services:
  aimilivpn:
    image: ghcr.io/baoweise-bot/aimili-vpngate:2.1
    build:
      context: .
      args:
        BUILD_VERSION: local
    container_name: aimilivpn
    network_mode: host
    cap_drop:
      - ALL
    cap_add:
      - NET_ADMIN
      - NET_RAW
    devices:
      - /dev/net/tun:/dev/net/tun
    environment:
      DEPLOYMENT_MODE: docker
      VPNGATE_DATA_DIR: /data
      UI_HOST: "0.0.0.0"
      UI_PORT: "8787"
      LOCAL_PROXY_HOST: "127.0.0.1"
      LOCAL_PROXY_PORT: "7928"
    volumes:
      - aimilivpn-data:/data
    init: true
    security_opt:
      - no-new-privileges:true
    restart: unless-stopped

volumes:
  aimilivpn-data: