Properly isolate networks

Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
Tommy 2022-11-23 06:33:10 -05:00
parent 80a03b6a96
commit 95bb316d7a
No known key found for this signature in database
GPG Key ID: 060B29EB996BD9F2
1 changed files with 12 additions and 4 deletions

View File

@ -26,6 +26,7 @@ services:
- postgres
networks:
- matrix
- postgres
security_opt:
- no-new-privileges:true
cap_drop:
@ -43,7 +44,7 @@ services:
volumes:
- ./schemas:/var/lib/postgresql/data:Z
networks:
- matrix
- postgres
#user: "70:70"
#read_only: true
#security_opt:
@ -61,7 +62,7 @@ services:
volumes:
- ./element/config.json:/app/config.json:Z
networks:
- matrix
- element
read_only: true
security_opt:
- no-new-privileges:true
@ -97,6 +98,8 @@ services:
- 80:80
networks:
- matrix
- element
- mjolnir
pantalaimon:
image: matrixdotorg/pantalaimon:latest
@ -107,7 +110,7 @@ services:
depends_on:
- synapse
networks:
- matrix
- pantalaimon
read_only: true
security_opt:
- no-new-privileges:true
@ -123,7 +126,8 @@ services:
depends_on:
- pantalaimon
networks:
- matrix
- pantalaimon
- mjolnir
read_only: true
security_opt:
- no-new-privileges:true
@ -132,3 +136,7 @@ services:
networks:
matrix:
postgres:
element:
pantalaimon:
mjolnir: