mirror of
https://github.com/suitenumerique/meet.git
synced 2026-10-14 00:50:48 +00:00
4854fc0c13
Some containers were being exposed to local networks. Bind them to localhost, to tighten security. Don't apply this binding to LiveKit (exposed on 7880), as we access it using 127.0.0.1.nip.io:7880.
49 lines
1.0 KiB
YAML
49 lines
1.0 KiB
YAML
# Bureautix proxy overrides
|
|
#
|
|
# Builds submitted through the Docker API of the Podman service get none of
|
|
# the proxy variables in their RUN steps. We need to pass the http_proxy explicitly
|
|
# otherwise all connections fail during the build.
|
|
|
|
x-proxy-vars: &proxy-vars
|
|
http_proxy: ${http_proxy:-}
|
|
https_proxy: ${https_proxy:-}
|
|
no_proxy: ${no_proxy:-}
|
|
|
|
services:
|
|
app:
|
|
build:
|
|
args:
|
|
<<: *proxy-vars
|
|
app-dev:
|
|
build:
|
|
args:
|
|
<<: *proxy-vars
|
|
frontend:
|
|
build:
|
|
args:
|
|
<<: *proxy-vars
|
|
metadata-collector-dev:
|
|
build:
|
|
args:
|
|
<<: *proxy-vars
|
|
multi-user-transcriber-dev:
|
|
build:
|
|
args:
|
|
<<: *proxy-vars
|
|
app-summary-dev:
|
|
build:
|
|
args:
|
|
<<: *proxy-vars
|
|
celery-summary-transcribe:
|
|
build:
|
|
args:
|
|
<<: *proxy-vars
|
|
celery-summary-summarize:
|
|
build:
|
|
args:
|
|
<<: *proxy-vars
|
|
# The local proxy listens on 8080 and collides with Keycloak's published admin port.
|
|
keycloak:
|
|
ports: !override
|
|
- "127.0.0.1:8081:8080"
|