test2andCursor
7ef408afe7
Introduce Caddy-based reverse proxy with decoy site and DPI masking, plus automatic Let's Encrypt certificate issuance for the panel through Cloudflare API without binding port 443. Co-authored-by: Cursor <cursoragent@cursor.com>
32 lines
794 B
YAML
32 lines
794 B
YAML
services:
|
|
telemt:
|
|
image: ghcr.io/telemt/telemt:latest
|
|
build: .
|
|
container_name: telemt
|
|
restart: unless-stopped
|
|
ports:
|
|
- "443:443"
|
|
- "127.0.0.1:9090:9090"
|
|
- "127.0.0.1:9091:9091"
|
|
# Allow caching 'proxy-secret' in read-only container
|
|
working_dir: /app/conf
|
|
volumes:
|
|
- .:/app/conf:rw
|
|
tmpfs:
|
|
- /run/telemt:rw,mode=1777,size=1m
|
|
environment:
|
|
- RUST_LOG=info
|
|
# Uncomment this line if you want to use host network for IPv6, but bridge is default and usually better
|
|
# network_mode: host
|
|
cap_drop:
|
|
- ALL
|
|
cap_add:
|
|
- NET_BIND_SERVICE # allow binding to port 443
|
|
read_only: false
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
ulimits:
|
|
nofile:
|
|
soft: 65536
|
|
hard: 65536
|