31 lines
1.4 KiB
YAML
31 lines
1.4 KiB
YAML
services:
|
|
dockwatch:
|
|
build: .
|
|
restart: unless-stopped
|
|
ports: ["8080:8080"]
|
|
environment:
|
|
APP_MODE: standalone
|
|
BASE_URL: "${BASE_URL:-http://localhost:8080}"
|
|
AUTH_DISABLED: "${AUTH_DISABLED:-true}"
|
|
APP_SECRET: "${APP_SECRET:-change-this-development-secret-please-123456}"
|
|
OIDC_ISSUER: "${OIDC_ISSUER:-}"
|
|
OIDC_CLIENT_ID: "${OIDC_CLIENT_ID:-}"
|
|
OIDC_CLIENT_SECRET: "${OIDC_CLIENT_SECRET:-}"
|
|
OIDC_ADMIN_GROUP: "${OIDC_ADMIN_GROUP:-dockwatch-admins}"
|
|
OIDC_OPERATOR_GROUP: "${OIDC_OPERATOR_GROUP:-dockwatch-operators}"
|
|
CHECK_CONCURRENCY: "${CHECK_CONCURRENCY:-8}"
|
|
CHECK_RETENTION_DAYS: "${CHECK_RETENTION_DAYS:-30}"
|
|
HTTP_TIMEOUT_SECONDS: "${HTTP_TIMEOUT_SECONDS:-10}"
|
|
AUDIT_RETENTION_DAYS: "${AUDIT_RETENTION_DAYS:-180}"
|
|
HOST_ROOT: "${HOST_ROOT:-}"
|
|
ALLOW_HOST_USER_MANAGEMENT: "${ALLOW_HOST_USER_MANAGEMENT:-false}"
|
|
ALLOW_HOST_PERMISSION_MANAGEMENT: "${ALLOW_HOST_PERMISSION_MANAGEMENT:-false}"
|
|
HOST_SECURITY_ENABLED: "${HOST_SECURITY_ENABLED:-false}"
|
|
ALLOW_HOST_SECURITY_CHANGES: "${ALLOW_HOST_SECURITY_CHANGES:-false}"
|
|
ALLOW_HOST_PACKAGE_MANAGEMENT: "${ALLOW_HOST_PACKAGE_MANAGEMENT:-false}"
|
|
HOST_SECURITY_HOST_PID: "${HOST_SECURITY_HOST_PID:-1}"
|
|
volumes:
|
|
- ./data:/data
|
|
- ./stacks:/stacks
|
|
- /var/run/docker.sock:/var/run/docker.sock
|