ArcticFoxes-net/Signal-TLS-Proxy
1
0
Fork 0
mirror of https://github.com/ArcticFoxes-net/Signal-TLS-Proxy synced 2024-11-17 17:41:32 -05:00
Code

Fix privileges, remove read_only

Browse Source 
Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
Tommy 2022-09-25 16:08:35 -04:00
parent 8d34521b58
commit 487810f259
No known key found for this signature in database
GPG Key ID: 060B29EB996BD9F2
1 changed files with 5 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
docker-compose.yml
View File

@ -8,7 +8,6 @@ services:
- ./data/nginx-terminate/nginx.conf:/etc/nginx/nginx.conf:Z - ./data/nginx-terminate/nginx.conf:/etc/nginx/nginx.conf:Z
- ./data/certbot/conf:/etc/letsencrypt:Z - ./data/certbot/conf:/etc/letsencrypt:Z
- ./data/certbot/www:/var/www/certbot:Z - ./data/certbot/www:/var/www/certbot:Z
read_only: true
ports: ports:
- "443:443" - "443:443"
- "80:80" - "80:80"
@ -19,21 +18,20 @@ services:
cap_add: cap_add:
- CAP_NET_BIND_SERVICE - CAP_NET_BIND_SERVICE
- CHOWN - CHOWN
tmpfs: - SETUID
- /var/run:size=50M,mode=0770,noexec,nosuid,nodev - SETGID
- /var/cache/nginx:size=50M,mode=0770,noexec,nosuid,nodev
nginx-relay: nginx-relay:
image: nginx:alpine image: nginx:alpine
restart: unless-stopped restart: unless-stopped
volumes: volumes:
- ./data/nginx-relay/nginx.conf:/etc/nginx/nginx.conf:Z - ./data/nginx-relay/nginx.conf:/etc/nginx/nginx.conf:Z
read_only: true
security_opt: security_opt:
- no-new-privileges:true - no-new-privileges:true
cap_drop: cap_drop:
- ALL - ALL
tmpfs: cap_add:
- /var/run:size=50M,mode=0770,noexec,nosuid,nodev - SETUID
- SETGID
certbot: certbot:
image: certbot/certbot image: certbot/certbot
restart: unless-stopped restart: unless-stopped