Update comfigs for best practices

stash/compose.yml

@@ -1,44 +1,43 @@
 services:
   stash:
-    image: stashapp/stash:latest
+    image: stashapp/stash@sha256:4cac18873ea052f03510602d9e1a9b29e6241a393a111479010292b7a1e28a5e
     container_name: stash
+    user: "1000:1000"
     restart: unless-stopped
-    ## the container's port must be the same with the STASH_PORT in the environment section
     ports:
       - "9999:9999"
-    ## If you intend to use stash's DLNA functionality uncomment the below network mode and comment out the above ports section
-    # network_mode: host
     logging:
       driver: "json-file"
       options:
         max-file: "10"
         max-size: "2m"
     environment:
+      - USER=stash
+      - HOME=/root
       - STASH_STASH=/data/
       - STASH_GENERATED=/generated/
       - STASH_METADATA=/metadata/
       - STASH_CACHE=/cache/
-      ## Adjust below to change default port (9999)
       - STASH_PORT=9999
     volumes:
       - /etc/localtime:/etc/localtime:ro
-      ## Adjust below paths (the left part) to your liking.
-      ## E.g. you can change ./config:/root/.stash to ./stash:/root/.stash
-      ## The left part is the path on your host, the right part is the path in the stash container.
-
-      ## Keep configs, scrapers, and plugins here.
       - /mnt/storage/apps/stash/.stash:/root/.stash
-      ## Point this at your collection.
-      ## The left side is where your collection is on your host, the right side is where it will be in stash.
       - /mnt/storage/media/Private:/data
-      ## This is where your stash's metadata lives
       - /mnt/storage/apps/stash/metadata:/metadata
-      ## Any other cache content.
       - /mnt/storage/apps/stash/cache:/cache
-      ## Where to store binary blob data (scene covers, images)
       - /mnt/storage/apps/stash/blobs:/blobs
-      ## Where to store generated content (screenshots,previews,transcodes,sprites)
       - /mnt/storage/apps/stash/generated:/generated
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:9999/healthz"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 30s
+    deploy:
+      resources:
+        limits:
+          memory: 4G
+          cpus: '2.0'
     networks:
       - network
 networks: