services:
  wireguard-config-generator:
    build: .
    container_name: wireguard-config-generator
    restart: unless-stopped
    ports:
      - "8090:8080"
    read_only: true
    tmpfs:
      - /tmp
      - /var/cache/nginx
      - /var/run
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL