poprhythm
2f1a988ac3
- watchtower: move Telegram token/chat ID to .env instead of plaintext in compose - plex: remove stale/dead PLEX_CLAIM token - uptime-kuma: mount docker.sock read-only (only needs to read container state) - home-assistant: drop privileged: true (no device passthrough configured) - glances: drop privileged: true, bind dashboard port to 127.0.0.1 - couchdb, docker-registry, leafweb: bind ports to 127.0.0.1 (proxy/localhost-only access confirmed, no direct LAN clients)
10 lines
232 B
YAML
10 lines
232 B
YAML
version: '3.8'
|
|
services:
|
|
sql-server:
|
|
image: mcr.microsoft.com/mssql/server
|
|
container_name: leafweb-sql-server
|
|
environment:
|
|
SA_PASSWORD: ${SA_PASSWORD}
|
|
ACCEPT_EULA: Y
|
|
ports:
|
|
- "127.0.0.1:1433:1433" |