services:
  rust:
    build: .
    ports:
      - "127.0.0.1:8080:8080"
    environment:
      DATABASE_URL: sqlite:///data/2fauth.sqlite
      LISTEN_ADDR: 0.0.0.0:8080
      # Only for the local HTTP development port. Use true behind HTTPS.
      RUST_COOKIE_SECURE: "false"
      RUST_LOG: twofauth_rs=info
    volumes:
      - rust-dev-data:/data
    read_only: true
    tmpfs:
      - /tmp
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
    init: true
volumes:
  rust-dev-data: