website/compose.yaml
2025-02-19 12:07:30 +01:00

75 lines
1.4 KiB
YAML

services:
minishell:
container_name: "minishell"
restart: always
build:
context: ./minishell
dockerfile: Dockerfile
cap_drop:
- ALL
cap_add:
- SETGID
- FSETID
- SETUID
# Prevents gaining new privileges
devices:
- /dev/kvm
security_opt:
- no-new-privileges
networks:
website_net:
ipv4_address: "88.88.5.2"
nginx-site:
container_name: "nginx-site"
restart: always
build:
context: ./nginx
dockerfile: Dockerfile
volumes:
- ./nginx/nginx.conf:/etc/nginx/nginx.conf
- ./certbot/conf:/etc/letsencrypt:ro
- ./certbot/www:/var/www/certbot:ro
networks:
website_net:
ipv4_address: "88.88.5.1"
ports:
- 80:80
- 443:443
certbot:
image: certbot/certbot
container_name: "certbot-site"
volumes:
- ./certbot/conf:/etc/letsencrypt:rw
- ./certbot/www/:/var/www/certbot/:rw
command: certonly --webroot --webroot-path /var/www/certbot --force-renewal --email victorvobis@protonmail.com -d remoteserver.vps.webdock.cloud --agree-tos
website:
container_name: "site"
restart: always
build:
context: ./vvsite
dockerfile: Dockerfile
networks:
website_net:
ipv4_address: "88.88.5.3"
networks:
website_net:
# external: false
# internal: true
driver: bridge
ipam:
config:
- subnet: "88.88.0.0/21"