services:
  crucix:
    build: .
    container_name: crucix-live
    ports:
      - "127.0.0.1:${PORT:-3117}:${PORT:-3117}"
    env_file:
      - .env
    dns:
      - 1.1.1.1
      - 8.8.8.8
    read_only: true
    tmpfs:
      - /tmp
    security_opt:
      - no-new-privileges:true
    volumes:
      - crucix_runs:/app/runs
    restart: unless-stopped

volumes:
  crucix_runs: