Changes: - forbid to overwrite secrets of other users - add some logs of success - add validation on code (length 50) - use same limiter for POST requests
28 lines
768 B
Plaintext
28 lines
768 B
Plaintext
services:
|
|
codevault:
|
|
build: .
|
|
image: codevault:latest
|
|
restart: unless-stopped
|
|
ports:
|
|
- "127.0.0.1:8080:8080"
|
|
- "127.0.0.1:9092:9092"
|
|
volumes:
|
|
# config.yaml's database.path should point inside this volume, e.g. /app/data/codevault.db.
|
|
# server.trusted_proxies must list the nginx container/network's actual IP or CIDR
|
|
# (gin needs IPs/CIDRs, not hostnames) - e.g. this compose network's subnet.
|
|
- ./config.yaml:/app/config.yaml:ro
|
|
- ./data:/app/data
|
|
logging:
|
|
driver: json-file
|
|
options:
|
|
max-size: "50m"
|
|
max-file: "3"
|
|
deploy:
|
|
resources:
|
|
limits:
|
|
cpus: "1.0"
|
|
memory: 256M
|
|
reservations:
|
|
cpus: "0.25"
|
|
memory: 64M
|