services:
netalertx:
container_name: netalertx
image: ghcr.io/netalertx/netalertx:latest
network_mode: host
read_only: true
cap_drop: [ALL]
cap_add: [NET_ADMIN, NET_RAW, NET_BIND_SERVICE, CHOWN, SETUID, SETGID]
sysctls:
net.ipv4.conf.all.arp_ignore: 1
net.ipv4.conf.all.arp_announce: 2
volumes:
- /opt/netalertx/data:/data:rw
- /etc/localtime:/etc/localtime:ro
tmpfs:
- "/tmp:uid=20211,gid=20211,mode=1700,rw,noexec,nosuid,nodev,async,noatime,nodiratime"
environment:
PORT: 20211
GRAPHQL_PORT: 20212
restart: unless-stopped