Victor Wiebe
498003f83d
Some checks failed
Release production image / production-image (push) Has been cancelled
36 lines
1.1 KiB
YAML
36 lines
1.1 KiB
YAML
services:
|
|
conductor:
|
|
image: ${CONDUCTOR_IMAGE:-gitea.skeletonworks.online/vwiebe/conductor}:${CONDUCTOR_VERSION:-v1.0.0}
|
|
restart: unless-stopped
|
|
init: true
|
|
ports:
|
|
- "${CONDUCTOR_BIND_ADDRESS:-127.0.0.1}:${CONDUCTOR_PORT:-8080}:8080"
|
|
environment:
|
|
NODE_ENV: production
|
|
PORT: 8080
|
|
CONDUCTOR_DATA_DIR: /data
|
|
CONDUCTOR_SECRET_KEY: ${CONDUCTOR_SECRET_KEY:?Set CONDUCTOR_SECRET_KEY in .env}
|
|
CONDUCTOR_SESSION_KEY: ${CONDUCTOR_SESSION_KEY:?Set CONDUCTOR_SESSION_KEY in .env}
|
|
CONDUCTOR_PROXY_INTERNAL_ORIGINS: ${CONDUCTOR_PROXY_INTERNAL_ORIGINS:-}
|
|
volumes:
|
|
- conductor_data:/data
|
|
read_only: true
|
|
tmpfs:
|
|
- /tmp:rw,noexec,nosuid,size=64m
|
|
cap_drop:
|
|
- ALL
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
pids_limit: 512
|
|
mem_limit: ${CONDUCTOR_MEM_LIMIT:-1g}
|
|
cpus: ${CONDUCTOR_CPUS:-1.5}
|
|
healthcheck:
|
|
test: ["CMD", "node", "-e", "fetch('http://127.0.0.1:8080/api/health').then(r=>{if(!r.ok)process.exit(1)}).catch(()=>process.exit(1))"]
|
|
interval: 30s
|
|
timeout: 5s
|
|
start_period: 15s
|
|
retries: 3
|
|
|
|
volumes:
|
|
conductor_data:
|