version: "3.8"

services:
  web:
    image: libreddit/libreddit:latest
    restart: unless-stopped
    container_name: "libreddit"
    user: nobody
    read_only: true
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    networks:
      - swag_default
    healthcheck:
      test: ["CMD", "wget", "--spider", "-q", "--tries=1", "http://localhost:8080/settings"]
      interval: 5m
      timeout: 3s

networks:
  swag_default:
    external: true