poprhythm
2f1a988ac3
- watchtower: move Telegram token/chat ID to .env instead of plaintext in compose - plex: remove stale/dead PLEX_CLAIM token - uptime-kuma: mount docker.sock read-only (only needs to read container state) - home-assistant: drop privileged: true (no device passthrough configured) - glances: drop privileged: true, bind dashboard port to 127.0.0.1 - couchdb, docker-registry, leafweb: bind ports to 127.0.0.1 (proxy/localhost-only access confirmed, no direct LAN clients)
15 lines
482 B
YAML
15 lines
482 B
YAML
services:
|
|
watchtower:
|
|
image: nickfedor/watchtower
|
|
container_name: watchtower
|
|
volumes:
|
|
- /var/run/docker.sock:/var/run/docker.sock
|
|
- /root/.docker/config.json:/config.json:ro
|
|
environment:
|
|
- WATCHTOWER_POLL_INTERVAL=300
|
|
- WATCHTOWER_CLEANUP=true
|
|
- WATCHTOWER_NOTIFICATION_URL=telegram://${TELEGRAM_BOT_TOKEN}@telegram?chats=${TELEGRAM_CHAT_ID}
|
|
labels:
|
|
- com.centurylinklabs.watchtower.enable=false
|
|
restart: unless-stopped
|