# SPDX-License-Identifier: GPL-3.0-or-later
services:
  cyanforge:
    build:
      context: .
      args:
        NGINX_IMAGE: ${NGINX_IMAGE:-nginxinc/nginx-unprivileged:stable-alpine}
    image: musicmagic:0.2.0
    restart: unless-stopped
    init: true
    read_only: true
    user: "101:101"
    cap_drop: [ALL]
    security_opt: ["no-new-privileges:true"]
    pids_limit: 96
    mem_limit: 256m
    cpus: 1.0
    tmpfs:
      - /tmp:rw,noexec,nosuid,size=32m,mode=1777
    ports:
      - "127.0.0.1:${CYANFORGE_PORT:-8765}:8080"
    logging:
      driver: json-file
      options: {max-size: "10m", max-file: "3"}