networks:
  proxy_net:
    name: "proxy-net"
    external: true
services:
  caldav:
    image: tomsquest/docker-radicale
    container_name: caldav-stvnliu-me
    networks:
      - proxy_net
    init: true
    read_only: false
    security_opt:
      - no-new-privileges: true
    cap_drop:
      - ALL
    cap_add:
      - SETUID
      - SETGID
      - CHOWN
      - KILL
    deploy:
      resources:
        limits:
          memory: 256M
          pids: 50
    restart: unless-stopped
    volumes:
      - ./data:/data
      - ./config:/config:ro