1
0

docker-compose.yml 757 B

1234567891011121314151617181920212223242526272829
  1. version: '2'
  2. volumes:
  3. plain_data:
  4. sshd_host_keys:
  5. services:
  6. rgpgfs:
  7. image: fphammerle/rgpgfs
  8. environment:
  9. RECIPIENT: 1234567890ABCDEF1234567890ABCDEF12345678
  10. volumes:
  11. - plain_data:/plain:ro
  12. # TODO replace host path with named volume
  13. - /mnt/rgpgfs:/encrypted:shared
  14. devices: [/dev/fuse]
  15. cap_add: [SYS_ADMIN]
  16. security_opt: ['apparmor:unconfined']
  17. tty: true
  18. rsync_sshd:
  19. image: fphammerle/rsync-sshd:0.1-amd64
  20. environment:
  21. USERS: alice
  22. volumes:
  23. - /mnt/rgpgfs:/data/secrets:slave,ro
  24. - sshd_host_keys:/etc/ssh/host_keys
  25. - ~/.ssh/authorized_keys:/home/alice/.ssh/authorized_keys:ro
  26. ports: ['127.0.0.1:2022:22']
  27. # rsync -av --rsh='ssh -p 2022' alice@localhost:/secrets .