poprhythm
2f1a988ac3
- watchtower: move Telegram token/chat ID to .env instead of plaintext in compose - plex: remove stale/dead PLEX_CLAIM token - uptime-kuma: mount docker.sock read-only (only needs to read container state) - home-assistant: drop privileged: true (no device passthrough configured) - glances: drop privileged: true, bind dashboard port to 127.0.0.1 - couchdb, docker-registry, leafweb: bind ports to 127.0.0.1 (proxy/localhost-only access confirmed, no direct LAN clients)
21 lines
517 B
YAML
21 lines
517 B
YAML
networks:
|
|
default:
|
|
external:
|
|
name: npm-network
|
|
|
|
services:
|
|
homeassistant:
|
|
image: ghcr.io/home-assistant/home-assistant:stable
|
|
container_name: home-assistant
|
|
volumes:
|
|
- /srv/home-assistant:/config
|
|
- /etc/localtime:/etc/localtime:ro
|
|
environment:
|
|
- PUID=1000
|
|
- PGID=1000
|
|
- TZ=America/New_York
|
|
- VIRTUAL_HOST=homeassistant.kolpacksoftware.com
|
|
- VIRTUAL_PORT=8123
|
|
- LETSENCRYPT_HOST=homeassistant.kolpacksoftware.com
|
|
restart: unless-stopped
|