mirror of
https://github.com/jokob-sk/NetAlertX.git
synced 2026-01-25 07:08:12 -05:00
70 lines
2.3 KiB
YAML
70 lines
2.3 KiB
YAML
services:
|
|
netalertx:
|
|
# Missing capabilities configuration for testing
|
|
network_mode: ${NETALERTX_NETWORK_MODE:-host}
|
|
build:
|
|
context: ../../../
|
|
dockerfile: Dockerfile
|
|
image: netalertx-test
|
|
container_name: netalertx-test-missing-caps
|
|
read_only: true
|
|
cap_drop:
|
|
- ALL # Drop all capabilities to test missing capabilities scenario
|
|
|
|
volumes:
|
|
- type: volume
|
|
source: netalertx_data
|
|
target: /data
|
|
read_only: false
|
|
|
|
- type: bind
|
|
source: /etc/localtime
|
|
target: /etc/localtime
|
|
read_only: true
|
|
|
|
environment:
|
|
LISTEN_ADDR: ${LISTEN_ADDR:-0.0.0.0}
|
|
PORT: ${PORT:-20211}
|
|
APP_CONF_OVERRIDE: ${GRAPHQL_PORT:-20212}
|
|
ALWAYS_FRESH_INSTALL: ${ALWAYS_FRESH_INSTALL:-false}
|
|
NETALERTX_DEBUG: ${NETALERTX_DEBUG:-0}
|
|
# Environment variable: NETALERTX_CHECK_ONLY
|
|
#
|
|
# Purpose: Enables check-only mode for container startup diagnostics and capability testing.
|
|
#
|
|
# When set to 1 (enabled):
|
|
# - Container runs all startup checks and prints diagnostic information
|
|
# - Services are NOT started (container exits after checks complete)
|
|
# - Useful for testing configurations, auditing capabilities, or troubleshooting
|
|
#
|
|
# When set to 0 (disabled):
|
|
# - Normal operation: container starts all services after passing checks
|
|
#
|
|
# Default: 1 in this compose file (check-only mode for testing)
|
|
# Production default: 0 (full startup)
|
|
#
|
|
# Automatic behavior:
|
|
# - May be automatically set by root-entrypoint.sh when privilege drop fails
|
|
# - Triggers immediate exit path in entrypoint.sh after diagnostic output
|
|
#
|
|
# Usage examples:
|
|
# NETALERTX_CHECK_ONLY: 0 # Normal startup with services
|
|
# NETALERTX_CHECK_ONLY: 1 # Check-only mode (exits after diagnostics)
|
|
#
|
|
# Troubleshooting:
|
|
# If container exits immediately after startup checks, verify this variable is set to 0
|
|
# for production deployments. Check container logs for diagnostic output from startup checks.
|
|
NETALERTX_CHECK_ONLY: ${NETALERTX_CHECK_ONLY:-1}
|
|
|
|
mem_limit: 2048m
|
|
mem_reservation: 1024m
|
|
cpu_shares: 512
|
|
pids_limit: 512
|
|
logging:
|
|
driver: "json-file"
|
|
options:
|
|
max-size: "10m"
|
|
max-file: "3"
|
|
|
|
volumes:
|
|
netalertx_data: |