services:
  privaite:
    build: .
    ports:
      - "8400:8400"
    env_file:
      # optional: a fresh clone has no .env yet (cp .env.example .env); the
      # image must still boot on the example config's local providers.
      - path: .env
        required: false
    volumes:
      - ./config:/app/config:ro
    restart: unless-stopped