services:
  devplace-node:
    image: gcr.io/distroless/static-debian12:nonroot
    command: ["/devplace-node", "run", "--config", "/config/config.json"]
    volumes:
      - ./devplace-node-linux-amd64:/devplace-node:ro
      - ./config:/config
    restart: on-failure
    read_only: true
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
    mem_limit: 128m
    pids_limit: 64