Xavfsiz stack: uch servis, hammasi qulflangan

qiyin

proxy (101:101, 8080:8080) va api root emas; ikkalasi cap_drop: [ALL].
api read_only + tmpfs: [/tmp].
data tarmog'i internal: true; api va db unda; db yopiq.
db paroli tashqaridan.

…

docker-compose.yml

services:
  proxy:
    image: nginx:1.27-alpine
    ports:
      - "80:80"
  api:
    image: python:3.12-alpine
    command: uvicorn app:app --host 0.0.0.0
  db:
    image: postgres:16-alpine
    ports:
      - "5432:5432"
    environment:
      POSTGRES_PASSWORD: pw

✓ YAML to'g'ri · 3 servis

Tab ichkariga · Shift+Tab tashqariga⌘/Ctrl+Enter tekshirishEsc maydondan chiqish

3 servis · 0 tarmoq · 0 volume · tuzilma toza

✓ Compose e'tiroz bildiradigan narsa topilmadi. Vazifa talablari esa serverda, ishga tushirganda tekshiriladi.

Servislar 3

nginx:1.27-alpine

portlar: 0.0.0.0:80 → 80/tcp
healthcheck: yo'q
restart: no (standart)
user: root (standart)
tarmoq: default

python:3.12-alpine

portlar: chiqarilmagan — faqat ichki tarmoq
healthcheck: yo'q
restart: no (standart)
user: root (standart)
tarmoq: default

postgres:16-alpine

portlar: 0.0.0.0:5432 → 5432/tcp
healthcheck: yo'q
restart: no (standart)
user: root (standart)
tarmoq: default

Ishga tushish tartibi

proxyhech kimni kutmaydi
apihech kimni kutmaydi
dbhech kimni kutmaydi