services: frontend: container_name: PromptBase image: promptbase restart: unless-stopped environment: - NODE_ENV=production ports: - "4321:4321" volumes: - ./.env:/app/.env:ro # Bind-mount .env as read-only