refactor: move stack into hermes-stack/ subdir, clean root

2026-08-07 08:14:14 +08:00
parent 00aa4bf6cb
commit 2f891853d5
12 changed files with 75 additions and 110 deletions
@@ -0,0 +1,44 @@
+services:
+  camofox:
+    build: ../../src/camofox
+    container_name: hermes-camofox
+    restart: unless-stopped
+    ports:
+      - "127.0.0.1:9377:9377"
+    networks:
+      - hermes-net
+    environment:
+      - CAMOFOX_PORT=9377
+      - CAMOFOX_REWRITE_LOOPBACK_URLS=true
+      - CAMOFOX_LOOPBACK_HOST_ALIAS=host.docker.internal
+    volumes:
+      - ../../volumes/camofox/browser:/home/browser/.camoufox:rw
+      - ../../volumes/shared:/shared:rw
+    cap_drop:
+      - ALL
+    cap_add:
+      - SYS_ADMIN
+      - NET_ADMIN
+      - NET_RAW
+      - CHOWN
+      - SETGID
+      - SETUID
+      - DAC_OVERRIDE
+      - FOWNER
+    shm_size: 2gb
+    logging:
+      driver: json-file
+      options:
+        max-size: 10m
+        max-file: 3
+    healthcheck:
+      test: ["CMD", "wget", "-qO-", "http://localhost:9377/health"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 15s
+
+networks:
+  hermes-net:
+    name: hermes-net
+    driver: bridge
@@ -0,0 +1,38 @@
+services:
+  searxng:
+    image: searxng/searxng:latest
+    container_name: hermes-searxng
+    restart: unless-stopped
+    ports:
+      - "127.0.0.1:8964:8080"
+    networks:
+      - hermes-net
+    volumes:
+      - ../../volumes/searxng/config:/etc/searxng:rw
+      - ../../volumes/searxng/data:/etc/searxng/data:rw
+    environment:
+      - SEARXNG_BASE_URL=http://localhost:8964/
+      - SEARXNG_SECRET_KEY=${SEARXNG_SECRET_KEY:?err}
+    cap_drop:
+      - ALL
+    cap_add:
+      - CHOWN
+      - SETGID
+      - SETUID
+      - DAC_OVERRIDE
+    logging:
+      driver: json-file
+      options:
+        max-size: 10m
+        max-file: 3
+    healthcheck:
+      test: ["CMD", "wget", "-qO-", "http://localhost:8080/"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 10s
+
+networks:
+  hermes-net:
+    name: hermes-net
+    driver: bridge