# docker-compose.yml

version: '3'

services:
  libremdb:
    container_name: libremdb
    build:
      context: .
      dockerfile: Dockerfile
    ports:
      - "127.0.0.1:8864:3000"
    env_file: .env.local.example
    depends_on:
      - libremdb-redis
    restart: always
    user: 65534:65534 # equivalent to the nobody user
    read_only: true
    tmpfs:
      - /opt/app/.next/cache/:size=10M,mode=0770,uid=65534,gid=65534,noexec,nosuid,nodev
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    networks:
      - libremdb

  libremdb-redis:
    container_name: libremdb_redis
    image: redis
    # FOR DEBUGGING ONLY
    # ports:
    #   - "6379:6379"
    restart: always
    user: nobody
    read_only: true
    security_opt:
      - no-new-privileges:true
    tmpfs:
      - /data:size=10M,mode=0770,uid=65534,gid=65534,noexec,nosuid,nodev
    cap_drop:
      - ALL
    networks:
      - libremdb

networks:
  libremdb:
    driver: bridge
    ipam:
      config:
        - subnet: 172.16.57.0/24