-file: "3"
stop_grace_period: 20s
pids_limit: 256
deploy:
resources:
limits:
cpus: "1.0"
memory: 768M
pids: 256
services:
caddy:
<<: *service-defaults
image: ${PROOFLINE_CADDY_IMAGE:?PROOFLINE_CADDY_IMAGE is required}
user: "10001:10001"
read_only: true
tmpfs:
- /tmp:size=32m,mode=1777
environment:
PROOFLINE_PUBLIC_ORIGIN: ${PROOFLINE_PUBLIC_ORIGIN:?PROOFLINE_PUBLIC_ORIGIN is required}
depends_on:
web:
condition: service_started
cap_add:
- NET_BIND_SERVICE
ports:
- target: 80
published: 80
protocol: tcp
- target: 443
published: 443
protocol: tcp
networks:
- public_edge
- web_internal
volumes:
- caddy_data:/data
- caddy_config:/config
web:
<<: *service-defaults
image: ${PROOFLINE_WEB_IMAGE:?PROOFLINE_WEB_IMAGE is required}
user: "1000:1000"
read_only: true
tmpfs:
- /tmp:size=32m,mode=1777
expose:
- "8080"
networks:
- web_internal
networks:
public_edge: {}
web_internal:
internal: true
volumes:
caddy_data: {}
caddy_config: {}