Skip to content

Add docker-compose security hardening#19

Open
las7 wants to merge 1 commit intomainfrom
007-add-docker-compose-security-hardening
Open

Add docker-compose security hardening#19
las7 wants to merge 1 commit intomainfrom
007-add-docker-compose-security-hardening

Conversation

@las7
Copy link
Copy Markdown
Owner

@las7 las7 commented Feb 24, 2026

Summary

  • Add production security hardening to docker-compose.yaml
  • Add resource limits (CPU, memory, pids) for both services
  • Add security hardening: read_only, no-new-privileges, user 1000:1000
  • Add tmpfs for /tmp with size limit
  • Make ports configurable via environment variables
  • Update docs with production defaults and dev customization guide

- Add resource limits (CPU, memory, pids) for both services
- Add security hardening: read_only, no-new-privileges, user 1000:1000
- Add tmpfs for /tmp with size limit
- Make ports configurable via environment variables
- Update docs with production defaults and dev customization guide
@las7 las7 requested a review from ethanbailie as a code owner February 24, 2026 19:40
Copy link
Copy Markdown
Collaborator

@ethanbailie ethanbailie left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Error from read-only permissions on spin-up

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants