version: '3.5'
services:
  firewall:
    build:
      context: ./dockerfile/firewall
      dockerfile: Dockerfile
    image: "tsg-firewall-v21.03"
    container_name: "tsg-container-firewall-v21.03"
    security_opt:
     - seccomp:unconfined
    volumes:
     - /mnt/huge_1G:/mnt/huge_1G
     - /tmp/vhost_tsg_container_firewall:/run/usvhost/
     - ./config/mrzcpd/etc/mrglobal.conf:/opt/mrzcpd/etc/mrglobal.conf
     - ./config/sapp_run/etc/sapp.toml:/home/mesasoft/sapp_run/etc/sapp.toml
     - ./config/sapp_run/etc/sapp_log.conf:/home/mesasoft/sapp_run/etc/sapp_log.conf
     - ./config/sapp_run/etc/gdev.conf:/home/mesasoft/sapp_run/etc/gdev.conf
     - ./config/sapp_run/tsgconf/main.conf:/home/mesasoft/sapp_run/tsgconf/main.conf
     - ./config/sapp_run/tsgconf/maat.conf:/home/mesasoft/sapp_run/tsgconf/maat.conf
     - ./config/sapp_run/conf/capture_packet_plug.conf:/home/mesasoft/sapp_run/conf/capture_packet_plug.conf
     - /etc/localtime:/etc/localtime:ro
  tfe:
    build:
      context: ./dockerfile/tfe
      dockerfile: Dockerfile
    image: "tfe-v4.4"
    container_name: "tfe-container-v4.4"
    security_opt:
     - seccomp:unconfined
    cap_add:
     - NET_ADMIN
     - SYS_PTRACE
    devices:
     - "/dev/net/tun:/dev/net/tun"
    volumes:
     - ./config/tfe/doh/doh.conf:/opt/tsg/tfe/conf/doh/doh.conf
     - ./config/tfe/pangu/pangu_pxy.conf:/opt/tsg/tfe/conf/pangu/pangu_pxy.conf
     - ./config/tfe/tfe/future.conf:/opt/tsg/tfe/conf/tfe/future.conf
     - ./config/tfe/tfe/tfe.conf:/opt/tsg/tfe/conf/tfe/tfe.conf
     - ./config/tfe/tfe/zlog.conf:/opt/tsg/tfe/conf/tfe/zlog.conf
     - ./config/tfe/resource/pangu/pangu_http.json:/opt/tsg/tfe/resource/pangu/pangu_http.json
     - /etc/localtime:/etc/localtime:ro