services:
  magent:
    build:
      context: .
      dockerfile: Dockerfile
    env_file:
      - ./.env
    ports:
      - "3000:3000"
      - "127.0.0.1:8000:8000"
    volumes:
      - ./data:/app/data
    read_only: true
    cap_drop: ["ALL"]
    security_opt: ["no-new-privileges:true"]
    init: true
    tmpfs:
      - /tmp:rw,noexec,nosuid,size=64m,uid=1000,gid=1000
      - /app/frontend/.next/cache:rw,noexec,nosuid,size=128m,uid=1000,gid=1000