app:
  id: morphos-server
  name: MorphOS Server
  version: 1.0.0
  description: MorphOS server platform. Decentralized application server.
  
  container:
    image: archipelago/morphos-server:1.0.0
    image_signature: cosign://...
    pull_policy: if-not-present
    
  dependencies:
    - storage: 5Gi
    
  resources:
    cpu_limit: 2
    memory_limit: 2Gi
    disk_limit: 5Gi
    
  security:
    capabilities: []
    readonly_root: true
    no_new_privileges: true
    user: 1000
    seccomp_profile: default
    network_policy: isolated
    apparmor_profile: morphos-server
    
  ports:
    - host: 8086
      container: 8080
      protocol: tcp  # Web UI
    
  volumes:
    - type: bind
      source: /var/lib/archipelago/morphos-server
      target: /app/data
      options: [rw]
      
  environment:
    - MORPHOS_ENV=production
    - MORPHOS_DATA_DIR=/app/data
    
  health_check:
    type: http
    endpoint: http://localhost:8086
    path: /health
    interval: 30s
    timeout: 5s
    retries: 3