raindev11/webtop repository overview

---
version: '3.5'

services:
  webtop:
    image: raindev11/webtop:latest
    container_name: webtop
    hostname: webtop
    restart: unless-stopped
    privileged: true
    security_opt:
      - seccomp:unconfined
    environment:
      - PUID=1000
      - PGID=1000
      - SUBFOLDER=/
      - TITLE=liveLinux
      - RESET_HOME=true
      - DESKTOP_ICONS=false
      - DISABLE_IPV6=true
      # HTTP Basic Auth 사용시 ID/PW
      #- CUSTOM_USER=abc
      #- PASSWORD=abc
    volumes:
      - './data:/config'
      - './docker:/var/lib/docker'
      # 사설 인증서 등록 필요시 사용
      - './certificates:/usr/local/share/ca-certificates'
      # 호스트 도커연동 제외
      #- '/var/run/docker.sock:/var/run/docker.sock'
      # Shared Memory는 호스트와 연동하여 사용
      - '/dev/shm:/dev/shm'
    ports:
      - 3000:3000
      - 3001:3001
    devices:
      - /dev/dri:/dev/dri
    networks:
      - private

networks:
  private:
    name: private

location / {
  proxy_http_version      1.1;
  proxy_set_header        Host $host;
  proxy_set_header        Upgrade $http_upgrade;
  proxy_set_header        Connection "upgrade";
  proxy_set_header        X-Real-IP $remote_addr;
  proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
  proxy_set_header        X-Forwarded-Proto $scheme;
  proxy_set_header        Cookie "";
  proxy_read_timeout      3600s;
  proxy_send_timeout      3600s;
  add_header              'Access-Control-Allow-Origin' '*' always;
  add_header              'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
  add_header              'Access-Control-Allow-Headers' 'Authorization,Content-Type,Accept,Origin,User-Agent,DNT,Cache-Control,X-Mx-ReqToken,Keep-Alive,X-Requested-With,If-Modified-Since';
  add_header              'Access-Control-Allow-Credentials' 'true';
  add_header              'Cross-Origin-Embedder-Policy' 'require-corp';
  add_header              'Cross-Origin-Opener-Policy' 'same-origin';
  add_header              'Cross-Origin-Resource-Policy' 'same-site';
  proxy_pass               http://webtop:3000;
  proxy_buffering          off;
}

location /websockify {
  proxy_http_version      1.1;
  proxy_set_header        Host $host;
  proxy_set_header        Upgrade $http_upgrade;
  proxy_set_header        Connection "upgrade";
  proxy_set_header        X-Real-IP $remote_addr;
  proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
  proxy_set_header        X-Forwarded-Proto $scheme;
  proxy_set_header        Cookie "";
  proxy_read_timeout      3600s;
  proxy_send_timeout      3600s;
  add_header              'Access-Control-Allow-Origin' '*' always;
  add_header              'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
  add_header              'Access-Control-Allow-Headers' 'Authorization,Content-Type,Accept,Origin,User-Agent,DNT,Cache-Control,X-Mx-ReqToken,Keep-Alive,X-Requested-With,If-Modified-Since';
  add_header              'Access-Control-Allow-Credentials' 'true';
  add_header              'Cross-Origin-Embedder-Policy' 'require-corp';
  add_header              'Cross-Origin-Opener-Policy' 'same-origin';
  add_header              'Cross-Origin-Resource-Policy' 'same-site';
  proxy_pass               http://webtop:3000;
  proxy_buffering          off;
}