services:
  cap:
    build: .
    env_file: .env
    environment:
      CAP_HOST: 0.0.0.0
    ports:
      - "127.0.0.1:8000:8000"
    volumes:
      - ./data:/app/data
    read_only: true
    tmpfs:
      - /tmp
    security_opt:
      - no-new-privileges:true