services:
  relapse-exploit:
    build:
      context: .
    image: relapse-exploit:local
    ports:
      - "${HOST_BIND:-0.0.0.0}:${HOST_PORT:-8000}:8080"
    read_only: true
    tmpfs:
      - /tmp:size=1m,mode=1777
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
    restart: unless-stopped