Reboot

redlib/.env

@@ -0,0 +1,9 @@
+# Environment file for docker-compose.yaml
+# Generate new passwords with:
+# openssl rand -hex 32
+
+# Fill in registry
+REGISTRY=
+
+# Redlib
+REDLIB_PORT=

redlib/docker-compose.yaml

@@ -0,0 +1,28 @@
+services:
+
+  redlib:
+    image: ${REGISTRY}/redlib
+    container_name: redlib
+    restart: unless-stopped
+    ports:
+      - ${REDLIB_PORT:-8080}:8080
+    user: nobody
+    read_only: true
+    cap_drop:
+      - ALL
+    environment:
+      REDLIB_DEFAULT_SHOW_NSFW: on
+      REDLIB_DEFAULT_SUBSCRIPTIONS:
+    healthcheck:
+      test: ["CMD", "wget", "--spider", "-q", "--tries=1", "http://localhost:8080/settings"]
+      interval: 5m
+      timeout: 3s
+    security_opt:
+      - no-new-privileges:true
+        # - seccomp=./seccomp-redlib.json
+    networks:
+      - redlib
+
+networks:
+  redlib:
+    external: false