Properly isolate networks

Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
Tommy 2022-11-23 06:33:10 -05:00
parent 80a03b6a96
commit 95bb316d7a
No known key found for this signature in database
GPG Key ID: 060B29EB996BD9F2

View File

@ -26,6 +26,7 @@ services:
- postgres - postgres
networks: networks:
- matrix - matrix
- postgres
security_opt: security_opt:
- no-new-privileges:true - no-new-privileges:true
cap_drop: cap_drop:
@ -43,7 +44,7 @@ services:
volumes: volumes:
- ./schemas:/var/lib/postgresql/data:Z - ./schemas:/var/lib/postgresql/data:Z
networks: networks:
- matrix - postgres
#user: "70:70" #user: "70:70"
#read_only: true #read_only: true
#security_opt: #security_opt:
@ -61,7 +62,7 @@ services:
volumes: volumes:
- ./element/config.json:/app/config.json:Z - ./element/config.json:/app/config.json:Z
networks: networks:
- matrix - element
read_only: true read_only: true
security_opt: security_opt:
- no-new-privileges:true - no-new-privileges:true
@ -97,6 +98,8 @@ services:
- 80:80 - 80:80
networks: networks:
- matrix - matrix
- element
- mjolnir
pantalaimon: pantalaimon:
image: matrixdotorg/pantalaimon:latest image: matrixdotorg/pantalaimon:latest
@ -107,7 +110,7 @@ services:
depends_on: depends_on:
- synapse - synapse
networks: networks:
- matrix - pantalaimon
read_only: true read_only: true
security_opt: security_opt:
- no-new-privileges:true - no-new-privileges:true
@ -123,7 +126,8 @@ services:
depends_on: depends_on:
- pantalaimon - pantalaimon
networks: networks:
- matrix - pantalaimon
- mjolnir
read_only: true read_only: true
security_opt: security_opt:
- no-new-privileges:true - no-new-privileges:true
@ -132,3 +136,7 @@ services:
networks: networks:
matrix: matrix:
postgres:
element:
pantalaimon:
mjolnir: