services: tren: container_name: tren image: git.ngn.tf/ngn/tren:latest ports: - 80:8080 read_only: true cap_drop: - ALL security_opt: - no-new-privileges:true restart: unless-stopped