690421:1536 Update ClamAV
CI / CD Pipeline / build (push) Successful in 4m54s
CI / CD Pipeline / deploy (push) Failing after 1m15s

This commit is contained in:
2026-04-21 15:36:59 +07:00
parent 1549098eac
commit 486aca08a8
6 changed files with 48 additions and 147 deletions
@@ -13,6 +13,8 @@ x-logging: &default_logging
max-size: '10m'
max-file: '5'
name: lcbp3-monitoring
networks:
lcbp3:
external: true
@@ -162,7 +164,7 @@ services:
memory: 256M
environment:
TZ: 'Asia/Bangkok'
# H4: cAdvisor binds 8080 ภายใน container map เป็น 8088 บน host
# H4: cAdvisor binds 8080 container map 8088 host
ports:
- '8088:8080'
networks:
@@ -212,8 +214,8 @@ services:
<<: [*restart_policy, *default_logging]
image: grafana/promtail:2.9.0
container_name: promtail
# L5: รันในฐานะ root เพราะต้องอ่าน /var/lib/docker/containers
# ที่ mount เข้ามาแบบ read-only
# L5: root /var/lib/docker/containers
# mount read-only
user: '0:0'
deploy:
resources:
@@ -8,7 +8,7 @@
# - Registry ใช้ Port 5000 (domain: registry.np-dms.work)
# - Portainer ใช้ Port 9443 (domain: portainer.np-dms.work)
# ============================================================
# 🔒 SECURITY (M6):
# SECURITY (M6):
# Registry เปิด htpasswd auth (ADR-016)
# Prerequisite (ทำครั้งเดียวก่อน deploy):
# docker run --rm --entrypoint htpasswd httpd:2 -Bbn \
@@ -108,7 +108,8 @@ services:
- lcbp3
healthcheck:
# test: ['CMD', 'wget', '--spider', '-q', 'http://localhost:80/']
test: ["CMD-SHELL", "wget --spider -q http://localhost/ || exit 1"]
# test: ["CMD-SHELL", "wget --spider -q http://localhost/ || exit 1"]
test: ["CMD", "pgrep", "nginx"]
interval: 30s
timeout: 10s
retries: 3