services:
  web-tools:
    image: personal-web-tools:0.3.0
    build:
      context: .
      dockerfile: Dockerfile
    container_name: personal-web-tools
    restart: unless-stopped
    init: true
    ports:
      - "${WEB_TOOLS_PORT:-9000}:9000"
    volumes:
      - web-tools-data:/data
    read_only: true
    tmpfs:
      - /tmp:size=16m,mode=1777
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true

volumes:
  web-tools-data: