ab050fddd7
- Pin Miniflux to 2.2.19, Gitea to 1.25 (from :latest) - Add security headers (X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy) to all Caddy sites - Add Docker JSON log rotation (10m x 3 files) to all containers - Add SHA256 checksum verification for GoatCounter binary download - Install and configure unattended-upgrades for security patches Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
49 lines
1.1 KiB
YAML
49 lines
1.1 KiB
YAML
services:
|
|
miniflux:
|
|
image: miniflux/miniflux:2.2.19
|
|
restart: unless-stopped
|
|
logging:
|
|
driver: json-file
|
|
options:
|
|
max-size: "10m"
|
|
max-file: "3"
|
|
depends_on:
|
|
db:
|
|
condition: service_healthy
|
|
ports:
|
|
- "127.0.0.1:8080:8080"
|
|
environment:
|
|
DATABASE_URL: "postgres://miniflux:${MINIFLUX_DB_PASSWORD}@db/miniflux?sslmode=disable"
|
|
RUN_MIGRATIONS: "1"
|
|
CREATE_ADMIN: "1"
|
|
ADMIN_USERNAME: "${MINIFLUX_ADMIN_USER}"
|
|
ADMIN_PASSWORD: "${MINIFLUX_ADMIN_PASSWORD}"
|
|
BASE_URL: "https://reader.monotrope.au"
|
|
env_file:
|
|
- .env
|
|
|
|
db:
|
|
image: postgres:16-alpine
|
|
restart: unless-stopped
|
|
logging:
|
|
driver: json-file
|
|
options:
|
|
max-size: "10m"
|
|
max-file: "3"
|
|
volumes:
|
|
- miniflux_db:/var/lib/postgresql/data
|
|
environment:
|
|
POSTGRES_DB: miniflux
|
|
POSTGRES_USER: miniflux
|
|
POSTGRES_PASSWORD: "${MINIFLUX_DB_PASSWORD}"
|
|
env_file:
|
|
- .env
|
|
healthcheck:
|
|
test: ["CMD", "pg_isready", "-U", "miniflux"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 5
|
|
|
|
volumes:
|
|
miniflux_db:
|