services:
  watermarker:
    build: .
    image: acks-watermarker:2.1.1
    container_name: acks-watermarker
    restart: unless-stopped
    read_only: true
    security_opt:
      - no-new-privileges:true
    tmpfs:
      - /var/cache/nginx
      - /var/run
    ports:
      - "${ACKS_BIND_ADDRESS:-127.0.0.1}:${ACKS_PORT:-8080}:80"