services:
  site:
    build:
      context: .
      dockerfile: Dockerfile
    user: "101:101"
    read_only: true
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
    expose:
      - "8080"
    labels:
      - traefik.http.routers.http-0-${COOLIFY_RESOURCE_UUID:?required}-site.priority=500
      - traefik.http.routers.https-0-${COOLIFY_RESOURCE_UUID:?required}-site.priority=500
    tmpfs:
      - /tmp:rw,noexec,nosuid,size=16m
      - /var/cache/nginx:rw,noexec,nosuid,size=16m
      - /var/run:rw,noexec,nosuid,size=16m
    healthcheck:
      test:
        - CMD-SHELL
        - wget -qO- http://127.0.0.1:8080/health.json || exit 1
      interval: 10s
      timeout: 2s
      retries: 3
    restart: unless-stopped
    deploy:
      resources:
        limits:
          cpus: "0.50"
          memory: 64MiB