poprhythm
2f1a988ac3
- watchtower: move Telegram token/chat ID to .env instead of plaintext in compose - plex: remove stale/dead PLEX_CLAIM token - uptime-kuma: mount docker.sock read-only (only needs to read container state) - home-assistant: drop privileged: true (no device passthrough configured) - glances: drop privileged: true, bind dashboard port to 127.0.0.1 - couchdb, docker-registry, leafweb: bind ports to 127.0.0.1 (proxy/localhost-only access confirmed, no direct LAN clients)
23 lines
531 B
YAML
23 lines
531 B
YAML
services:
|
|
uptime-kuma:
|
|
image: louislam/uptime-kuma:2
|
|
container_name: uptime-kuma
|
|
restart: unless-stopped
|
|
volumes:
|
|
- /srv/uptime-kuma/data:/app/data
|
|
- /var/run/docker.sock:/var/run/docker.sock:ro
|
|
environment:
|
|
- TZ=America/New_York
|
|
- VIRTUAL_HOST=uptime.kolpacksoftware.com
|
|
- VIRTUAL_PORT=3001
|
|
- LETSENCRYPT_HOST=uptime.kolpacksoftware.com
|
|
networks:
|
|
- npm-network
|
|
- mqtt-network
|
|
|
|
networks:
|
|
npm-network:
|
|
external: true
|
|
mqtt-network:
|
|
external: true
|