poprhythm
2f1a988ac3
- watchtower: move Telegram token/chat ID to .env instead of plaintext in compose - plex: remove stale/dead PLEX_CLAIM token - uptime-kuma: mount docker.sock read-only (only needs to read container state) - home-assistant: drop privileged: true (no device passthrough configured) - glances: drop privileged: true, bind dashboard port to 127.0.0.1 - couchdb, docker-registry, leafweb: bind ports to 127.0.0.1 (proxy/localhost-only access confirmed, no direct LAN clients)
20 lines
438 B
YAML
20 lines
438 B
YAML
services:
|
|
couchserver:
|
|
image: couchdb
|
|
container_name: couchdb
|
|
restart: always
|
|
ports:
|
|
- "127.0.0.1:5984:5984"
|
|
environment:
|
|
- COUCHDB_USER=admin
|
|
- COUCHDB_PASSWORD=${ADMIN_PASSWORD}
|
|
volumes:
|
|
- /srv/couchdb-data:/opt/couchdb/data
|
|
- /srv/couchdb-config/local.ini:/opt/couchdb/etc/local.ini
|
|
networks:
|
|
- npm-network
|
|
|
|
networks:
|
|
default:
|
|
npm-network:
|
|
external: true |