Proksi: root'siz, yuqori portda, muzlatilgan

qiyin

user: "101:101", ports: ["8080:8080"].
read_only: true, tmpfs: ["/var/cache/nginx:uid=101,gid=101", "/run:uid=101,gid=101"] — tmpfs standart holda root'ga tegishli (755), uid/gid bo'lmasa nginx u yerga yozolmaydi.
cap_drop: [ALL], no-new-privileges:true.
Konfiguratsiya :ro.

…

docker-compose.yml

services:
  proxy:
    image: nginx:1.27-alpine
    ports:
      - "80:80"
    volumes:
      - nginxconf:/etc/nginx/conf.d
volumes:
  nginxconf:

✓ YAML to'g'ri · 1 servis

Tab ichkariga · Shift+Tab tashqariga⌘/Ctrl+Enter tekshirishEsc maydondan chiqish

1 servis · 0 tarmoq · 1 volume · tuzilma toza

✓ Compose e'tiroz bildiradigan narsa topilmadi. Vazifa talablari esa serverda, ishga tushirganda tekshiriladi.

nginx:1.27-alpine