poprhythm
2f1a988ac3
- watchtower: move Telegram token/chat ID to .env instead of plaintext in compose - plex: remove stale/dead PLEX_CLAIM token - uptime-kuma: mount docker.sock read-only (only needs to read container state) - home-assistant: drop privileged: true (no device passthrough configured) - glances: drop privileged: true, bind dashboard port to 127.0.0.1 - couchdb, docker-registry, leafweb: bind ports to 127.0.0.1 (proxy/localhost-only access confirmed, no direct LAN clients)
19 lines
601 B
YAML
19 lines
601 B
YAML
services:
|
|
glances:
|
|
container_name: glances
|
|
image: 'nicolargo/glances:ubuntu-latest-full'
|
|
restart: unless-stopped
|
|
ports:
|
|
- 127.0.0.1:61208-61209:61208-61209
|
|
environment:
|
|
- TZ=${TZ}
|
|
- NVIDIA_VISIBLE_DEVICES=all
|
|
- NVIDIA_DRIVER_CAPABILITIES=compute,utility
|
|
- "GLANCES_OPT=-C /glances/conf/glances.conf -w"
|
|
volumes:
|
|
- '/var/run/docker.sock:/var/run/docker.sock:ro'
|
|
- '/run/user/1000/podman/podman.sock:/run/user/1000/podman/podman.sock:ro'
|
|
- /srv/glances/glances.conf:/glances/conf/glances.conf
|
|
pid: host
|
|
runtime: nvidia
|
|
|