Law/docker-compose.prod.yml
2026-03-02 17:18:10 +03:00

87 lines
1.6 KiB
YAML

services:
edge:
image: caddy:2.8.4-alpine
container_name: law-edge
restart: unless-stopped
read_only: true
security_opt:
- no-new-privileges:true
tmpfs:
- /tmp
depends_on:
frontend:
condition: service_healthy
ports:
- "80:80"
- "443:443"
volumes:
- ./deploy/caddy/Caddyfile:/etc/caddy/Caddyfile:ro
- caddy_data:/data
- caddy_config:/config
frontend:
ports: []
read_only: true
security_opt:
- no-new-privileges:true
volumes:
- ./frontend/nginx.prod.conf:/etc/nginx/conf.d/default.conf:ro
- ./deploy/tls/minio/ca.crt:/etc/nginx/minio-ca.crt:ro
tmpfs:
- /var/cache/nginx
- /var/run
- /tmp
backend:
ports: []
volumes:
- ./deploy/tls/minio/ca.crt:/etc/ssl/minio/ca.crt:ro
security_opt:
- no-new-privileges:true
db:
ports: []
redis:
ports: []
minio:
ports: []
volumes:
- miniodata:/data
- ./deploy/tls/minio:/root/.minio/certs:ro
chat-service:
volumes: []
security_opt:
- no-new-privileges:true
email-service:
volumes: []
security_opt:
- no-new-privileges:true
worker:
volumes:
- ./deploy/tls/minio/ca.crt:/etc/ssl/minio/ca.crt:ro
security_opt:
- no-new-privileges:true
beat:
volumes: []
security_opt:
- no-new-privileges:true
security-scheduler:
volumes:
- ./reports:/app/reports
security_opt:
- no-new-privileges:true
# Production: keep official ClamAV image on x86_64 hosts.
clamav:
platform: linux/amd64
volumes:
caddy_data:
caddy_config: