services:
  badblocks-personal-site:
    image: badblocks-personal-site:latest
    restart: always
    container_name: badblocks-personal-site
    volumes:
      - ./db:/db
    env_file:
      - .env
    healthcheck:
      test:
        [
          "CMD",
          "node",
          "-e",
          "fetch('http://localhost:4321/health').then(r=>process.exit(r.ok?0:1))",
        ]
      interval: 30s
      timeout: 15s
      retries: 3
      start_period: 120s
    cap_drop: [ALL]
    security_opt: [no-new-privileges:true]
    read_only: true
    tmpfs: [/tmp]
networks:
  default:
    name: proxynet
    external: true