name: miyouqian
services:
  miyouqian:
    build:
      context: ./upstream
      dockerfile: docker/Dockerfile
    container_name: miyouqian
    volumes:
      - /srv/data/miyouqian:/app/state
    environment:
      TZ: Asia/Shanghai
    networks:
      - proxy
    restart: unless-stopped
    cap_drop:
      - ALL
    deploy:
      resources:
        limits:
          cpus: "0.5"
          memory: 256M
        reservations:
          cpus: "0.1"
          memory: 64M
    init: true
    read_only: true
    security_opt:
      - no-new-privileges:true
    tmpfs:
      - /tmp

networks:
  proxy:
    external: true