services:
  sync:
    build: .
    environment:
      OPSGENIE_GOOGLE_CALENDAR_SYNC_CONFIG_DIR: /run/oncall-config
    volumes:
      - ${OPSGENIE_GOOGLE_CALENDAR_SYNC_CONFIG_DIR:?Set OPSGENIE_GOOGLE_CALENDAR_SYNC_CONFIG_DIR to the private config directory}:/run/oncall-config:ro
    read_only: true
    tmpfs:
      - /tmp