services:
  voicecat:
    build: .
    image: voicecat:local
    restart: unless-stopped
    init: true
    ports:
      - "8384:8384/tcp"
      - "8384:8384/udp"
    volumes:
      - voicecat-data:/data
    environment:
      VOICECAT_SERVER_NAME: "My VoiceCat Server"
    read_only: true
    tmpfs:
      - /tmp:size=16m,mode=1777
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true

volumes:
  voicecat-data: