diff --git a/telemt/docker-compose.yaml b/telemt/docker-compose.yaml new file mode 100644 index 0000000..a281b93 --- /dev/null +++ b/telemt/docker-compose.yaml @@ -0,0 +1,51 @@ +services: + telemt: + image: whn0thacked/telemt-docker:latest + container_name: telemt + restart: unless-stopped + + # Telemt uses RUST_LOG for verbosity (optional) + environment: + RUST_LOG: "info" + + # Telemt reads config from CMD (default: /etc/telemt.toml) + volumes: + - ./telemt.toml:/etc/telemt.toml:ro + + ports: + - "443:443/tcp" + # If you enable metrics_port=9090 in config: + # - "127.0.0.1:9090:9090/tcp" + + # Hardening + security_opt: + - no-new-privileges:true + cap_drop: + - ALL + cap_add: + - NET_BIND_SERVICE + read_only: true + tmpfs: + - /tmp:rw,nosuid,nodev,noexec,size=16m + + # Resource limits (optional) + deploy: + resources: + limits: + cpus: "0.50" + memory: 256M + reservations: + cpus: "0.25" + memory: 128M + + # File descriptor limits (critical for a high-load server!) + ulimits: + nofile: + soft: 65536 + hard: 65536 + + logging: + driver: json-file + options: + max-size: "10m" + max-file: "3" \ No newline at end of file