services:
  license-platform:
    build: .
    image: universal-license-platform:1.0.0-local
    env_file:
      - .env
    environment:
      LICENSE_ADDRESS: :8090
      LICENSE_DATA_FILE: /data/platform.json
    ports:
      - "8090:8090"
    volumes:
      - license-platform-data:/data
    read_only: true
    tmpfs:
      - /tmp:size=16m,mode=1777
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "/app/license-platform", "--healthcheck"]
      interval: 20s
      timeout: 4s
      retries: 3
      start_period: 10s

volumes:
  license-platform-data: