From a8e2430e341aa419b39fc9b8c26278d474a26794 Mon Sep 17 00:00:00 2001
From: tmak2002 <torben@tmak2002.dev>
Date: Fri, 26 Jan 2024 17:03:56 +0100
Subject: [PATCH 1/2] use official image

---
 docker-compose.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 9bc02bd..f516409 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -2,7 +2,9 @@ version: "3.8"
 
 services:
   web:
-    build: .
+    image: quay.io/redlib/redlib
+    # quay.io/redlib/redlib:latest-arm # uncomment if you use arm64
+    # quay.io/redlib/redlib:latest-armv7 # uncomment if you use armv7
     restart: always
     container_name: "redlib"
     ports:

From 119b6616391fa6aa393c43b23748f13f13f9b61f Mon Sep 17 00:00:00 2001
From: tmak2002 <torben@tmak2002.dev>
Date: Fri, 26 Jan 2024 17:06:30 +0100
Subject: [PATCH 2/2] add developmemt docker compose file

---
 docker-compose.dev.yml | 27 +++++++++++++++++++++++++++
 1 file changed, 27 insertions(+)
 create mode 100644 docker-compose.dev.yml

diff --git a/docker-compose.dev.yml b/docker-compose.dev.yml
new file mode 100644
index 0000000..6f5a367
--- /dev/null
+++ b/docker-compose.dev.yml
@@ -0,0 +1,27 @@
+# docker-compose -f docker-compose.dev.yml up -d
+version: "3.8"
+
+services:
+  web:
+    build: .
+    restart: always
+    container_name: "redlib"
+    ports:
+      - 8080:8080
+    user: nobody
+    read_only: true
+    security_opt:
+      - no-new-privileges:true
+    cap_drop:
+      - ALL
+    networks:
+      - redlib
+    security_opt:
+      - seccomp="seccomp-redlib.json"
+    healthcheck:
+      test: ["CMD", "wget", "--spider", "-q", "--tries=1", "http://localhost:8080/settings"]
+      interval: 5m
+      timeout: 3s
+
+networks:
+  redlib: