services:
  pocketwatch:
    build: .
    image: pocketwatch-go:local
    restart: unless-stopped
    ports:
      - "8080:8080"
    environment:
      APP_ADDR: ":8080"
      DATA_DIR: "/data"
      # Hinter HTTPS-Reverse-Proxy auf true setzen.
      COOKIE_SECURE: "false"
    volumes:
      - pocketwatch-data:/data
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL

volumes:
  pocketwatch-data: