feat: production-ready domain control dashboard

compose.production.yml

@@ -0,0 +1,39 @@
+name: domain-control
+
+services:
+  dyndns:
+    image: ${DYNDNS_IMAGE:-git.j-mahler.de/admin/domain-control-webinterface-prod}:${IMAGE_TAG:-v1.0.0}
+    restart: unless-stopped
+    init: true
+    stop_grace_period: 20s
+    ports:
+      - "${BIND_ADDRESS:-127.0.0.1}:${WEB_PORT:-8080}:8080"
+    environment:
+      APP_MODE: ${APP_MODE:-https}
+      APP_ADDRESS: :8080
+      APP_DATA_DIR: /data
+      APP_MASTER_KEY_FILE: /run/secrets/dyndns_master_key
+    volumes:
+      - dyndns-data:/data
+    secrets:
+      - dyndns_master_key
+    read_only: true
+    tmpfs:
+      - /tmp:rw,noexec,nosuid,size=16m
+    security_opt:
+      - no-new-privileges:true
+    cap_drop:
+      - ALL
+    logging:
+      driver: json-file
+      options:
+        max-size: 10m
+        max-file: "3"
+
+secrets:
+  dyndns_master_key:
+    file: ${MASTER_KEY_FILE:-./secrets/dyndns_master_key}
+
+volumes:
+  dyndns-data:
+    name: domain-control-data