services:
  digest-service:
    build: .
    restart: unless-stopped
    env_file: .env
    volumes:
      - ./config.json:/config/config.json:ro
      - digest-data:/data
    networks:
      - automation
    # No public port. Attach your existing n8n container to this network.
    read_only: true
    tmpfs:
      - /tmp
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
volumes:
  digest-data:
networks:
  automation:
    external: true
    name: ${N8N_NETWORK:-n8n_default}