services:
  worker:
    image: "reg.rsxx.ru/rsmon/rsmon-worker@sha256:${RSMON_WORKER_IMAGE_DIGEST:?set RSMON_WORKER_IMAGE_DIGEST to the published 64-character digest}"
    restart: unless-stopped
    env_file:
      - .env
    ports:
      - "${WORKER_BIND_IP:-127.0.0.1}:${WORKER_PORT:-27401}:${WORKER_PORT:-27401}"
    volumes:
      - worker-data:/var/lib/rsmon-worker
    cap_add:
      - NET_RAW
    security_opt:
      - no-new-privileges:true

volumes:
  worker-data: