# uj-mastering-master — web UI, container deployment template.
#
#   docker compose up -d --build
#   open http://localhost:8080
#
# The container serves static files only. Audio is decoded and analysed inside
# the visitor's browser tab and never sent anywhere (the page's CSP forbids
# network requests), so there is nothing to upload, persist or log here — and no
# volumes, on purpose.

services:
  ujm-web:
    build: .
    image: uj-mastering-master-web:local
    container_name: ujm-web

    ports:
      - "8080:8080"

    # Nothing to write: nginx only needs somewhere for its pid file and empty
    # temp directories.
    read_only: true
    tmpfs:
      - /tmp:size=16m,mode=1777

    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL

    restart: unless-stopped

    logging:
      driver: json-file
      options:
        max-size: "1m"
        max-file: "2"