services:
  mcp-template-py:
    build:
      context: .
      dockerfile: Dockerfile
    image: mcp-template-py:dev
    ports:
      - "${MCP_PORT:-8100}:8100"
    environment:
      MCP_PORT: 8100
      DEBUG: ${DEBUG:-false}
    restart: unless-stopped
    # Security settings for k8s compatibility
    read_only: true
    security_opt:
      - no-new-privileges:true
    tmpfs:
      - /tmp:mode=1777,size=64M
      - /home/nonroot/.cache:mode=755,uid=65532,gid=65532,size=64M