services:
  cinema-watch:
    image: ghcr.io/pilascat/cinema-watch:latest
    container_name: cinema-watch
    ports:
      - "8790:8790"
    volumes:
      - ./data:/data
    environment:
      PUID: "1000"
      PGID: "1000"
      UI_PASSWORD: ""
    read_only: true
    tmpfs:
      - /tmp
    security_opt:
      - no-new-privileges:true
    restart: unless-stopped