services:
  ushort:
    image: sodium/ushort:0.1.1
    container_name: ushort
    command: ["/app/config.toml"]
    ports:
      - "127.0.0.1:18082:8080"
    volumes:
      - "${USHORT_CONFIG:-./config.toml}:/app/config.toml:ro"
      - "${USHORT_DATA:-./data}:/app/data"
    user: "${USHORT_UID:-1001}:${USHORT_GID:-1001}"
    read_only: true
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    restart: unless-stopped