services:
  preface-tools:
    build:
      context: .
    image: preface-tools:local
    restart: unless-stopped
    init: true
    env_file:
      - .env
    environment:
      APP_ENV: production
      HTTP_ADDRESS: :8080
      COMIC_ANIMATOR_PROMPT_FILE: /app/prompts/comic-animator-system.txt
      COMIC_ANIMATOR_UPLOAD_DIR: /app/data/comic-animator/uploads
      COMIC_ANIMATOR_OUTPUT_DIR: /app/data/comic-animator/outputs
    ports:
      - "127.0.0.1:8080:8080"
    volumes:
      - preface-data:/app/data
      - ./prompts:/app/prompts:ro
    read_only: true
    tmpfs:
      - /tmp:size=64m,mode=1777
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
    healthcheck:
      test: ["CMD", "/usr/local/bin/healthcheck", "http://127.0.0.1:8080/readyz"]
      interval: 30s
      timeout: 3s
      start_period: 10s
      retries: 3

volumes:
  preface-data: