mirror of
https://github.com/suitenumerique/meet.git
synced 2026-10-01 14:05:07 +02:00
briquetandaleb_the_flash
3f9942a61d
The development stacks now run Garage instead of MinIO which is deprecated. Garage is a bit stricter than MinIO: - key IDs and secrets must be at least 8 and 16 characters long - requests must be signed for its region, so every development env now sets AWS_S3_REGION_NAME=local; - cross-origin requests are denied unless the bucket CORS rules allow them, so a one-shot aws-cli container allows the frontend origin to upload files straight to the bucket.
34 lines
962 B
YAML
34 lines
962 B
YAML
# Rootless Podman override for compose.yml.
|
|
#
|
|
# Rootless Podman maps container UID 0 to the host user and every other
|
|
# container UID to a subuid that owns nothing in the worktree. Meet compose.ymlruns
|
|
# its containers as DOCKER_USER=$(id -u):$(id -g), which would land on such a
|
|
# subuid and make every bind mount effectively read-only.
|
|
#
|
|
# `userns_mode: keep-id` maps the host user to the same UID and GID inside the
|
|
# container instead, so DOCKER_USER keeps its Docker value and files written
|
|
# through a bind mount are owned by the host user on both sides.
|
|
#
|
|
# Only the services that mount the worktree and run as DOCKER_USER are listed.
|
|
|
|
x-keep-id: &keep-id
|
|
userns_mode: keep-id
|
|
|
|
services:
|
|
app-dev:
|
|
<<: *keep-id
|
|
celery-dev:
|
|
<<: *keep-id
|
|
garage:
|
|
<<: *keep-id
|
|
node:
|
|
<<: *keep-id
|
|
crowdin:
|
|
<<: *keep-id
|
|
metadata-collector-dev:
|
|
<<: *keep-id
|
|
multi-user-transcriber-dev:
|
|
<<: *keep-id
|
|
app-summary-dev:
|
|
<<: *keep-id
|