simple_snowflake_mcp/docker-compose.prod.yml at main · YannBrrd/simple_snowflake_mcp · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
# Production override for docker-compose
# Usage: docker-compose -f docker-compose.yml -f docker-compose.prod.yml up -d

version: '3.8'

services:
  simple-snowflake-mcp:
    # Use the more secure Dockerfile
    dockerfile: Dockerfile.secure
    # Remove development volumes
    volumes:
      - ./logs:/app/logs:rw
    # Add resource limits
    deploy:
      resources:
        limits:
          cpus: '1.0'
          memory: 512M
        reservations:
          cpus: '0.5'
          memory: 256M
    # Add restart policy
    restart: always
    # Add security options
    security_opt:
      - no-new-privileges:true
    # Read-only root filesystem (uncomment if your app supports it)
    # read_only: true
    # tmpfs:
    #   - /tmp
    #   - /app/logs
    # Add network isolation (create a custom network if needed)
    # networks:
    #   - mcp-network

# Uncomment to create isolated network
# networks:
#   mcp-network:
#     driver: bridge
#     ipam:
#       config:
#         - subnet: 172.20.0.0/16