mirror of
https://github.com/yusing/godoxy.git
synced 2025-12-05 18:57:34 -06:00
85 lines
2.2 KiB
YAML
Executable File
85 lines
2.2 KiB
YAML
Executable File
---
|
|
services:
|
|
socket-proxy:
|
|
container_name: socket-proxy
|
|
image: ghcr.io/yusing/socket-proxy:latest
|
|
environment:
|
|
- ALLOW_START=1
|
|
- ALLOW_STOP=1
|
|
- ALLOW_RESTARTS=1
|
|
- CONTAINERS=1
|
|
- EVENTS=1
|
|
- INFO=1
|
|
- PING=1
|
|
- POST=1
|
|
- VERSION=1
|
|
volumes:
|
|
- ${DOCKER_SOCKET:-/var/run/docker.sock}:/var/run/docker.sock
|
|
restart: unless-stopped
|
|
tmpfs:
|
|
- /run
|
|
ports:
|
|
- ${SOCKET_PROXY_LISTEN_ADDR:-127.0.0.1:2375}:2375
|
|
frontend:
|
|
image: ghcr.io/yusing/godoxy-frontend:${TAG:-latest}
|
|
# lite variant
|
|
# image: ghcr.io/yusing/godoxy-frontend:${TAG:-latest}-lite
|
|
container_name: godoxy-frontend
|
|
restart: unless-stopped
|
|
env_file: .env
|
|
# comment out `user` for lite variant
|
|
user: ${GODOXY_UID:-1000}:${GODOXY_GID:-1000}
|
|
read_only: true
|
|
tmpfs:
|
|
- /app/.next/cache # next image caching
|
|
|
|
# for lite variant, do not change uid/gid
|
|
# - /var/cache/nginx:uid=101,gid=101
|
|
# - /run:uid=101,gid=101
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
cap_drop:
|
|
- all
|
|
depends_on:
|
|
- app
|
|
labels:
|
|
proxy.aliases: ${GODOXY_FRONTEND_ALIASES:-godoxy}
|
|
# proxy.#1.middlewares.cidr_whitelist: |
|
|
# status: 403
|
|
# message: IP not allowed
|
|
# allow:
|
|
# - 127.0.0.1
|
|
# - 10.0.0.0/8
|
|
# - 192.168.0.0/16
|
|
# - 172.16.0.0/12
|
|
app:
|
|
image: ghcr.io/yusing/godoxy:${TAG:-latest}
|
|
container_name: godoxy-proxy
|
|
restart: always
|
|
network_mode: host # do not change this
|
|
env_file: .env
|
|
user: ${GODOXY_UID:-1000}:${GODOXY_GID:-1000}
|
|
depends_on:
|
|
socket-proxy:
|
|
condition: service_started
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
cap_drop:
|
|
- all
|
|
cap_add:
|
|
- NET_BIND_SERVICE
|
|
environment:
|
|
- DOCKER_HOST=tcp://${SOCKET_PROXY_LISTEN_ADDR:-127.0.0.1:2375}
|
|
volumes:
|
|
- ./config:/app/config
|
|
- ./logs:/app/logs
|
|
- ./error_pages:/app/error_pages:ro
|
|
- ./data:/app/data
|
|
|
|
# This path stores certs obtained from autocert and agent TLS client certs
|
|
- ./certs:/app/certs
|
|
|
|
# mount existing certificate
|
|
# - /path/to/certs/cert.crt:/app/certs/cert.crt
|
|
# - /path/to/certs/priv.key:/app/certs/priv.key
|