OpenReach/docker-compose.yml at master · agentforge-tech/OpenReach · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
services:
  openreach-init:
    image: "${OPENREACH_IMAGE:-codercl/openreach:latest}"
    user: "0:0"
    entrypoint: ["/bin/sh", "-c"]
    command: ["mkdir -p /app/data/monitor /app/logs && chown -R 10001:10001 /app/data /app/logs"]
    volumes:
      - "${OPENREACH_DATA_DIR:-./data}:/app/data"
      - "${OPENREACH_LOG_DIR:-./logs}:/app/logs"
    read_only: true
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    cap_add:
      - CHOWN
    restart: "no"

  openreach:
    image: "${OPENREACH_IMAGE:-codercl/openreach:latest}"
    container_name: openreach
    restart: unless-stopped
    depends_on:
      openreach-init:
        condition: service_completed_successfully
    ports:
      - "${APP_PORT:-8080}:8080"
    environment:
      JAVA_OPTS: "${JAVA_OPTS:--Xms128m -Xmx512m}"
      SERVER_PORT: "8080"
      OPENREACH_LOG_PATH: "/app/logs"
      OPENREACH_CURL_BLOCKED_HOSTS: "${OPENREACH_CURL_BLOCKED_HOSTS:-}"
      OPENREACH_MONITOR_USERNAME: "${OPENREACH_MONITOR_USERNAME:-openreach}"
      OPENREACH_MONITOR_PASSWORD: "${OPENREACH_MONITOR_PASSWORD:-openreach}"
      OPENREACH_MONITOR_STORAGE: "${OPENREACH_MONITOR_STORAGE:-sqlite}"
      OPENREACH_MONITOR_DATA_DIR: "/app/data/monitor"
      OPENREACH_MONITOR_PERSISTENCE_ENABLED: "${OPENREACH_MONITOR_PERSISTENCE_ENABLED:-true}"
      OPENREACH_MONITOR_TRUST_PROXY_HEADERS: "${OPENREACH_MONITOR_TRUST_PROXY_HEADERS:-true}"
      OPENREACH_MONITOR_TRUSTED_PROXY_CIDRS: "${OPENREACH_MONITOR_TRUSTED_PROXY_CIDRS:-127.0.0.1/32,::1/128,172.16.0.0/12}"
    volumes:
      - "${OPENREACH_DATA_DIR:-./data}:/app/data"
      - "${OPENREACH_LOG_DIR:-./logs}:/app/logs"
    read_only: true
    tmpfs:
      - /tmp:size=64m,mode=1777
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL

    logging:
      driver: json-file
      options:
        max-size: "20m"
        max-file: "3"