* Refactor carbon-server service in docker-compose.yml to use pre-built image and remove unnecessary build context and volume mounts * Enhance performance and security features: - Update compiler flags for better optimization and security. - Implement MIME type caching for improved response handling. - Introduce worker thread pool for efficient connection management. - Optimize socket settings for low latency and enhanced performance. - Add support for CPU affinity in worker threads. - Implement graceful shutdown for worker threads during cleanup.
40 lines
776 B
YAML
40 lines
776 B
YAML
version: '3.8'
|
|
|
|
services:
|
|
carbon-server:
|
|
image: azreyo/carbon:latest
|
|
container_name: carbon-http-server
|
|
ports:
|
|
- "8080:8080" # HTTP port
|
|
- "8443:8443" # HTTPS port
|
|
environment:
|
|
- TZ=UTC
|
|
- SERVER_NAME=yourdomain.com # Change this to your domain or IP
|
|
restart: unless-stopped
|
|
networks:
|
|
- carbon-net
|
|
# Resource limits
|
|
deploy:
|
|
resources:
|
|
limits:
|
|
cpus: '2'
|
|
memory: 512M
|
|
reservations:
|
|
cpus: '0.5'
|
|
memory: 128M
|
|
# Security options
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
cap_drop:
|
|
- ALL
|
|
cap_add:
|
|
- NET_BIND_SERVICE
|
|
read_only: true
|
|
tmpfs:
|
|
- /tmp
|
|
- /app/log
|
|
|
|
networks:
|
|
carbon-net:
|
|
driver: bridge
|