KyuubiYoru
38 lines
1.1 KiB
YAML
38 lines
1.1 KiB
YAML
name: rendezvous-local
|
|
|
|
services:
|
|
rendezvous:
|
|
image: "${RENDEZVOUS_IMAGE:-finalfactory/rendezvous:local}"
|
|
build:
|
|
context: ../..
|
|
dockerfile: Dockerfile
|
|
init: true
|
|
user: "${RENDEZVOUS_UID:?set RENDEZVOUS_UID to a non-root host UID}:${RENDEZVOUS_GID:?set RENDEZVOUS_GID to its GID}"
|
|
read_only: true
|
|
tmpfs:
|
|
- /tmp:rw,noexec,nosuid,nodev,size=16m,uid=${RENDEZVOUS_UID},gid=${RENDEZVOUS_GID},mode=0700
|
|
cap_drop:
|
|
- ALL
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
pids_limit: 128
|
|
mem_limit: 512m
|
|
cpus: 1.0
|
|
ulimits:
|
|
nofile:
|
|
soft: 4096
|
|
hard: 4096
|
|
stop_grace_period: 40s
|
|
restart: unless-stopped
|
|
environment:
|
|
ASPNETCORE_ENVIRONMENT: Production
|
|
ASPNETCORE_HTTP_PORTS: "8080"
|
|
Rendezvous__Diagnostics__Enabled: "${RENDEZVOUS_DIAGNOSTICS_ENABLED:-false}"
|
|
Rendezvous__Metrics__Enabled: "${RENDEZVOUS_METRICS_ENABLED:-false}"
|
|
volumes:
|
|
- ./appsettings.Production.json:/app/appsettings.Production.json:ro
|
|
- ./secrets/signing-key:/run/secrets/rendezvous-signing-key:ro
|
|
ports:
|
|
- "127.0.0.1:8080:8080/tcp"
|
|
- "9050:9050/udp"
|