services: app: build: . ports: ["3000:3000"] environment: - DISPLAY=:99 security_opt: - seccomp=unconfined volumes: - ./secrets:/app/secrets