9d3f8e46a0
- Add Dockerfile with MediaInfo, non-root user, slim base - Add docker-compose.yml with env_file and volume mounts - Add nginx.conf with security headers (CSP, HSTS, X-Frame-Options, X-Content-Type-Options) - Hide server version (server_tokens off) - Add SECURITY.md with full audit report and deployment guide - Add .dockerignore for clean builds Closes #11, #14, #21, #22
23 lines
473 B
YAML
23 lines
473 B
YAML
version: "3.8"
|
|
|
|
services:
|
|
episode-matcher:
|
|
build:
|
|
context: .
|
|
dockerfile: Dockerfile
|
|
image: episode-matcher:latest
|
|
env_file:
|
|
- .env
|
|
environment:
|
|
- TVDB_API_KEY=${TVDB_API_KEY}
|
|
volumes:
|
|
- ./config.json:/app/config.json:ro
|
|
- ./src/.tvdb_cache:/app/src/.tvdb_cache
|
|
working_dir: /app
|
|
command: >
|
|
episode_matcher.py
|
|
${FOLDER_PATH:-/data}
|
|
${SHOW_NAME}
|
|
${SEASON_NUMBER}
|
|
${EXTRA_ARGS:-}
|