Package managed server for Linux production

docker-compose.yml

@@ -1,16 +1,23 @@
 services:
   voicecat:
     build: .
-    image: ghcr.io/org/voicecat:latest
-    container_name: voicecat
+    image: voicecat:local
     restart: unless-stopped
+    init: true
     ports:
       - "8384:8384/tcp"
       - "8384:8384/udp"
     volumes:
       - voicecat-data:/data
-    # Override CMD to customise the server name; add --no-guests to require accounts.
-    command: ["--data-dir", "/data", "--name", "My VoiceCat Server"]
+    environment:
+      VOICECAT_SERVER_NAME: "My VoiceCat Server"
+    read_only: true
+    tmpfs:
+      - /tmp:size=16m,mode=1777
+    cap_drop:
+      - ALL
+    security_opt:
+      - no-new-privileges:true
 
 volumes:
   voicecat-data: