version: '3.8'

services:
  copy-pasta-website:
    build: .
    container_name: copy-pasta-website
    restart: unless-stopped
    ports:
      - "8080:5000"
    environment:
      - NODE_ENV=production
      - PORT=5000
    volumes:
      - ./saved-scans:/app/saved-scans
      - ./downloads:/app/downloads
      - ./logs:/app/logs
    networks:
      - copy-pasta-network
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:5000"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    cap_add:
      - CHOWN
      - SETGID
      - SETUID
    read_only: false
    tmpfs:
      - /tmp

networks:
  copy-pasta-network:
    driver: bridge