From 233b5b943ac5dbdd54f4418cda74fa037d8cf6a2 Mon Sep 17 00:00:00 2001
From: terminaldweller <devi@terminaldweller.com>
Date: Tue, 14 Jan 2025 16:13:58 -0500
Subject: using nginx as reverse proxy now

---
 docker-compose.yaml | 44 ++++++++++++++++++++++++++++++++++++++------
 1 file changed, 38 insertions(+), 6 deletions(-)

(limited to 'docker-compose.yaml')

diff --git a/docker-compose.yaml b/docker-compose.yaml
index 54ae340..15b75f7 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -2,15 +2,19 @@ version: "3"
 services:
   icanhazallips:
     image: icanhazallips
+    deploy:
+      resources:
+        limits:
+          memory: 256M
+    logging:
+      driver: "json-file"
+      options:
+        max-size: "100m"
     build:
       context: .
     networks:
-      - mainnet
+      - haznet
     restart: unless-stopped
-    ports:
-      - target: 8080
-        published: 9380
-        mode: host
     entrypoint: ["/icanhazallips/icanhazallips"]
     cap_drop:
       - ALL
@@ -21,6 +25,34 @@ services:
       - APP_READ_TIMEOUT=5
       - APP_WRITE_TIMEOUT=5
       - APP_IDLE_TIMEOUT=5
+  nginx:
+    image: haz_nginx
+    deploy:
+      resources:
+        limits:
+          memory: 256M
+    logging:
+      driver: "json-file"
+      options:
+        max-size: "100m"
+    build:
+      context: .
+      dockerfile: Dockerfile_nginx
+    ports:
+      - "9380:443"
+    networks:
+      - haznet
+    restart: unless-stopped
+    cap_drop:
+      - ALL
+    cap_add:
+      - CHOWN
+      - DAC_OVERRIDE
+      - SETGID
+      - SETUID
+      - NET_BIND_SERVICE
+    volumes:
+      - ./nginx.conf:/etc/nginx/nginx.conf:ro
 networks:
-  mainnet:
+  haznet:
     driver: bridge
-- 
cgit v1.2.3