services:
  camofox:
    build: ../../src/camofox
    container_name: hermes-camofox
    restart: unless-stopped
    ports:
      - "127.0.0.1:9377:9377"
    networks:
      - hermes-net
    environment:
      - CAMOFOX_PORT=9377
      - CAMOFOX_REWRITE_LOOPBACK_URLS=true
      - CAMOFOX_LOOPBACK_HOST_ALIAS=host.docker.internal
    volumes:
      - ../../volumes/camofox/browser:/home/browser/.camoufox:rw
      - ../../volumes/shared:/shared:rw
    cap_drop:
      - ALL
    cap_add:
      - SYS_ADMIN
      - NET_ADMIN
      - NET_RAW
      - CHOWN
      - SETGID
      - SETUID
      - DAC_OVERRIDE
      - FOWNER
    shm_size: 2gb
    logging:
      driver: json-file
      options:
        max-size: 10m
        max-file: 3
    healthcheck:
      test: ["CMD", "wget", "-qO-", "http://localhost:9377/health"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 15s

networks:
  hermes-net:
    name: hermes-net
    driver: bridge