services:
  engin:
    build:
      context: .
      target: runtime
    image: "engin-console:${ENGIN_IMAGE_TAG:-local}"
    restart: unless-stopped
    init: true
    user: "10001:10001"
    ports:
      - "${ENGIN_BIND_ADDRESS:-127.0.0.1}:${ENGIN_PORT:-8501}:8501"
    environment:
      STREAMLIT_BROWSER_GATHER_USAGE_STATS: "false"
      XDG_CACHE_HOME: /tmp/.cache
      MPLCONFIGDIR: /tmp/matplotlib
    read_only: true
    tmpfs:
      - "/tmp:rw,noexec,nosuid,size=64m,mode=1777"
    security_opt:
      - "no-new-privileges:true"
    cap_drop:
      - ALL
    pids_limit: 256
    mem_limit: 1g
    cpus: 2.0
    stop_grace_period: 30s
    logging:
      driver: local
      options:
        max-size: "10m"
        max-file: "3"