services:
  yawn:
    build:
      context: .
      dockerfile: Dockerfile
    image: yawn:local
    restart: unless-stopped
    init: true
    ports:
      - "127.0.0.1:5002:5002"
    environment:
      PORT: "5002"
      YAWN_DATABASE: /data/yawn.db
    volumes:
      - yawn-data:/data
    read_only: true
    tmpfs:
      - /tmp:size=64m
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    stop_grace_period: 15s

volumes:
  yawn-data: