mirror of
https://github.com/telemt/telemt.git
synced 2026-04-17 18:44:10 +03:00
39 lines
1007 B
YAML
39 lines
1007 B
YAML
services:
|
|
telemt:
|
|
image: ghcr.io/telemt/telemt:latest
|
|
build: .
|
|
container_name: telemt
|
|
restart: unless-stopped
|
|
ports:
|
|
- "443:443"
|
|
- "127.0.0.1:9090:9090"
|
|
- "127.0.0.1:9091:9091"
|
|
# Allow caching 'proxy-secret' in read-only container
|
|
working_dir: /etc/telemt
|
|
volumes:
|
|
- ./config.toml:/etc/telemt/config.toml:ro
|
|
tmpfs:
|
|
- /etc/telemt:rw,mode=1777,size=4m
|
|
environment:
|
|
- RUST_LOG=info
|
|
healthcheck:
|
|
test: [ "CMD", "/app/telemt", "healthcheck", "/etc/telemt/config.toml", "--mode", "liveness" ]
|
|
interval: 30s
|
|
timeout: 5s
|
|
retries: 3
|
|
start_period: 20s
|
|
# Uncomment this line if you want to use host network for IPv6, but bridge is default and usually better
|
|
# network_mode: host
|
|
cap_drop:
|
|
- ALL
|
|
cap_add:
|
|
- NET_BIND_SERVICE
|
|
- NET_ADMIN
|
|
read_only: true
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
ulimits:
|
|
nofile:
|
|
soft: 65536
|
|
hard: 262144
|