services:
  ushort:
    image: ushort:local
    build:
      context: ..
    command: ["/app/config.toml"]
    ports:
      - "127.0.0.1:18082:8080"
    volumes:
      - "${USHORT_CONFIG:-../config.toml}:/app/config.toml:ro"
      - ../data:/app/data
    user: "${USHORT_UID:-1001}:${USHORT_GID:-1001}"
    read_only: true
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    restart: unless-stopped