compose.tailnet-control.yml

name: biomodstack-tailnet-control

services:
  tailnet-production-proxy:
    image: nginx@sha256:65645c7bb6a0661892a8b03b89d0743208a18dd2f3f17a54ef4b76fb8e2f2a10
    container_name: biomodstack-tailnet-production-proxy
    network_mode: host
    restart: unless-stopped
    read_only: true
    tmpfs:
      - /var/cache/nginx
      - /var/run
    volumes:
      - ${BMS_TAILNET_PROXY_CONFIG:?set BMS_TAILNET_PROXY_CONFIG to the reviewed absolute config path}:/etc/nginx/conf.d/default.conf:ro
    labels:
      com.biomodstack.tailnet-proxy-owner: compose.core-runtime
      com.biomodstack.tailnet-proxy-config-sha: ${BMS_TAILNET_PROXY_CONFIG_SHA:?set BMS_TAILNET_PROXY_CONFIG_SHA to the reviewed config SHA-256}
    mem_limit: 256m
    memswap_limit: 512m
    pids_limit: 128
    ulimits:
      nofile:
        soft: 4096
        hard: 4096
    logging:
      driver: json-file
      options:
        max-size: 10m
        max-file: "5"