services:
  app:
    image: ${IMAGE:-mikhaillobanov/devops-platform:latest}
    container_name: devops-platform
    restart: unless-stopped

    ports:
      - "127.0.0.1:8000:8000"

    read_only: true
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true

    mem_limit: 256m
    cpus: 0.5