Sir va huquq — bitta auditda

qiyin

db paroli secrets orqali (db_password, POSTGRES_PASSWORD_FILE).
api da DEBUG yo'q, SECRET_KEY tashqaridan.
api root emas, cap_drop: [ALL].

…

docker-compose.yml

services:
  api:
    image: python:3.12-alpine
    environment:
      DEBUG: "true"
      SECRET_KEY: abc
  db:
    image: postgres:16-alpine
    environment:
      POSTGRES_PASSWORD: abc

✓ YAML to'g'ri · 2 servis

Tab ichkariga · Shift+Tab tashqariga⌘/Ctrl+Enter tekshirishEsc maydondan chiqish

2 servis · 0 tarmoq · 0 volume · tuzilma toza

✓ Compose e'tiroz bildiradigan narsa topilmadi. Vazifa talablari esa serverda, ishga tushirganda tekshiriladi.

Servislar 2

python:3.12-alpine

portlar: chiqarilmagan — faqat ichki tarmoq
healthcheck: yo'q
restart: no (standart)
user: root (standart)
tarmoq: default

postgres:16-alpine

portlar: chiqarilmagan — faqat ichki tarmoq
healthcheck: yo'q
restart: no (standart)
user: root (standart)
tarmoq: default

Ishga tushish tartibi

apihech kimni kutmaydi
dbhech kimni kutmaydi