services:
  worker:
    image: ${RSMON_WORKER_IMAGE:-reg.rsxx.ru/rsmon/rsmon-worker:latest}
    restart: unless-stopped
    env_file:
      - .env
    ports:
      - "${WORKER_BIND_IP:-127.0.0.1}:${WORKER_PORT:-27401}:${WORKER_PORT:-27401}"
    volumes:
      - worker-data:/var/lib/rsmon-worker
    cap_add:
      - NET_RAW
    security_opt:
      - no-new-privileges:true

volumes:
  worker-data: