Tim Kaufmann
c9cdcfd6b3
- Add KILL to cap_add for graceful shutdown with init systems (s6/s6-overlay) - Remove stop_grace_period (no longer needed with CAP_KILL) 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
52 lines
1023 B
YAML
52 lines
1023 B
YAML
services:
|
|
homebridge:
|
|
image: homebridge/homebridge:ubuntu
|
|
container_name: homebridge
|
|
restart: unless-stopped
|
|
|
|
# Security Hardening
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
cap_drop:
|
|
- ALL
|
|
cap_add:
|
|
- KILL
|
|
- CHOWN
|
|
- SETUID
|
|
- SETGID
|
|
- DAC_OVERRIDE
|
|
|
|
# Resource Limits
|
|
deploy:
|
|
resources:
|
|
limits:
|
|
memory: 1G
|
|
cpus: '1.0'
|
|
pids: 200
|
|
reservations:
|
|
memory: 256M
|
|
cpus: '0.25'
|
|
|
|
# macvlan Network - HomeKit mDNS Discovery
|
|
networks:
|
|
docker_macvlan:
|
|
ipv4_address: 10.11.1.243
|
|
|
|
environment:
|
|
- HOMEBRIDGE_CONFIG_UI=1
|
|
- HOMEBRIDGE_CONFIG_UI_PORT=8581
|
|
- TZ=Europe/Berlin
|
|
|
|
# DNS für macvlan - externe + interne Auflösung
|
|
dns:
|
|
- 127.0.0.11 # Docker-intern (Fallback)
|
|
- 10.11.1.1 # Gateway (externe Auflösung)
|
|
|
|
volumes:
|
|
- ./mounts:/homebridge
|
|
|
|
networks:
|
|
docker_macvlan:
|
|
external: true
|
|
name: docker_macvlan
|