690421:1536 Update ClamAV
This commit is contained in:
+5
-3
@@ -13,6 +13,8 @@ x-logging: &default_logging
|
||||
max-size: '10m'
|
||||
max-file: '5'
|
||||
|
||||
name: lcbp3-monitoring
|
||||
|
||||
networks:
|
||||
lcbp3:
|
||||
external: true
|
||||
@@ -162,7 +164,7 @@ services:
|
||||
memory: 256M
|
||||
environment:
|
||||
TZ: 'Asia/Bangkok'
|
||||
# H4: cAdvisor binds 8080 ภายใน container — map เป็น 8088 บน host
|
||||
# H4: cAdvisor binds 8080 container map 8088 host
|
||||
ports:
|
||||
- '8088:8080'
|
||||
networks:
|
||||
@@ -212,8 +214,8 @@ services:
|
||||
<<: [*restart_policy, *default_logging]
|
||||
image: grafana/promtail:2.9.0
|
||||
container_name: promtail
|
||||
# L5: รันในฐานะ root เพราะต้องอ่าน /var/lib/docker/containers
|
||||
# ที่ mount เข้ามาแบบ read-only
|
||||
# L5: root /var/lib/docker/containers
|
||||
# mount read-only
|
||||
user: '0:0'
|
||||
deploy:
|
||||
resources:
|
||||
|
||||
+3
-2
@@ -8,7 +8,7 @@
|
||||
# - Registry ใช้ Port 5000 (domain: registry.np-dms.work)
|
||||
# - Portainer ใช้ Port 9443 (domain: portainer.np-dms.work)
|
||||
# ============================================================
|
||||
# 🔒 SECURITY (M6):
|
||||
# SECURITY (M6):
|
||||
# Registry เปิด htpasswd auth (ADR-016)
|
||||
# Prerequisite (ทำครั้งเดียวก่อน deploy):
|
||||
# docker run --rm --entrypoint htpasswd httpd:2 -Bbn \
|
||||
@@ -108,7 +108,8 @@ services:
|
||||
- lcbp3
|
||||
healthcheck:
|
||||
# test: ['CMD', 'wget', '--spider', '-q', 'http://localhost:80/']
|
||||
test: ["CMD-SHELL", "wget --spider -q http://localhost/ || exit 1"]
|
||||
# test: ["CMD-SHELL", "wget --spider -q http://localhost/ || exit 1"]
|
||||
test: ["CMD", "pgrep", "nginx"]
|
||||
interval: 30s
|
||||
timeout: 10s
|
||||
retries: 3
|
||||
|
||||
Reference in New Issue
Block a user