name: magent-production

services:
  magent:
    build: .
    env_file:
      - ./.env
    environment:
      AUTH_COOKIE_SECURE: "true"
      AUTH_COOKIE_SAMESITE: strict
    ports:
      - "10.30.1.32:3200:3000"
      - "127.0.0.1:8200:8000"
    volumes:
      - ./data:/app/data
    restart: unless-stopped
    read_only: true
    cap_drop: ["ALL"]
    security_opt: ["no-new-privileges:true"]
    init: true
    tmpfs:
      - /tmp:rw,noexec,nosuid,size=64m,uid=1000,gid=1000
      - /app/frontend/.next/cache:rw,noexec,nosuid,size=128m,uid=1000,gid=1000