services:
  relay:
    build:
      context: .
      dockerfile: Dockerfile
    image: morrow-relay:local
    restart: unless-stopped
    init: true
    read_only: true
    ports:
      - "${MORROW_RELAY_HOST:-127.0.0.1}:${MORROW_RELAY_PORT:-8787}:8787"
    volumes:
      - relay-data:/data
    tmpfs:
      - /tmp:size=16m,mode=1777
    environment:
      RUST_LOG: "${RUST_LOG:-morrow=info,tower_http=info}"
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    stop_grace_period: 10s

volumes:
  relay-data: