GitHub宝藏项目！TREK，五一出游必备的智能旅行规划神器

1
services:
2
  app:
3
    image: mauriceboe/trek:latest
4
    container_name: trek
5
    read_only: true
6
    security_opt:
7
      - no-new-privileges:true
8
    cap_drop:
9
      - ALL
10
    cap_add:
11
      - CHOWN
12
      - SETUID
13
      - SETGID
14
    tmpfs:
15
      - /tmp:noexec,nosuid,size=64m
16
    ports:
17
      - "3000:3000"
18
    environment:
19
      - NODE_ENV=production
20
      - PORT=3000
21
      - ENCRYPTION_KEY=${ENCRYPTION_KEY:-}   # generate with: openssl rand -hex 32
22
      - TZ=${TZ:-UTC}
23
      - LOG_LEVEL=${LOG_LEVEL:-info}
24
      - ALLOWED_ORIGINS=${ALLOWED_ORIGINS:-}
25
      - APP_URL=${APP_URL:-}                 # required for OIDC + email links
26
      # - FORCE_HTTPS=true                   # behind a TLS-terminating proxy
27
      # - TRUST_PROXY=1
28
      # - OIDC_ISSUER=https://auth.example.com
29
      # - OIDC_CLIENT_ID=trek
30
      # - OIDC_CLIENT_SECRET=supersecret
31
      # - OIDC_DISPLAY_NAME=SSO
32
      # - OIDC_ADMIN_CLAIM=groups
33
      # - OIDC_ADMIN_VALUE=app-trek-admins
34
    volumes:
35
      - ./data:/app/data
36
      - ./uploads:/app/uploads
37
    restart: unless-stopped
38
    healthcheck:
39
      test: ["CMD", "wget", "-qO-", "http://localhost:3000/api/health"]
40
      interval: 30s
41
      timeout: 10s
42
      retries: 3
43
      start_period: 15s