name: veyra
services:
  app:
    image: ${VEYRA_IMAGE:?VEYRA_IMAGE is required}
    restart: unless-stopped
    init: true
    env_file:
      - path: ./configs/.env
        format: raw
    environment:
      HTTP_ADDR: 0.0.0.0:8080
      LOG_DIR: logs
      PYTHON_EXECUTABLE: python3
    ports:
      - "${VEYRA_BIND_ADDR:-0.0.0.0}:${VEYRA_PORT:-8080}:8080"
    volumes:
      - ./logs:/app/logs
    read_only: true
    tmpfs:
      - /tmp:size=64m,mode=1777
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    stop_grace_period: 30s