poprhythm
2f1a988ac3
- watchtower: move Telegram token/chat ID to .env instead of plaintext in compose - plex: remove stale/dead PLEX_CLAIM token - uptime-kuma: mount docker.sock read-only (only needs to read container state) - home-assistant: drop privileged: true (no device passthrough configured) - glances: drop privileged: true, bind dashboard port to 127.0.0.1 - couchdb, docker-registry, leafweb: bind ports to 127.0.0.1 (proxy/localhost-only access confirmed, no direct LAN clients)
36 lines
850 B
YAML
36 lines
850 B
YAML
volumes:
|
|
nas_media:
|
|
external: true
|
|
name: nas_media
|
|
services:
|
|
plex:
|
|
container_name: plex
|
|
image: plexinc/pms-docker
|
|
restart: unless-stopped
|
|
ports:
|
|
- 32400:32400/tcp
|
|
- 3005:3005/tcp
|
|
- 8324:8324/tcp
|
|
- 32469:32469/tcp
|
|
- 1900:1900/udp
|
|
- 32410:32410/udp
|
|
- 32412:32412/udp
|
|
- 32413:32413/udp
|
|
- 32414:32414/udp
|
|
environment:
|
|
- TZ=America/New_York
|
|
- ADVERTISE_IP=http://73.108.236.191:32400/
|
|
- NVIDIA_VISIBLE_DEVICES=all
|
|
- NVIDIA_DRIVER_CAPABILITIES=compute,video,utility
|
|
hostname: Photon
|
|
volumes:
|
|
- /srv/plex:/config
|
|
- /srv/plex-transcode:/transcode
|
|
- nas_media:/data
|
|
deploy:
|
|
resources:
|
|
reservations:
|
|
devices:
|
|
- driver: nvidia
|
|
count: all
|
|
capabilities: [gpu] |