HolyClaude/docker-compose.podman-rootless.yaml at master · CoderLuii/HolyClaude · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
# ==============================================================================
# HolyClaude - Rootless Podman on SELinux hosts
# First run: mkdir -p data/claude data/cloudcli workspace
# Usage: podman compose -f docker-compose.podman-rootless.yaml up -d
# Then open: http://localhost:3001
#
# This profile is for bidirectional host/container editing of ./workspace.
# It uses keep-id so files created in /workspace stay owned by your host user.
# Do not add :U to the workspace mount; :U rewrites host ownership.
# ==============================================================================

services:
  holyclaude:
    image: coderluii/holyclaude:latest
    container_name: holyclaude
    hostname: holyclaude
    restart: unless-stopped
    shm_size: 2g
    userns_mode: "keep-id:uid=1000,gid=1000"
    network_mode: bridge
    cap_add:
      - SYS_ADMIN  # Current browser profile for this release; hardening is separate
      - SYS_PTRACE # Debugging-related capability
    security_opt:
      - seccomp=unconfined  # Current browser profile for this release; hardening is separate
    ports:
      - "127.0.0.1:3001:3001"
    volumes:
      - ./data/claude:/home/claude/.claude:Z
      - ./data/cloudcli:/home/claude/.cloudcli:Z
      - ./workspace:/workspace:Z
    environment:
      - TZ=UTC
      - PUID=1000
      - PGID=1000