services:
  liveworld:
    build: .
    image: liveworld:review
    restart: unless-stopped
    init: true
    env_file: .env.deploy
    ports:
      - "127.0.0.1:4173:4173"
    volumes:
      - "./.liveworld:/data"
    read_only: true
    tmpfs:
      - /tmp:size=16m,mode=1777
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
    mem_limit: 512m
    cpus: 1.0