mirror of
https://github.com/ArcticFoxes-net/Signal-TLS-Proxy
synced 2024-11-13 15:41:33 -05:00
45 lines
1.1 KiB
YAML
45 lines
1.1 KiB
YAML
version: '3'
|
|
|
|
services:
|
|
nginx-terminate:
|
|
image: nginx:alpine
|
|
restart: unless-stopped
|
|
volumes:
|
|
- ./data/nginx-terminate/nginx.conf:/etc/nginx/nginx.conf:Z
|
|
- ./data/certbot/conf:/etc/letsencrypt:Z
|
|
- ./data/certbot/www:/var/www/certbot:Z
|
|
ports:
|
|
- "443:443"
|
|
- "80:80"
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
cap_drop:
|
|
- ALL
|
|
cap_add:
|
|
- CAP_NET_BIND_SERVICE
|
|
- CHOWN
|
|
- SETUID
|
|
- SETGID
|
|
nginx-relay:
|
|
image: nginx:alpine
|
|
restart: unless-stopped
|
|
volumes:
|
|
- ./data/nginx-relay/nginx.conf:/etc/nginx/nginx.conf:Z
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
cap_drop:
|
|
- ALL
|
|
cap_add:
|
|
- SETUID
|
|
- SETGID
|
|
certbot:
|
|
image: certbot/certbot
|
|
restart: unless-stopped
|
|
volumes:
|
|
- ./data/certbot/conf:/etc/letsencrypt:Z
|
|
- ./data/certbot/www:/var/www/certbot:Z
|
|
entrypoint: "/bin/sh -c 'trap exit TERM; while :; do certbot renew; sleep 12h & wait $${!}; done;'"
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
cap_drop:
|
|
- ALL |