mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-11-01 02:39:24 +00:00
Kevin Veen-Birkenbach
6a8e0f38d8
- Added security_opt (seccomp=unconfined, apparmor=unconfined) and cap_add (MKNOD, SYS_CHROOT, SETUID, SETGID, FOWNER) to allow Collabora's sandbox (coolmount/systemplate) to mount and chroot properly - Increased resource limits (2 CPUs, 2 GB RAM, 2048 PIDs) to prevent document timeout and OOM issues - Resolves 'coolmount: Operation not permitted' and systemplate performance warnings Refs: https://chatgpt.com/share/68ed03cd-1afc-800f-904e-d1c1cb133914
30 lines
653 B
YAML
30 lines
653 B
YAML
server:
|
|
domains:
|
|
canonical:
|
|
- "collabora.{{ PRIMARY_DOMAIN }}"
|
|
aliases: []
|
|
csp:
|
|
whitelist:
|
|
frame-ancestors:
|
|
- "{{ WEB_PROTOCOL }}://*.{{ PRIMARY_DOMAIN }}"
|
|
flags:
|
|
style-src:
|
|
unsafe-inline: true
|
|
docker:
|
|
services:
|
|
redis:
|
|
enabled: false
|
|
database:
|
|
enabled: false
|
|
collabora:
|
|
image: collabora/code
|
|
version: latest
|
|
name: collabora
|
|
cpus: 2
|
|
mem_reservation: 1g
|
|
mem_limit: 2g
|
|
pids_limit: 2048
|
|
features:
|
|
logout: false
|
|
desktop: true # Just set to allow the iframe to load it
|