services:
  relapse-exploit:
    build:
      context: .
    image: relapse-exploit:local
    ports:
      - "${HOST_BIND:-0.0.0.0}:${HOST_PORT:-8000}:8080"
    read_only: true
    tmpfs:
      - /tmp:size=1m,mode=1777
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
    restart: unless-stopped

  ps5-guide-gateway:
    image: relapse-exploit:local
    command: ["python", "/srv/guide_gateway.py"]
    environment:
      GATEWAY_IP: "${GATEWAY_IP:-192.168.20.30}"
      REDIRECT_URL: "${GUIDE_REDIRECT_URL:-http://192.168.20.30:8000/}"
    ports:
      - "${GATEWAY_BIND_IP:-192.168.20.30}:53:8053/udp"
      - "${GATEWAY_BIND_IP:-192.168.20.30}:53:8053/tcp"
      - "${GATEWAY_BIND_IP:-192.168.20.30}:80:8081/tcp"
      - "${GATEWAY_BIND_IP:-192.168.20.30}:443:8443/tcp"
    read_only: true
    tmpfs:
      - /tmp:size=1m,mode=1777
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
    healthcheck:
      test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8081/_health', timeout=2).close()"]
      interval: 30s
      timeout: 3s
      start_period: 5s
      retries: 3
    restart: unless-stopped