nextcloud/all-in-one
1
1
Fork 0
mirror of https://github.com/nextcloud/all-in-one.git synced 2025-10-16 02:17:17 +08:00
Code Issues Projects Releases Packages Wiki Activity

make talk container read-only

Browse source 
Signed-off-by: Simon L <szaimen@e.mail.de>
This commit is contained in:
Simon L 2023-06-26 18:11:00 +02:00
parent 6747613a34
commit ab5449f835
4 changed files with 17 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
Containers/talk/Dockerfile
View file

@ -44,12 +44,11 @@ RUN set -ex; \
echo "root:$(openssl rand -base64 12)" | chpasswd; \ echo "root:$(openssl rand -base64 12)" | chpasswd; \
\ \
touch \ touch \
/etc/nats.conf \ /etc/nats.conf; \
/etc/signaling.conf \
/etc/turnserver.conf; \
echo "listen: 127.0.0.1:4222" | tee /etc/nats.conf; \ echo "listen: 127.0.0.1:4222" | tee /etc/nats.conf; \
mkdir -p \ mkdir -p \
/var/tmp \ /var/tmp \
/conf \
/var/lib/turn \ /var/lib/turn \
/var/log/supervisord \ /var/log/supervisord \
/var/run/supervisord; \ /var/run/supervisord; \
@ -57,11 +56,13 @@ RUN set -ex; \
/usr \ /usr \
/etc/janus \ /etc/janus \
/etc/nats.conf \ /etc/nats.conf \
/etc/signaling.conf \
/etc/turnserver.conf \
/var/lib/turn \ /var/lib/turn \
/var/log/supervisord \ /var/log/supervisord \
/var/run/supervisord; /var/run/supervisord; \
chmod 777 -R \
/conf \
/var/run/supervisord \
/var/log/supervisord;
# Set default talk port https://github.com/nextcloud/all-in-one/issues/1011 # Set default talk port https://github.com/nextcloud/all-in-one/issues/1011
ENV TALK_PORT=3478 ENV TALK_PORT=3478

4
Containers/talk/start.sh
View file

@ -20,7 +20,7 @@ IPv4_ADDRESS_TALK="$(dig nextcloud-aio-talk A +short)"
set +x set +x
# Turn # Turn
cat << TURN_CONF > "/etc/turnserver.conf" cat << TURN_CONF > "/conf/turnserver.conf"
listening-port=$TALK_PORT listening-port=$TALK_PORT
fingerprint fingerprint
use-auth-secret use-auth-secret
@ -54,7 +54,7 @@ denied-peer-ip=240.0.0.0-255.255.255.255
TURN_CONF TURN_CONF
# Signling # Signling
cat << SIGNALING_CONF > "/etc/signaling.conf" cat << SIGNALING_CONF > "/conf/signaling.conf"
[http] [http]
listen = 0.0.0.0:8081 listen = 0.0.0.0:8081

4
Containers/talk/supervisord.conf
View file

@ -13,7 +13,7 @@ stdout_logfile=/dev/stdout
stdout_logfile_maxbytes=0 stdout_logfile_maxbytes=0
stderr_logfile=/dev/stderr stderr_logfile=/dev/stderr
stderr_logfile_maxbytes=0 stderr_logfile_maxbytes=0
command=turnserver -c /etc/turnserver.conf command=turnserver -c /conf/turnserver.conf
[program:nats-server] [program:nats-server]
stdout_logfile=/dev/stdout stdout_logfile=/dev/stdout
@ -35,4 +35,4 @@ stdout_logfile=/dev/stdout
stdout_logfile_maxbytes=0 stdout_logfile_maxbytes=0
stderr_logfile=/dev/stderr stderr_logfile=/dev/stderr
stderr_logfile_maxbytes=0 stderr_logfile_maxbytes=0
command=nextcloud-spreed-signaling -config /etc/signaling.conf command=nextcloud-spreed-signaling -config /conf/signaling.conf

6
php/containers.json
View file

@ -332,6 +332,12 @@
], ],
"networks": [ "networks": [
"nextcloud-aio" "nextcloud-aio"
],
"read_only": true,
"tmpfs": [
"/var/log/supervisord",
"/var/run/supervisord",
"/conf"
] ]
}, },
{ {