services:
  manager:
    build: .
    ports:
      - "${PIGWAY_BIND:-0.0.0.0}:${PIGWAY_PORT:-6001}:6001"
    volumes:
      - manager-data:/data
    restart: unless-stopped
    read_only: true
    tmpfs:
      - /tmp
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
volumes:
  manager-data: