services:
  social-mcp:
    build:
      context: ..
      dockerfile: Dockerfile
    ports:
      - "127.0.0.1:3000:3000"
    shm_size: '1gb'
    deploy:
      resources:
        limits:
          memory: 2g
          cpus: '2.0'
        reservations:
          memory: 1g
          cpus: '1.0'
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    read_only: true
    tmpfs:
      - /tmp:size=512m
    volumes:
      - cookie-data:/home/appuser/.social-mcp
    environment:
      - NODE_ENV=production
      - HOST=0.0.0.0
      - PORT=3000
      - HEADLESS=true
      - ALLOW_REMOTE=yes-i-understand-the-risk
    restart: unless-stopped

volumes:
  cookie-data: