services:
  migrate:
    build: .
    image: tai/tapm-deployment-broker:local
    entrypoint: ["/usr/local/bin/tapm-migrate"]
    env_file: .env
    network_mode: host
    restart: "no"

  broker:
    build: .
    image: tai/tapm-deployment-broker:local
    env_file: .env
    network_mode: host
    restart: unless-stopped
    init: true
    read_only: true
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    tmpfs:
      - /tmp:size=16m,mode=1777
    healthcheck:
      test: ["CMD-SHELL", "wget -q -O - http://127.0.0.1:8080/health/ready"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 10s