services:
  ushort:
    image: sodium/ushort:0.1.1
    container_name: ushort
    command: ["/app/config.toml"]
    ports:
      - "127.0.0.1:18082:8080"
    volumes:
      - ./config.toml:/app/config.toml:ro
      - ./data:/app/data
    user: "1001:1001"
    read_only: true
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    restart: unless-stopped