services:
  hister:
    build:
      context: .
      target: release
    image: ghcr.io/asciimoo/hister:latest
    container_name: hister
    init: true
    restart: unless-stopped
    read_only: true
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    ports:
      - '4433:4433'
    volumes:
      - hister_data:/hister/data
    tmpfs:
      - /tmp:noexec,nosuid,size=64m
    environment:
      - HISTER__SERVER__ADDRESS=0.0.0.0:4433
      - HISTER__SERVER__BASE_URL=http://localhost:4433

volumes:
  hister_data: