harden docker

docker-compose.yml

@@ -1,10 +1,22 @@
-version: "3.9"
+version: "3.7"
+
 services:
-  backend:
+safetwitch-backend:
     build:
       context: .
-      dockerfile: ./Dockerfile
+      dockerfile: Dockerfile
+    #image: codeberg.org/dragongoose/safetwitch-backend:latest
+    restart: always
+    container_name: safetwitch-backend
+    hostname: safetwitch-backend
+    user: 65534:65534
+    read_only: true
+    security_opt:
+      - no-new-privileges:true
+    cap_drop:
+      - ALL
     ports:
-      - "7000:8080"
+      - "127.0.0.1:7100:7000"
     environment:
-      - URL=http://localhost:7000
+      - PORT=7000
+      - URL=https://changethis