hackathon-ENGIN/compose.prod.yaml
Jakub Famulski 2 5ebfdc389a
All checks were successful
ENGIN CI / Build, test and smoke (push) Successful in 56s
prod: run container with restricted privileges
2026-08-25 13:16:23 +02:00

32 lines
739 B
YAML

services:
engin:
build:
context: .
target: runtime
image: "engin-console:${ENGIN_IMAGE_TAG:-local}"
restart: unless-stopped
init: true
user: "10001:10001"
ports:
- "${ENGIN_BIND_ADDRESS:-127.0.0.1}:${ENGIN_PORT:-8501}:8501"
environment:
STREAMLIT_BROWSER_GATHER_USAGE_STATS: "false"
XDG_CACHE_HOME: /tmp/.cache
MPLCONFIGDIR: /tmp/matplotlib
read_only: true
tmpfs:
- "/tmp:rw,noexec,nosuid,size=64m,mode=1777"
security_opt:
- "no-new-privileges:true"
cap_drop:
- ALL
pids_limit: 256
mem_limit: 1g
cpus: 2.0
stop_grace_period: 30s
logging:
driver: local
options:
max-size: "10m"
max-file: "3"