services:
  muse-browser:
    build: .
    image: muse-browser:latest
    container_name: muse-browser
    restart: unless-stopped
    ports:
      - "127.0.0.1:3000:3000"   # localhost only — Caddy proxies publicly
    env_file:
      - .env
    shm_size: '2gb'             # Chrome uses /dev/shm; default 64MB causes crashes
    security_opt:
      - seccomp=unconfined      # needed alongside --no-sandbox in some kernel configs
    logging:
      driver: "json-file"
      options:
        max-size: "50m"
        max-file: "3"