32 lines
1.1 KiB
YAML
32 lines
1.1 KiB
YAML
services:
|
|
dockwatch-master:
|
|
image: dockwatch:local
|
|
restart: unless-stopped
|
|
ports: ["8080:8080"]
|
|
environment:
|
|
APP_MODE: master
|
|
BASE_URL: "https://dockwatch.example.com"
|
|
APP_SECRET: "replace-with-at-least-32-random-characters"
|
|
AUTH_DISABLED: "false"
|
|
OIDC_ISSUER: "https://id.example.com"
|
|
OIDC_CLIENT_ID: "replace-me"
|
|
OIDC_CLIENT_SECRET: "replace-me"
|
|
OIDC_ADMIN_GROUP: "dockwatch-admins"
|
|
OIDC_OPERATOR_GROUP: "dockwatch-operators"
|
|
CHECK_CONCURRENCY: "8"
|
|
CHECK_RETENTION_DAYS: "30"
|
|
HTTP_TIMEOUT_SECONDS: "10"
|
|
# Optional: set HOST_ROOT=/host and mount /:/host:ro for identity checks.
|
|
HOST_ROOT: ""
|
|
ALLOW_HOST_USER_MANAGEMENT: "false"
|
|
ALLOW_HOST_PERMISSION_MANAGEMENT: "false"
|
|
AUDIT_RETENTION_DAYS: "180"
|
|
volumes:
|
|
- ./master-data:/data
|
|
- ./master-stacks:/stacks
|
|
- /var/run/docker.sock:/var/run/docker.sock
|
|
# For read-only host UID/GID + bind ownership checks:
|
|
# - /:/host:ro
|
|
# For explicit admin host-user creation only: use /:/host:rw and set
|
|
# ALLOW_HOST_USER_MANAGEMENT=true.
|