Files
2026-08-26 12:53:27 +03:00

51 lines
1.4 KiB
YAML

services:
proxy:
build: ./proxy
image: git.itqdev.xyz/4x10m/rusgram-proxy:${IMAGE_TAG:-latest}
restart: unless-stopped
ports:
- "38000:5000"
# Внутренние ноды НЕ публикуем на хост вообще.
# Атака #244475: GET :38002/images/16 без auth → флаги из comments.
# Даже 127.0.0.1:38002 опасно, если на боксе крутят туннели/агентов.
static:
build: ./static
image: git.itqdev.xyz/4x10m/rusgram-static:${IMAGE_TAG:-latest}
restart: unless-stopped
expose:
- "5001"
volumes:
- "./website:/app/files"
database:
build: ./database
image: git.itqdev.xyz/4x10m/rusgram-database:${IMAGE_TAG:-latest}
restart: unless-stopped
environment:
RUSGRAM_INTERNAL: "e9b2f6d14a8c7035e1d0a6b8c4f2e7a9"
expose:
- "5002"
volumes:
- "./website:/app/files"
logic:
build: ./logic
image: git.itqdev.xyz/4x10m/rusgram-logic:${IMAGE_TAG:-latest}
restart: unless-stopped
environment:
RUSGRAM_INTERNAL: "e9b2f6d14a8c7035e1d0a6b8c4f2e7a9"
expose:
- "5003"
content:
build: ./content
image: git.itqdev.xyz/4x10m/rusgram-content:${IMAGE_TAG:-latest}
restart: unless-stopped
environment:
RUSGRAM_INTERNAL: "e9b2f6d14a8c7035e1d0a6b8c4f2e7a9"
expose:
- "5004"
volumes:
- "./website:/app/files"