services:
  core:
    environment:
      THT_AUTH_RUNTIME_PROJECTION_ROOT: /run/thothii-auth
    volumes:
      - type: bind
        source: ${THT_AUTH_RUNTIME_ROOT:?set THT_AUTH_RUNTIME_ROOT}
        target: /run/thothii-auth
        read_only: true