mirror of
https://github.com/rcourtman/Pulse.git
synced 2026-09-21 18:53:37 +00:00
courtmanr@gmail.com
9460594667
- Use standard user uid:gid 1000:1000 instead of 100:101 (postfix:crontab) - Add user override in docker-compose.yml to ensure consistent uid:gid - Prevents .env files from having system service account permissions - Addresses critical security concern in issue #109
35 lines
1.2 KiB
YAML
35 lines
1.2 KiB
YAML
services:
|
|
pulse-server:
|
|
# Build context commented out - using pre-built image from Docker Hub
|
|
build:
|
|
context: .
|
|
dockerfile: Dockerfile
|
|
# image: rcourtman/pulse:latest # Use the pre-built image from Docker Hub
|
|
container_name: pulse
|
|
restart: unless-stopped
|
|
user: "1000:1000" # Run as standard user, not system service accounts
|
|
ports:
|
|
# Map container port 7655 to host port 7655
|
|
# You can change the host port (left side) if 7655 is already in use on your host
|
|
- "7655:7655"
|
|
# env_file:
|
|
# NOTE: .env file is now managed by the web UI and stored in persistent volume
|
|
# No need to load from host .env file
|
|
# - .env
|
|
volumes:
|
|
# Persist configuration data to avoid losing settings on container recreation
|
|
# Mount a persistent volume for configuration files
|
|
- pulse_config:/usr/src/app/config
|
|
# Optional: Define networks if needed, otherwise uses default bridge network
|
|
# networks:
|
|
# - pulse_network
|
|
|
|
# Define persistent volumes for configuration and data
|
|
volumes:
|
|
pulse_config:
|
|
driver: local
|
|
|
|
# Optional: Define a network
|
|
# networks:
|
|
# pulse_network:
|
|
# driver: bridge |