diff options
Diffstat (limited to 'compose.yaml')
| -rw-r--r-- | compose.yaml | 25 |
1 files changed, 25 insertions, 0 deletions
diff --git a/compose.yaml b/compose.yaml index 25cb1eb..01825e4 100644 --- a/compose.yaml +++ b/compose.yaml @@ -22,6 +22,31 @@ services: BOKFD_TLS_CERT: /var/lib/bokfd/certs/certificates/${LEGO_DOMAIN:-bokf.makandra.eu}.crt BOKFD_TLS_KEY: /var/lib/bokfd/certs/certificates/${LEGO_DOMAIN:-bokf.makandra.eu}.key + # Web frontend: login gate + browser terminal on http://127.0.0.1:8790. + # The host's TLS proxy serves it as https://bokf.makandra.eu/web (see + # deploy/Caddyfile and docs/DEPLOY.md). Talks to bokfd over the socket + # only; read-only, no capabilities. + web: + image: ${BOKF_WEB_IMAGE:-bokf-web}:${BOKF_TAG:-latest} + restart: unless-stopped + depends_on: + - bokfd + ports: + - "127.0.0.1:8790:8790" + volumes: + - ./var/run:/run/bokfd + environment: + BOKF_WEB_MAX_SESSIONS: ${BOKF_WEB_MAX_SESSIONS:-20} + read_only: true + tmpfs: + - /tmp:size=256m,mode=1777 + cap_drop: + - ALL + security_opt: + - no-new-privileges:true + pids_limit: 512 + mem_limit: 2g + certs: image: goacme/lego:latest restart: unless-stopped |