services:
  # it-tools
  it-tools0:
    image: ghcr.io/sharevb/it-tools:latest
    container_name: it-tools0
    profiles:
      - it-tools
    restart: on-failure:5
    depends_on:
      - caddy
    networks:
      - infra-network
    read_only: false
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - SYS_ADMIN

    deploy:
      resources:
        limits:
          cpus: '0.5'
          memory: 512M
        reservations:
          cpus: '0.001'
          memory: 20M

  it-tools1:
    image: ghcr.io/sharevb/it-tools:latest
    container_name: it-tools1
    profiles:
      - it-tools
    restart: on-failure:5
    depends_on:
      - caddy
    networks:
      - infra-network
    read_only: false
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - SYS_ADMIN

    deploy:
      resources:
        limits:
          cpus: '0.5'
          memory: 512M
        reservations:
          cpus: '0.001'
          memory: 20M
