Compare commits
4 commits
Author | SHA1 | Date | |
---|---|---|---|
|
40b8ed8c85 | ||
|
ad44886b40 | ||
|
767f759c08 | ||
|
949698f8d1 |
|
@ -4,7 +4,7 @@ _a simple image hosting service_
|
||||||
## Usage
|
## Usage
|
||||||
### Running
|
### Running
|
||||||
```
|
```
|
||||||
pict-rs 0.2.0-alpha.3
|
pict-rs 0.2.6
|
||||||
|
|
||||||
USAGE:
|
USAGE:
|
||||||
pict-rs [FLAGS] [OPTIONS] --path <path>
|
pict-rs [FLAGS] [OPTIONS] --path <path>
|
||||||
|
@ -54,6 +54,11 @@ $ wget https://git.asonix.dog/asonix/pict-rs/raw/branch/master/docker/prod/docke
|
||||||
$ sudo docker-compose up -d
|
$ sudo docker-compose up -d
|
||||||
```
|
```
|
||||||
|
|
||||||
|
###### Note
|
||||||
|
- pict-rs makes use of the system's temporary folder. This is generally `/tmp` on linux
|
||||||
|
- pict-rs makes use of a default imagemagick security policy at
|
||||||
|
`/usr/local/lib/ImageMagick-$VERSION/config-Q16HDRI/policy.xml`
|
||||||
|
|
||||||
#### Docker Development
|
#### Docker Development
|
||||||
The development system loads a rust environment inside a docker container with the neccessary
|
The development system loads a rust environment inside a docker container with the neccessary
|
||||||
dependencies already present
|
dependencies already present
|
||||||
|
|
|
@ -0,0 +1,20 @@
|
||||||
|
<policymap>
|
||||||
|
<policy domain="resource" name="memory" value="256MiB" />
|
||||||
|
<policy domain="resource" name="list-length" value="32" />
|
||||||
|
<policy domain="resource" name="width" value="10KP" />
|
||||||
|
<policy domain="resource" name="height" value="10KP" />
|
||||||
|
<policy domain="resource" name="map" value="512MiB" />
|
||||||
|
<policy domain="resource" name="area" value="16KP" />
|
||||||
|
<policy domain="resource" name="disk" value="1GiB" />
|
||||||
|
<policy domain="resource" name="file" value="768" />
|
||||||
|
<policy domain="resource" name="thread" value="2" />
|
||||||
|
<policy domain="coder" rights="none" pattern="*" />
|
||||||
|
<policy domain="coder" rights="read | write" pattern="{GIF,JPEG,PNG,WEBP}" />
|
||||||
|
<policy domain="filter" rights="none" pattern="*" />
|
||||||
|
<policy domain="path" rights="none" pattern="@*" />
|
||||||
|
<policy domain="delegate" rights="none" pattern="*" />
|
||||||
|
<policy domain="module" rights="none" pattern="*" />
|
||||||
|
<policy domain="module" rights="read | write" pattern="{GIF,JPEG,PNG,WEBP}" />
|
||||||
|
<!-- indirect reads not permitted -->
|
||||||
|
<policy domain="system" name="precision" value="6" />
|
||||||
|
</policymap>
|
|
@ -219,6 +219,8 @@ ENV \
|
||||||
RUN \
|
RUN \
|
||||||
chown pictrs:pictrs /mnt
|
chown pictrs:pictrs /mnt
|
||||||
|
|
||||||
|
COPY root/ /
|
||||||
|
|
||||||
VOLUME /mnt
|
VOLUME /mnt
|
||||||
WORKDIR /opt/pict-rs
|
WORKDIR /opt/pict-rs
|
||||||
USER pictrs
|
USER pictrs
|
||||||
|
|
|
@ -220,6 +220,8 @@ ENV \
|
||||||
RUN \
|
RUN \
|
||||||
chown pictrs:pictrs /mnt
|
chown pictrs:pictrs /mnt
|
||||||
|
|
||||||
|
COPY root/ /
|
||||||
|
|
||||||
VOLUME /mnt
|
VOLUME /mnt
|
||||||
WORKDIR /opt/pict-rs
|
WORKDIR /opt/pict-rs
|
||||||
USER pictrs
|
USER pictrs
|
||||||
|
|
|
@ -220,6 +220,8 @@ ENV \
|
||||||
RUN \
|
RUN \
|
||||||
chown pictrs:pictrs /mnt
|
chown pictrs:pictrs /mnt
|
||||||
|
|
||||||
|
COPY root/ /
|
||||||
|
|
||||||
VOLUME /mnt
|
VOLUME /mnt
|
||||||
WORKDIR /opt/pict-rs
|
WORKDIR /opt/pict-rs
|
||||||
USER pictrs
|
USER pictrs
|
||||||
|
|
|
@ -2,7 +2,7 @@ version: '3.3'
|
||||||
|
|
||||||
services:
|
services:
|
||||||
pictrs:
|
pictrs:
|
||||||
image: asonix/pictrs:v0.2.6-r0
|
image: asonix/pictrs:v0.2.6-r2
|
||||||
ports:
|
ports:
|
||||||
- "127.0.0.1:8080:8080"
|
- "127.0.0.1:8080:8080"
|
||||||
restart: always
|
restart: always
|
||||||
|
|
|
@ -0,0 +1,20 @@
|
||||||
|
<policymap>
|
||||||
|
<policy domain="resource" name="memory" value="256MiB" />
|
||||||
|
<policy domain="resource" name="list-length" value="32" />
|
||||||
|
<policy domain="resource" name="width" value="10KP" />
|
||||||
|
<policy domain="resource" name="height" value="10KP" />
|
||||||
|
<policy domain="resource" name="map" value="512MiB" />
|
||||||
|
<policy domain="resource" name="area" value="16KP" />
|
||||||
|
<policy domain="resource" name="disk" value="1GiB" />
|
||||||
|
<policy domain="resource" name="file" value="768" />
|
||||||
|
<policy domain="resource" name="thread" value="2" />
|
||||||
|
<policy domain="coder" rights="none" pattern="*" />
|
||||||
|
<policy domain="coder" rights="read | write" pattern="{GIF,JPEG,PNG,WEBP}" />
|
||||||
|
<policy domain="filter" rights="none" pattern="*" />
|
||||||
|
<policy domain="path" rights="none" pattern="@*" />
|
||||||
|
<policy domain="delegate" rights="none" pattern="*" />
|
||||||
|
<policy domain="module" rights="none" pattern="*" />
|
||||||
|
<policy domain="module" rights="read | write" pattern="{GIF,JPEG,PNG,WEBP}" />
|
||||||
|
<!-- indirect reads not permitted -->
|
||||||
|
<policy domain="system" name="precision" value="6" />
|
||||||
|
</policymap>
|
Loading…
Reference in a new issue