services:
  astra:
    build: .
    restart: unless-stopped
    init: true
    read_only: true
    cap_drop: [ALL]
    security_opt: [no-new-privileges:true]
    environment:
      ASTRA_DATA_DIR: /data
    volumes:
      - ./config.py:/app/config.py:ro
      - ./data:/data