services:
  fourget:
    container_name: 4get
    image: git.ngn.tf/ngn/4get
    ports:
      - 80:8080
    volumes:
      - ./config.php:/srv/4get/data/config.php:ro
      - ./favicon.ico:/srv/4get/favicon.ico:ro
      - ./banner:/srv/4get/banner:ro
      - type: tmpfs
        target: /tmp/icons
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
    read_only: true
    restart: unless-stopped