feat: fix gvisor for radicale, add isolated networks for jellyfin / radicale
This commit is contained in:
parent
b7a31a899c
commit
bed7bcf4fd
7 changed files with 31 additions and 8 deletions
|
|
@ -6,19 +6,19 @@ ContainerName=radicale
|
|||
RunInit=true
|
||||
DropCapability=ALL
|
||||
AddCapability=SETUID SETGID CHOWN KILL
|
||||
Image=docker.io/tomsquest/docker-radicale
|
||||
Network=frontend.network
|
||||
Image=docker.io/tomsquest/docker-radicale:latest
|
||||
Network=radicale.network
|
||||
Volume=/srv/radicale/config:/config:Z,ro
|
||||
Volume=/srv/radicale/data:/data:Z
|
||||
#PodmanArgs=--runtime runsc --security-opt label:disable
|
||||
#Label=disable
|
||||
PodmanArgs=--runtime runsc --security-opt label:disable
|
||||
Label=disable
|
||||
AutoUpdate=registry
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target default.target
|
||||
|
||||
[Service]
|
||||
TasksMax=50
|
||||
MemoryHigh=256M
|
||||
TasksMax=100
|
||||
MemoryHigh=512M
|
||||
Restart=always
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue