diff --git a/vaultwarden/compose.yml b/vaultwarden/compose.yml index e0d35c8..6d181ef 100644 --- a/vaultwarden/compose.yml +++ b/vaultwarden/compose.yml @@ -1,7 +1,7 @@ services: vaultwarden: container_name: vaultwarden - image: ghcr.io/polarix-containers/vaultwarden:latest + image: git.conorz.at/titanz-containers/vaultwarden:latest restart: always volumes: - /home/titanz/vaultwarden:/data:Z @@ -19,9 +19,7 @@ services: - DOMAIN=${DOMAIN} - ROCKET_PORT=8080 - DATABASE_URL=postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_USER} - - YUBICO_CLIENT_ID=82851 - - YUBICO_SECRET_KEY=mLPiA1hxQGOan61RXAtL63xLrLE= - user: "3001:3001" + user: "200003:200003" read_only: true security_opt: - "no-new-privileges=true" @@ -30,7 +28,7 @@ services: postgres: container_name: vaultwarden-postgres - image: ghcr.io/polarix-containers/postgres:17 + image: git.conorz.at/titanz-containers/postgres:17 restart: always volumes: - ./postgres:/var/lib/postgresql/data:Z @@ -41,9 +39,9 @@ services: test: ["CMD", "pg_isready", "-U", "vaultwarden"] interval: 15s timeout: 5s - user: "70:70" + user: "200012:200012" read_only: true tmpfs: - - /var/run/postgresql:size=50M,mode=0770,uid=70,gid=70,noexec,nosuid,nodev + - /var/run/postgresql:size=50M,mode=0770,uid=200012,gid=200012,noexec,nosuid,nodev security_opt: - "no-new-privileges=true"