services:
  toolbox:
    build:
      context: .
      dockerfile: Containerfile
    image: git.add-ideas.de/zemion/toolbox:0.9.0
    restart: unless-stopped
    read_only: true
    ports:
      - '8080:8080'
    tmpfs:
      - /tmp:size=16m,mode=1777
      - /var/cache/nginx:size=16m,uid=101,gid=101
      - /var/run:size=1m,uid=101,gid=101
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL