services:
  doh:
    container_name: doh
    build: .
    networks:
      - proxy
    read_only: true
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    tmpfs:
      - /tmp
      - /run

networks:
  proxy:
    name: proxy
    external: true