services:
  ren-browser:
    image: ghcr.io/sudo-ivan/ren-browser:latest
    ports:
      - "127.0.0.1:8550:8550"
    environment:
      - FLET_WEB_PORT=8550
      - FLET_WEB_HOST=0.0.0.0
      - DISPLAY=:99
      - PIP_CACHE_DIR=/tmp/pip-cache
    user: "1000:1000"
    security_opt:
      - no-new-privileges:true
    restart: unless-stopped