container block describes how the deployed image runs. port is the port inside the container; the process must listen on the container’s network interface. Set resource limits near the port so a reviewer can assess expected capacity:
.towbar/apps/web.app.yml
Private connectivity
Set the samecontainer.network on an app and resource on the same server. A resource’s ID is its network alias unless the resource sets networkAlias:
.towbar/apps/web.app.yml
postgres, the app can connect to postgres:5432. Put the credential-bearing URL in an app runtime secret, not in the manifest. A Docker network on one host does not connect containers across different servers.
Persistent storage
Use a Docker-managed named volume when a process must retain files across replacement:.towbar/apps/files.app.yml
initialData applies only when adding a new volume: previous-container imports from the stopped container, while image initializes from the new image. See the manifest storage guide for missing-volume and environment behavior.