Revert "hardening options"

This reverts commit e8867805fe.
This commit is contained in:
Marco Kundt 2021-05-11 17:39:34 +02:00
parent ac837e9952
commit 23e6eaf212
2 changed files with 2 additions and 20 deletions

View File

@ -1,4 +1,4 @@
version: "2.4" version: "3"
services: services:
nginx: nginx:
@ -6,13 +6,7 @@ services:
- mattermost - mattermost
container_name: nginx_mattermost container_name: nginx_mattermost
image: nginx:${NGINX_IMAGE_TAG} image: nginx:${NGINX_IMAGE_TAG}
pids_limit: 10
restart: ${RESTART_POLICY} restart: ${RESTART_POLICY}
read_only: true
tmpfs:
- /var/run
- /var/cache
- /var/log/nginx
volumes: volumes:
- ${NGINX_CONFIG_PATH}:/etc/nginx/conf.d:ro - ${NGINX_CONFIG_PATH}:/etc/nginx/conf.d:ro
- ${NGINX_DHPARAMS_FILE}:/dhparams4096.pem - ${NGINX_DHPARAMS_FILE}:/dhparams4096.pem

View File

@ -1,17 +1,12 @@
# https://docs.docker.com/compose/environment-variables/ # https://docs.docker.com/compose/environment-variables/
version: "2.4" version: "3"
services: services:
postgres: postgres:
container_name: postgres_mattermost container_name: postgres_mattermost
image: postgres:${POSTGRES_IMAGE_TAG} image: postgres:${POSTGRES_IMAGE_TAG}
pids_limit: 10
restart: ${RESTART_POLICY} restart: ${RESTART_POLICY}
read_only: true
tmpfs:
- /tmp
- /var/run/postgresql
volumes: volumes:
- ${POSTGRES_DATA_PATH}:/var/lib/postgresql/data - ${POSTGRES_DATA_PATH}:/var/lib/postgresql/data
environment: environment:
@ -28,11 +23,7 @@ services:
- postgres - postgres
container_name: mattermost container_name: mattermost
image: mattermost/${MATTERMOST_IMAGE}:${MATTERMOST_IMAGE_TAG} image: mattermost/${MATTERMOST_IMAGE}:${MATTERMOST_IMAGE_TAG}
pids_limit: 15
restart: ${RESTART_POLICY} restart: ${RESTART_POLICY}
read_only: true
tmpfs:
- /tmp
volumes: volumes:
- ${MATTERMOST_CONFIG_PATH}:/mattermost/config:rw - ${MATTERMOST_CONFIG_PATH}:/mattermost/config:rw
- ${MATTERMOST_DATA_PATH}:/mattermost/data:rw - ${MATTERMOST_DATA_PATH}:/mattermost/data:rw
@ -58,8 +49,5 @@ services:
# container_name: watchtower # container_name: watchtower
# image: containrrr/watchtower:latest # image: containrrr/watchtower:latest
# restart: unless-stopped # restart: unless-stopped
# read_only: true
# tmpfs:
# - /tmp
# volumes: # volumes:
# - /var/run/docker.sock:/var/run/docker.sock # - /var/run/docker.sock:/var/run/docker.sock