-
Notifications
You must be signed in to change notification settings - Fork 2
/
docker-compose.yml
140 lines (134 loc) · 2.43 KB
/
docker-compose.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
#
# MPContainer compose - main options
#
version: '3.7'
services:
# ------ haproxy ------
frontend:
container_name: haproxy
restart: on-failure:5
deploy:
mode: global
replicas: 1
resources:
limits:
memory: 100M
reservations:
memory: 20M
security_opt:
- no-new-privileges
cap_drop:
- setfcap
- net_bind_service
- dac_override
- net_raw
cap_add:
- chown
- dac_override
- setgid
- setuid
ports:
- "3000:3000"
networks:
- webpubnet
- webfrontnet
- webfrontmpd
depends_on:
- backendweb
- mpcpyapp
labels:
kompose.service.type: LoadBalancer
# ------ web ------
backendweb:
container_name: backendweb
restart: on-failure:5
deploy:
resources:
limits:
cpus: '0.50'
memory: 50M
reservations:
memory: 20M
security_opt:
- no-new-privileges
expose:
- "8880"
networks:
- webfrontnet
# ------ MPD ------
backendmpd:
container_name: backendmpd
restart: on-failure:5
deploy:
resources:
limits:
cpus: '0.50'
memory: 100M
reservations:
memory: 20M
volumes:
- ./music/db:/music:ro
security_opt:
- no-new-privileges
cap_drop:
- net_bind_service
- chown
- mknod
- dac_override
expose:
- "6600"
- "3123"
networks:
- webfrontmpd
- mpdadmin
# ------ shell ------
adminmmpd:
container_name: adminshell
restart: on-failure:5
security_opt:
- no-new-privileges
cap_drop:
- fsetid
- setgid
- mknod
- net_bind_service
- dac_override
expose:
- "7681"
networks:
- webfrontnet
- mpdadmin
depends_on:
- backendmpd
# ------ pyapp ------
mpcpyapp:
container_name: mpcpyapp
restart: on-failure:5
security_opt:
- no-new-privileges
cap_drop:
- net_bind_service
- chown
- dac_override
- fsetid
- setgid
expose:
- "8888"
networks:
- webfrontnet
- mpdadmin
depends_on:
- backendmpd
networks:
webpubnet:
internal: false
driver: bridge
webfrontnet:
internal: true
driver: bridge
webfrontmpd:
internal: true
driver: bridge
mpdadmin:
internal: true
driver: bridge