Gan, Jimmy
3fd045aacb
Deploy Dashboard / deploy (push) Successful in 1m28s
- Narrow trusted proxies, remove overly broad 10.0.0.0/8 - Fail closed on missing SSH known_hosts in terminal proxy - Add Navidrome reverse proxy headers for Authelia SSO - Add Gitea docker-compose definition - Add Caddy configs for NAS and VPS edge proxies - Add dnsmasq split-horizon DNS config - Add security execution plan document
27 lines
690 B
YAML
27 lines
690 B
YAML
services:
|
|
navidrome:
|
|
image: deluan/navidrome:latest
|
|
container_name: navidrome
|
|
restart: unless-stopped
|
|
ports:
|
|
- "4533:4533"
|
|
environment:
|
|
ND_SCANSCHEDULE: 1h
|
|
ND_LOGLEVEL: info
|
|
ND_BASEURL: ""
|
|
ND_REVERSEPROXYUSERHEADER: "Remote-User"
|
|
ND_REVERSEPROXYWHITELIST: "127.0.0.1/32,::1/128,172.16.0.0/12,192.168.0.0/16,10.0.0.0/8"
|
|
healthcheck:
|
|
test: ["CMD", "wget", "-q", "--spider", "http://localhost:4533/ping"]
|
|
interval: 30s
|
|
timeout: 5s
|
|
retries: 3
|
|
volumes:
|
|
- ./data:/data
|
|
- /volume1/music:/music:ro
|
|
logging:
|
|
driver: json-file
|
|
options:
|
|
max-size: "10m"
|
|
max-file: "3"
|