ProofMesh/docker-compose.yml at main · dingyucanada/ProofMesh · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
services:
  proofmesh:
    build:
      context: .
    ports:
      - "127.0.0.1:8000:8000"
    environment:
      PROOFMESH_HOME: /app
      PROOFMESH_ENV: ${PROOFMESH_ENV:-development}
      PROOFMESH_OPERATOR_TOKEN: ${PROOFMESH_OPERATOR_TOKEN:-}
      PROOFMESH_ORCHESTRATOR_TOKEN: ${PROOFMESH_ORCHESTRATOR_TOKEN:?set PROOFMESH_ORCHESTRATOR_TOKEN}
      PROOFMESH_APPROVER_TOKEN: ${PROOFMESH_APPROVER_TOKEN:?set PROOFMESH_APPROVER_TOKEN}
      PROOFMESH_AUDITOR_TOKEN: ${PROOFMESH_AUDITOR_TOKEN:?set PROOFMESH_AUDITOR_TOKEN}
      PROOFMESH_INTAKE_TOKEN: ${PROOFMESH_INTAKE_TOKEN:?set PROOFMESH_INTAKE_TOKEN}
      PROOFMESH_INVESTIGATOR_TOKEN: ${PROOFMESH_INVESTIGATOR_TOKEN:?set PROOFMESH_INVESTIGATOR_TOKEN}
      PROOFMESH_POLICY_TOKEN: ${PROOFMESH_POLICY_TOKEN:?set PROOFMESH_POLICY_TOKEN}
      PROOFMESH_EXECUTOR_TOKEN: ${PROOFMESH_EXECUTOR_TOKEN:?set PROOFMESH_EXECUTOR_TOKEN}
      PROOFMESH_VERIFIER_TOKEN: ${PROOFMESH_VERIFIER_TOKEN:?set PROOFMESH_VERIFIER_TOKEN}
      PROOFMESH_MEMORY_TOKEN: ${PROOFMESH_MEMORY_TOKEN:?set PROOFMESH_MEMORY_TOKEN}
      PROOFMESH_GATEWAY_TOKEN: ${PROOFMESH_GATEWAY_TOKEN:?set PROOFMESH_GATEWAY_TOKEN}
      PROOFMESH_OPERATOR_TENANTS: ${PROOFMESH_OPERATOR_TENANTS:-acme-cn}
      PROOFMESH_ORCHESTRATOR_TENANTS: ${PROOFMESH_ORCHESTRATOR_TENANTS:-acme-cn}
      PROOFMESH_APPROVER_TENANTS: ${PROOFMESH_APPROVER_TENANTS:-acme-cn}
      PROOFMESH_AUDITOR_TENANTS: ${PROOFMESH_AUDITOR_TENANTS:-acme-cn}
    volumes:
      - proofmesh-var:/app/var
      - proofmesh-artifacts:/app/artifacts
      - proofmesh-trust:/app/config/trust
    read_only: true
    tmpfs:
      - /tmp:size=64m,mode=1777
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
    restart: unless-stopped

volumes:
  proofmesh-var:
  proofmesh-artifacts:
  proofmesh-trust: