diff --git a/DAV_Containers/Webdav_Server/testing.yaml b/DAV_Containers/Webdav_Server/testing.yaml index c121784..bf3324a 100644 --- a/DAV_Containers/Webdav_Server/testing.yaml +++ b/DAV_Containers/Webdav_Server/testing.yaml @@ -1,48 +1,37 @@ services: webdav: - image: ghcr.io/vaggeliskls/webdav-server:latest + image: ghcr.io/hacdias/webdav:latest + container_name: ${SERVICE_NAME} restart: unless-stopped - container_name: webdav - volumes: - - /srv/docker/Webdav:/var/lib/dav - environment: - # WebDAV Server Configuration - WEBDAV_OPERATIONS=GET OPTIONS PROPFIND - - BASIC_AUTH_ENABLED=true - BASIC_AUTH_REALM=Webdav - BASIC_USERS=${USERNAME} - PASSWORD=${PASSWORD} - # ^ Basic Digest Authentication with users space separated - - # OAUTH Configuration - # Keycloak OIDC configuration - # more options: https://github.com/OpenIDC/mod_auth_openidc - # OAUTH_ENABLED=false - # OIDCProviderMetadataURL="http://keycloak/keycloak-auth/realms/master/.well-known/openid-configuration" - # OIDCRedirectURI="http://my-domain.local/redirect_uri" - # OIDCCryptoPassphrase="randomly_generated_secure_passphrase" - # OIDCClientID="webdav-client" - # OIDCClientSecret="ABC123def456GHI789jkl0mnopqrs" - # OIDCProviderTokenEndpointAuth="client_secret_basic" - # OIDCRemoteUserClaim="preferred_username" - # OIDCScope="openid email profile" - # OIDCXForwardedHeaders="X-Forwarded-Host" - + command: ["-c", "/config.yml"] + user: "1000:1000" + read_only: true + security_opt: + - no-new-privileges:true + cap_drop: + - ALL + pids_limit: 100 + mem_limit: 512m networks: - traefik_network + volumes: + - /srv/docker/webdav/config.yml:/config.yml:ro + - /srv/docker/webdav/data:/data labels: ### Auto create icon on Flame dashboard - flame.type=application - flame.name=${SERVICE_NAME} - flame.url=https://${SERVICE_NAME}.${DOMAIN_NAME} - flame.icon=https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/png/webdav.png - ### Traefik Labels + ### Traefik - traefik.enable=true - - traefik.http.routers.${SERVICE_NAME}-https.tls=true - - traefik.http.routers.${SERVICE_NAME}-https.tls.certresolver=cloudflare - - traefik.http.routers.${SERVICE_NAME}-https.entrypoints=websecure - - traefik.http.routers.${SERVICE_NAME}-https.rule=Host(`${SERVICE_NAME}.${DOMAIN_NAME}`) + - traefik.http.routers.${SERVICE_NAME}.entrypoints=websecure + - traefik.http.routers.${SERVICE_NAME}.rule=Host(`${SERVICE_NAME}.${DOMAIN_NAME}`) + - traefik.http.routers.${SERVICE_NAME}.tls=true + - traefik.http.routers.${SERVICE_NAME}.tls.certresolver=cloudflare + - traefik.http.routers.${SERVICE_NAME}.middlewares=real-ip@file,crowdsec-bouncer@file,rate-limit@file + - traefik.http.routers.${SERVICE_NAME}.service=${SERVICE_NAME} + - traefik.http.services.${SERVICE_NAME}.loadbalancer.server.port=6060 ### Monitor with uptime-kuma - kuma.monitoring.group.name=Docker Containers - kuma.${SERVICE_NAME}.docker.parent_name=monitoring