version: '3.8'

services:
  carbon-server:
    image: azreyo/carbon:latest
    container_name: carbon-http-server
    ports:
      - "8080:8080"   # HTTP port
      - "8443:8443"   # HTTPS port
    environment:
      - TZ=UTC
      - SERVER_NAME=yourdomain.com  # Change this to your domain or IP
    restart: unless-stopped
    networks:
      - carbon-net
    # Resource limits
    deploy:
      resources:
        limits:
          cpus: '2'
          memory: 512M
        reservations:
          cpus: '0.5'
          memory: 128M
    # Security options
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    cap_add:
      - NET_BIND_SERVICE
    read_only: true
    tmpfs:
      - /tmp
      - /app/log

networks:
  carbon-net:
    driver: bridge