version: "3.8" services: site-support: image: git.sofus.io/so-rose/site-support:0 user: "5020:5020" cap_drop: - ALL volumes: - /etc/localtime:/etc/localtime:ro - /etc/timezone:/etc/timezone:ro configs: - source: site-support__security.txt target: /public/.well-known/security.txt uid: "5020" gid: "5020" environment: SERVER_PORT: "8787" SERVER_REDIRECT_TRAILING_SLASH: "true" SERVER_LOG_LEVEL: "info" SERVER_LOG_REMOTE_ADDRESS: "false" SERVER_THREADS_MULTIPLIER: "0" ## Use # CPUs SERVER_SECURITY_HEADERS: "true" SERVER_DIRECTORY_LISTING: "false" SERVER_CACHE_CONTROL_HEADERS: "false" ## change when stable? SERVER_COMPRESSION: "true" ## reconsider for small ssg payload SERVER_COMPRESSION_STATIC: "false" ## pre-compress? :) deploy: mode: replicated replicas: 1 # resources: # limits: # cpus: "4.0" # memory: "4G" restart_policy: condition: on-failure delay: 5s max_attempts: 3 window: 120s networks: - mesh_public configs: site-support__security.txt: external: true networks: mesh_public: external: true