scanash.com
forked from
brookie.blog/pds-operator
An easy to set up and operate PDS admin panel.
1.1 kB
32 lines
1services:
2 app:
3 build: .
4 env_file: .env
5 environment:
6 - HOST=0.0.0.0 # required for reverse proxy to reach
7 - DB_PATH=/data/data.sqlite
8 - AUDIT_LOG_PATH=/data/audit.log
9 ports:
10 - "127.0.0.1:8787:8787"
11 volumes:
12 - app-data:/data
13 # or keep to data on a host path: on linux the dir must be writable by the
14 # container user (chown it to uid 1000, or change `user:` below to its owner)
15 # :Z is for selinux hosts (e.g. podman on fedora), harmless elsewhere:
16 # - ./data:/data:Z
17 # uncomment to change the labeler watchlist without a rebuild:
18 # - ./server/labelers.json:/app/server/labelers.json:ro,Z
19 # runs unprivileged; for the ./data bind mount above, change to the dir's
20 # owner with values from `id -u` and `id -g`:
21 user: node
22 # hardening: if something misbehaves, loosen read_only first, then cap_drop,
23 # then no-new-privileges, and re-enable whatever turns out innocent
24 read_only: true
25 cap_drop:
26 - ALL
27 security_opt:
28 - no-new-privileges:true
29 restart: unless-stopped
30
31volumes:
32 app-data: