services:
  bridge:
    image: sha256:34386ef0cb081344d7ec1c103ba398e6e9f64e9ab3a1509accc92a4e24a07258
    container_name: followup-asr-bridge-20261009
    user: '1000:1000'
    entrypoint: ['python', '-B', '/app/bridge.py']
    working_dir: /app
    restart: unless-stopped
    read_only: true
    cap_drop: [ALL]
    security_opt: ['no-new-privileges:true']
    pids_limit: 64
    cpus: 0.50
    mem_limit: 256m
    memswap_limit: 256m
    tmpfs: ['/tmp:size=16m,noexec,nosuid,nodev']
    volumes:
      - './bridge.py:/app/bridge.py:ro'
      - './asr-key:/run/secrets/asr-key:ro'
    networks:
      dify:
        aliases: [followup-asr-bridge]
      asr: {}
    healthcheck:
      test: ['CMD', 'python', '-c', "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8080/health',timeout=4).read()"]
      interval: 15s
      timeout: 5s
      retries: 3
      start_period: 10s
    logging:
      driver: json-file
      options: {max-size: 1m, max-file: '2'}
    labels:
      com.zyt.release: followup-dify-20261009
networks:
  dify:
    external: true
    name: dify_v1110_eera_default
  asr:
    external: true
    name: followup-audio-asr_default