services:
  frontend:
    container_name: malek_frontend_secure
    image: uo-malek
    build:
      context: ./
      dockerfile: Dockerfile

    env_file:
      - ".env"

    environment:
      NODE_ENV: production

    ports:
      - "8090:3000"

    restart: unless-stopped

    read_only: true
    tmpfs:
      - /tmp
    security_opt:
      - no-new-privileges:true
