mirror of
https://github.com/marcogll/noire_landing.git
synced 2026-03-15 11:25:04 +00:00
- Dockerfile multi-stage con usuario no-root (UID 1001) - docker-compose.yml con seguridad reforzada (read-only, capabilities limitadas) - nginx.conf optimizado con headers de seguridad y puerto 8080 - package.json para build de Tailwind CSS - .dockerignore para optimizar contexto de construcción
23 lines
389 B
YAML
23 lines
389 B
YAML
version: '3.8'
|
|
|
|
services:
|
|
web:
|
|
build:
|
|
context: .
|
|
dockerfile: Dockerfile
|
|
ports:
|
|
- "8080:8080"
|
|
environment:
|
|
- NGINX_PORT=8080
|
|
restart: unless-stopped
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
read_only: true
|
|
tmpfs:
|
|
- /var/cache/nginx
|
|
- /var/run
|
|
cap_drop:
|
|
- ALL
|
|
cap_add:
|
|
- CHOWN
|
|
- NET_BIND_SERVICE |