gh-proxy/docker-compose.yml at main · prettyleaf/gh-proxy · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
x-common: &common
  ulimits:
    nofile:
      soft: 1048576
      hard: 1048576
  restart: unless-stopped
  networks:
    - nginx-network # Up to you

x-logging: &logging
  logging:
    driver: json-file
    options:
      max-size: 100m
      max-file: 5

x-env: &env
  env_file: .env

services:
  gh-proxy:
    image: ghcr.io/prettyleaf/gh-proxy:latest
    container_name: gh-proxy
    hostname: gh-proxy
    <<: [*common, *logging, *env]
    ports:
      - "127.0.0.1:8899:8899" # Loopback only. nginx is the sole thing that should be able to reach this; publishing on 0.0.0.0 would expose the proxy on a port that bypasses every rate limit and log setting configured in nginx.
    read_only: true
    cap_drop: ["ALL"]
    security_opt: ["no-new-privileges:true"]
    healthcheck:
      test: ["CMD", "/gh-proxy", "healthcheck"]
      interval: 30s
      timeout: 3s
      retries: 3
      start_period: 5s

networks:
  nginx-network:
    name: nginx-network
    driver: bridge
    external: false