enauth/docker-compose.yml at main · arcwiser/enauth · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
services:
  enauth:
    build: .
    container_name: enauth-server
    ports:
      - "8080:8080"
    environment:
      - HOST=0.0.0.0
      - PORT=8080
      - DEBUG=false
      - DB_PATH=/app/data/enauth.db
      - ADMIN_USERNAME=admin
      - ADMIN_PASSWORD=${ADMIN_PASSWORD:?Set ADMIN_PASSWORD in .env}
      - LICENSE_LOOKUP_KEY_ID=${LICENSE_LOOKUP_KEY_ID:-v1}
      - LICENSE_LOOKUP_KEY=${LICENSE_LOOKUP_KEY:?Set LICENSE_LOOKUP_KEY in .env}
      - LICENSE_LOOKUP_PREVIOUS_KEYS=${LICENSE_LOOKUP_PREVIOUS_KEYS:-{}}
      - LICENSE_ENCRYPTION_KEY_ID=${LICENSE_ENCRYPTION_KEY_ID:-v1}
      - LICENSE_ENCRYPTION_KEY=${LICENSE_ENCRYPTION_KEY:?Set LICENSE_ENCRYPTION_KEY in .env}
      - LICENSE_ENCRYPTION_PREVIOUS_KEYS=${LICENSE_ENCRYPTION_PREVIOUS_KEYS:-{}}
      - LICENSE_KEY_PEPPER=${LICENSE_KEY_PEPPER:-}
      - CORS_ORIGINS=${CORS_ORIGINS:-http://localhost:8080}
      - TRUST_PROXY_HEADERS=${TRUST_PROXY_HEADERS:-false}
      - COOKIE_SECURE=${COOKIE_SECURE:-false}
      - ADMIN_SESSION_HOURS=8
      - MAX_PAGE_SIZE=200
      - TEMP_2FA_TTL_MINUTES=5
      - TEMP_2FA_SWEEP_SECONDS=60
      - TIMESTAMP_TOLERANCE=60
      - SESSION_DURATION=86400
      - ALLOW_LEGACY_PROTOCOL=${ALLOW_LEGACY_PROTOCOL:-false}
      - MAX_LOGIN_STRIKES=5
      - NONCE_CACHE_SIZE=10000
      - NONCE_TTL=120
      - RATE_LIMIT_INIT=20
      - RATE_LIMIT_NEWS=15
      - RATE_LIMIT_LOGIN=8
      - RATE_LIMIT_HEARTBEAT=60
      - RATE_LIMIT_LOGOUT=20
      - RATE_LIMIT_VALIDATE=30
      - RATE_LIMIT_DOWNLOAD=10
      - LOG_LEVEL=INFO
      - LOG_FILE=/app/data/server.log
      - LOG_MAX_BYTES=5242880
      - LOG_BACKUP_COUNT=2
    volumes:
      - ./data:/app/data
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:8080/health', timeout=5)"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 5s