services:
  recommender-service:
    image: recommender-service-flask
    container_name: recommender-service-flask
    restart: on-failure:5
    deploy:
      resources:
        limits:
          memory: 32G
    ulimits:
      nproc: 4096
      nofile:
        soft: 262144
        hard: 262144
      memlock:
        soft: -1
        hard: -1
    cpu_shares: 1024
    read_only: true
    security_opt:
      - no-new-privileges:true
    env_file:
      - .env
    networks:
      - dp-sit-network
    tmpfs:
      - /tmp
    healthcheck:
      test:
        - CMD-SHELL
        - curl -f http://localhost:8000/healthz || exit 1
      interval: 30s
      timeout: 5s
      retries: 5
      start_period: 10s
    volumes:
      - /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem:/etc/ssl/certs/ca-certificates.crt:ro
        #- /etc/hosts:/etc/hosts:ro
networks:
  dp-sit-network:
    name: dp-sit-network
    external: true