feat: new template "rancher-bench-security" (#188)

2016-06-23 00:57:10 +02:00
parent 008cf13d19
commit 3d3355ce0d
5 changed files with 86 additions and 0 deletions
@@ -0,0 +1,34 @@
+rancher-bench-security:
+  image: germanramos/rancher-bench-security:1.11.0
+  labels:
+    io.rancher.container.pull_image: always
+    io.rancher.scheduler.global: 'true'
+    io.rancher.scheduler.affinity:container_label_ne: io.rancher.stack_service.name=$${stack_name}/$${service_name}
+    io.rancher.container.hostname_override: container_name
+  net: host
+  pid: host
+  stdin_open: true
+  tty: true
+  volumes:
+    - /var/lib:/var/lib
+    - /var/run/docker.sock:/var/run/docker.sock
+    - /usr/lib/systemd:/usr/lib/systemd
+    - /etc:/etc
+    - /tmp:/tmp
+  environment:
+    - INTERVAL=${INTERVAL}
+
+web-server:
+  image: germanramos/nginx-php-fpm:v5.6.21
+  stdin_open: true
+  tty: true
+  labels:
+    traefik.enable: stack
+    traefik.domain: ${TRAEFIK_DOMAIN}
+    traefik.port: 80
+    io.rancher.container.pull_image: always
+    io.rancher.scheduler.global: 'true'
+    io.rancher.scheduler.affinity:container_label_ne: io.rancher.stack_service.name=$${stack_name}/$${service_name}
+    io.rancher.container.hostname_override: container_name
+  volumes:
+    - /tmp/cis:/var/www/html