Commit Graph
9 Commits
Author SHA1 Message Date
poprhythm 2f1a988ac3 security: remove hardcoded secrets, drop unneeded privileged mode, restrict internal-only ports to localhost
- watchtower: move Telegram token/chat ID to .env instead of plaintext in compose
- plex: remove stale/dead PLEX_CLAIM token
- uptime-kuma: mount docker.sock read-only (only needs to read container state)
- home-assistant: drop privileged: true (no device passthrough configured)
- glances: drop privileged: true, bind dashboard port to 127.0.0.1
- couchdb, docker-registry, leafweb: bind ports to 127.0.0.1 (proxy/localhost-only access confirmed, no direct LAN clients)
2026-07-20 01:49:56 +00:00
poprhythm cb17443ab6 couchdb: mount local.ini for persistent CORS config (entrypoint chowns config files, :ro breaks startup) 2026-04-26 23:39:08 +00:00
poprhythm 98d64139fe couchdb: mount persistent CORS config to survive container updates 2026-04-26 23:20:59 +00:00
poprhythm a76803a4ea Update couchdb/docker-compose.yml 2026-01-09 19:29:26 +00:00
poprhythm 9f1626b5c3 Update couchdb/docker-compose.yml 2026-01-09 19:27:28 +00:00
poprhythm a2bb987ea5 Update couchdb/docker-compose.yml 2026-01-09 19:22:24 +00:00
poprhythm 7153f1cd5e Update couchdb/docker-compose.yml 2026-01-09 19:08:29 +00:00
poprhythm 9691e50075 Update couchdb/docker-compose.yml 2026-01-09 19:06:14 +00:00
poprhythm 6d7567acee Add couchdb/docker-compose.yml 2026-01-09 18:57:06 +00:00