- Drop --init so the image supervisor stays namespace PID 1, as the runtime handoff requires; add --memory-swap=1g and nosuid,nodev tmpfs options to match the runtime's tested launch flags. - Mount only frontend css/, js/ and vendor/ at the root origin so index.html's relative asset paths resolve; dev/tests are not exposed. - Add X-Content-Type-Options: nosniff to every response. - Add CONFLUENCE_WEB_CONFLUENCE_PROXY (socks5/http, Confluence only) and CONFLUENCE_WEB_MODEL_TIMEOUT_SECONDS; disable environment proxy inheritance for both upstream clients; add socksio dependency.
12 lines
207 B
Plaintext
12 lines
207 B
Plaintext
atlassian-python-api>=5.0.4
|
|
python-dotenv>=1.0.0
|
|
markdownify>=0.13.0
|
|
pytest>=8.0.0
|
|
fastapi>=0.115.0
|
|
uvicorn>=0.30.0
|
|
httpx>=0.27.0
|
|
pydantic>=2.7.0
|
|
pytest-asyncio>=0.23.0
|
|
beautifulsoup4>=4.12.0
|
|
socksio>=1.0.0
|