services:
  skunkyart:
    container_name: skunkyart
    restart: unless-stopped
    # Published multi-arch image (linux/amd64, linux/arm64). Pin a release tag
    # (e.g. :1.3.3) instead of :latest if you want reproducible upgrades.
    image: ghcr.io/zerolabsco/skunky-art:latest
    # To build from this checkout instead, comment out `image:` above and
    # uncomment the line below, then `docker compose up -d --build`.
    #build: .
    ports:
      - "127.0.0.1:3003:3003"
    security_opt:
      - no-new-privileges:true
    volumes:
      - ./config.json:/config.json:ro
      # The image runs as uid 10000, so the host cache dir must be writable by it:
      #   mkdir -p cache && sudo chown -R 10000:10000 cache
      # Without this the container exits at startup telling you the same thing.
      - ./cache:/cache