audiobookshelf/docker-compose.override.yml at main · mildman1848/audiobookshelf · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
---
# This file provides additional configuration for production/development
# Automatically loaded by docker-compose
#
# ⚠️ IMPORTANT: Windows Docker Desktop Compatibility
# Strict security options (no-new-privileges, cap_drop) cause EPERM errors
# with bind mounts on Windows. These are disabled for cross-platform compatibility.

services:
  audiobookshelf:
    # Resource limits (recommended for production)
    deploy:
      resources:
        limits:
          cpus: '2.0'
          memory: 1G
          pids: 200

    # Temporary filesystems for performance
    tmpfs:
      - /tmp:rw,noexec,nosuid,size=100M
      - /var/tmp:rw,noexec,nosuid,size=50M

    # ⚠️ SECURITY OPTIONS DISABLED FOR WINDOWS COMPATIBILITY
    #
    # On Linux production systems with bind mounts working properly,
    # you may enable these security options:
    #
    # security_opt:
    #   - no-new-privileges:true
    #   - apparmor=docker-default
    #
    # cap_drop:
    #   - ALL
    # cap_add:
    #   - CHOWN       # File ownership changes
    #   - SETUID      # User switching (LinuxServer.io)
    #   - SETGID      # Group switching (LinuxServer.io)
    #   - DAC_OVERRIDE  # File access