flashy/docker-compose.yml at main · 404Simon/flashy · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
services:
  flashy:
    container_name: flashy
    image: ghcr.io/404simon/flashy:latest
    # Run as host user to avoid permission issues with bind-mounted volumes
    # Set UID/GID in .env file or they default to 1000:1000
    user: "${UID:-1000}:${GID:-1000}"
    ports:
      - "8080:8080"
    volumes:
      - ./data:/app/data
      - ./.env:/app/.env:ro
    environment:
      - DATABASE_URL=sqlite:/app/data/flashy.db
      - RUST_LOG=info
      - LEPTOS_SITE_ADDR=0.0.0.0:8080
      - LEPTOS_SITE_ROOT=/app/site
    restart: unless-stopped
    # Security hardening
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    read_only: true
    tmpfs:
      - /tmp
    healthcheck:
      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:8080/"]
      interval: 30s
      timeout: 3s
      start_period: 5s
      retries: 3
    depends_on:
      minio:
        condition: service_healthy

  minio:
    image: minio/minio:latest
    user: "${UID:-1000}:${GID:-1000}"
    command: server /data --console-address ":9001"
    ports:
      - "9000:9000"
      - "9001:9001"
    environment:
      MINIO_ROOT_USER: ${MINIO_ROOT_USER:-minioadmin}
      MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD:-minioadmin}
    volumes:
      - ./minio_data:/data
    healthcheck:
      test: ["CMD", "mc", "ready", "local"]
      interval: 1s
      timeout: 5s
      retries: 5
    restart: unless-stopped