services:
  bbs-server:
    build:
      context: .
      dockerfile: Dockerfile
    container_name: bbs-server-prod
    ports:
      - "2323:2323"
    environment:
      - WEBAPP_WIKIJS_TOKEN=${WEBAPP_WIKIJS_TOKEN}
    restart: always
    read_only: true
    tmpfs:
      - /tmp
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true