services: vault: # FIXME image name with or without slash? Docker Hub or private registry? With or without *_BUILD_DATE? FIXME image: "registry.example.com/project/vault:${VAULT_BUILD_DATE}-${VAULT_VERSION}" container_name: "vault-${CONTEXT}" networks: vault-default: ulimits: nproc: ${ULIMIT_NPROC-65535} nofile: soft: ${ULIMIT_NPROC-65535} hard: ${ULIMIT_NPROC-65535} extends: file: common-settings.yaml service: common-settings ports: # - "8080:80" volumes: # When changing bind mount locations to real ones remember to # also update "Initial setup" section in README.md. # - /opt/docker-data/vault-${CONTEXT}/vault/data/db:/usr/lib/vault # - /opt/docker-data/vault-${CONTEXT}/vault/data/logs:/var/log/vault # - /opt/docker-data/vault-${CONTEXT}/vault/config:/etc/vault environment: # VAULT_USER: ${VAULT_USER} # VAULT_PASSWORD: ${VAULT_PASSWORD} networks: vault-default: name: vault-${CONTEXT} driver: bridge driver_opts: com.docker.network.enable_ipv6: "false" ipam: driver: default config: - subnet: ${SUBNET}