services:
  monitor:
    build: .
    ports:
      - "8000:8000"
    environment:
      MONITOR_LOG_LEVEL: INFO
      MONITOR_REQUEST_TIMEOUT_SECONDS: 5
    read_only: true
    tmpfs:
      - /tmp
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL