services:
  arena-api:
    build:
      context: .
      dockerfile: Dockerfile
    image: arena-playwright-api:local
    container_name: arena-playwright-api
    restart: unless-stopped
    env_file:
      - .env
    ports:
      # Bind only to the Linux host. Put Caddy/Nginx/Tailscale in front for remote access.
      - "127.0.0.1:7860:7860"
    shm_size: "1gb"
    healthcheck:
      test:
        - CMD
        - python
        - -c
        - >-
          import urllib.request;
          urllib.request.urlopen('http://127.0.0.1:7860/health', timeout=10).read()
      interval: 30s
      timeout: 15s
      retries: 3
      start_period: 90s
    security_opt:
      - no-new-privileges:true