Update docker-compose.yml

This commit is contained in:
dev 2026-09-25 03:29:17 +00:00
parent fe2ffec220
commit 64a3091647

View File

@ -1,54 +1,47 @@
services: services:
monet4: monet4:
build: build:
context: . context: .
dockerfile: Dockerfile dockerfile: Dockerfile
container_name: monet4 container_name: monet4
env_file: env_file:
- .env - .env
environment: environment:
PORT: 5000 PORT: 5000
FLASK_DEBUG: 0 FLASK_DEBUG: 0
CHAT_DB_PATH: /app/data/chat.db CHAT_DB_PATH: /app/data/chat.db
CHAT_UPLOAD_DIR: /app/data/uploads CHAT_UPLOAD_DIR: /app/data/uploads
CHAT_SECRET_KEY_PATH: /app/data/flask_secret.key CHAT_SECRET_KEY_PATH: /app/data/flask_secret.key
CHAT_CLIENT_HASH_KEY_PATH: /app/data/client_hash.key CHAT_CLIENT_HASH_KEY_PATH: /app/data/client_hash.key
SESSION_COOKIE_SECURE: 1 SESSION_COOKIE_SECURE: 1
TRUSTED_PROXY_HOPS: 1 TRUSTED_PROXY_HOPS: 1
GUNICORN_CMD_ARGS: "--worker-tmp-dir /tmp" GUNICORN_CMD_ARGS: "--worker-tmp-dir /tmp"
FLASK_SECRET_KEY: ${FLASK_SECRET_KEY:-} FLASK_SECRET_KEY: ${FLASK_SECRET_KEY:-}
CHAT_CLIENT_HASH_KEY: ${CHAT_CLIENT_HASH_KEY:-} CHAT_CLIENT_HASH_KEY: ${CHAT_CLIENT_HASH_KEY:-}
# VPS2 helper integration
CALLS_BASE: ${CALLS_BASE:-https://calls.backend-3.com}
CALL_HELPER_SHARED_SECRET: ${CALL_HELPER_SHARED_SECRET:-}
CALL_TOKEN_TTL_SECONDS: ${CALL_TOKEN_TTL_SECONDS:-60}
volumes: volumes:
- chat_data:/app/data - chat_data:/app/data
networks: networks:
- privatenet - privatenet
restart: unless-stopped restart: unless-stopped
# read_only: true
read_only: true
tmpfs: tmpfs:
- /tmp:size=64m,mode=1777 - /tmp:size=64m,mode=1777
- /run/gunicorn:size=16m,mode=1777 - /run/gunicorn:size=16m,mode=1777
security_opt: security_opt:
- no-new-privileges:true - no-new-privileges:true
healthcheck: healthcheck:
test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://127.0.0.1:5000/api/csrf', timeout=5).read()"] test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://127.0.0.1:5000/api/csrf', timeout=5).read()"]
interval: 30s interval: 30s
timeout: 5s timeout: 5s
retries: 3 retries: 3
start_period: 20s start_period: 20s
labels: labels:
caddy: money.backend-3.com caddy: money.backend-3.com
caddy.reverse_proxy: "{{upstreams 5000}}" caddy.reverse_proxy: "{{upstreams 5000}}"