clean config, support read-only non-root docker

Signed-off-by: ngn <ngn@ngn.tf>
2025-07-11 15:33:40 +03:00
parent 16f954f1e5
commit 54b3588c3a
12 changed files with 300 additions and 539 deletions
--- a/compose.example.yml
+++ b/compose.example.yml
@ -0,0 +1,18 @@
+services:
+  fourget:
+    container_name: 4get
+    image: git.ngn.tf/ngn/4get
+    ports:
+      - 80:8080
+    volumes:
+      - ./config.php:/srv/4get/data/config.php:ro
+      - ./banners:/srv/4get/banner:ro
+      - ./captcha:/srv/4get/data/captcha:ro
+      - type: tmpfs
+        target: /tmp/icons
+    cap_drop:
+      - ALL
+    security_opt:
+      - no-new-privileges:true
+    read_only: true
+    restart: unless-stopped