1# Standalone remote serving: no Jellyfin URL, shared media network, or generator.
 2services:
 3  review:
 4    image: reel-review:1.0.0
 5    build: .
 6    user: "${REVIEW_UID:-10001}:${REVIEW_GID:-10001}"
 7    restart: unless-stopped
 8    read_only: true
 9    cap_drop: [ALL]
10    security_opt: [no-new-privileges:true]
11    environment:
12      APP_ORIGIN: ${APP_ORIGIN:?Set APP_ORIGIN}
13      REVIEW_AUTH_MODE: offline
14      REVIEW_AUTH_FILE: /auth/users.json
15    volumes:
16      - ./data:/data:ro
17      # Mount the directory so atomic file replacements are visible immediately.
18      - ./auth:/auth:ro
19    ports:
20      - "0.0.0.0:8080:8080"
21    mem_limit: 256m
22    cpus: 1