version: "3"
services:
  redlib:
    image: quay.io/redlib/redlib:latest
    # image: quay.io/redlib/redlib:latest-arm # uncomment if you use arm64
    # image: quay.io/redlib/redlib:latest-armv7 # uncomment if you use armv7
    restart: always
    container_name: "redlib"
    ports:
      - "127.0.0.1:8857:8080" # Specify `127.0.0.1:8080:8080` instead if using a reverse proxy
    user: nobody
    read_only: true
    security_opt:
      - no-new-privileges:true
      # - seccomp=seccomp-redlib.json
    cap_drop:
      - ALL
    env_file: .env
    healthcheck:
      test: ["CMD", "wget", "--spider", "-q", "--tries=1", "http://localhost:8080/settings"]
      interval: 5m
      timeout: 3s
    networks:
      - redlib

networks:
  redlib:
    driver: bridge
    ipam:
      config:
        - subnet: 172.16.52.0/24