fiws-page/docker-compose.yml
2026-08-11 17:16:48 +02:00

48 lines
1.2 KiB
YAML

name: fiws-page
services:
fiws-page:
image: "${IMAGE_NAME:-fiws-page}:${IMAGE_TAG:-latest}"
build:
context: .
dockerfile: Dockerfile
target: runtime
restart: unless-stopped
init: true
user: "101:101"
read_only: true
cap_drop:
- ALL
security_opt:
- no-new-privileges:true
tmpfs:
- /tmp:rw,noexec,nosuid,nodev,size=16m,uid=101,gid=101,mode=1770
pids_limit: 64
mem_limit: 128m
cpus: 0.50
stop_grace_period: 10s
logging:
driver: json-file
options:
max-size: "10m"
max-file: "3"
expose:
- "8080"
networks:
- proxy
labels:
traefik.enable: "true"
traefik.docker.network: "${TRAEFIK_NETWORK:-proxy}"
traefik.http.services.fiws-page.loadbalancer.server.port: "8080"
traefik.http.routers.fiws-page.rule: "Host(`${DOMAIN:-fiwlabs.dev}`)"
traefik.http.routers.fiws-page.entrypoints: "${TRAEFIK_HTTPS_ENTRYPOINT:-websecure}"
traefik.http.routers.fiws-page.service: "fiws-page"
traefik.http.routers.fiws-page.tls: "true"
traefik.http.routers.fiws-page.tls.certresolver: "${TRAEFIK_CERT_RESOLVER:-porkbun}"
networks:
proxy:
external: true
name: "${TRAEFIK_NETWORK:-proxy}"