services:
  portapower-prod:
    build:
      context: .
      dockerfile: Dockerfile
    image: portapower-prod:latest
    container_name: portapower-prod
    restart: unless-stopped
    read_only: true
    tmpfs:
      - /tmp
      - /var/cache/nginx
      - /var/run
    cap_drop:
      - ALL
    cap_add:
      - NET_BIND_SERVICE
      - CHOWN
      - SETGID
      - SETUID
      - DAC_OVERRIDE
    security_opt:
      - no-new-privileges:true
    networks:
      - traefik-public
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.portapower.rule=Host(`portapower.buzz`) || Host(`www.portapower.buzz`)"
      - "traefik.http.routers.portapower.entrypoints=web"
      - "traefik.http.services.portapower.loadbalancer.server.port=80"
      - "traefik.docker.network=traefik-public"

networks:
  traefik-public:
    external: true