services:
  zcode4:
    image: zcode-desktop:amd64
    container_name: "${ZCODE_NAME:-zcode4}"
    command: ["/root/startup.sh"]
    network_mode: bridge
    restart: "no"
    shm_size: "2g"
    ports:
      - "5906:5901"
      - "6086:6080"
    devices:
      - "/dev/fuse:/dev/fuse:rwm"
    cap_add:
      - CAP_SYS_ADMIN
    security_opt:
      - apparmor=unconfined
    environment:
      ZCODE_HTTP_PROXY: "http://xxx:xxx@proxy.example.com:8080"
      ZCODE_HTTP_PROXY_NO_PROXY: "localhost,127.0.0.1,::1,huawei.com,10.0.0.0/8"
      ZCODE_PROXY_BACKEND: "3proxy"
    volumes:
      - zcode4-state:/root/.zcode
      - zcode4-gui:/root/.config/ZCode
      - zcode4-browser:/root/.config/mozilla
      - zcode4-ssh:/root/.ssh
      - /data/s50058815/wdev:/data/s50058815/wdev
      - /data/s50058815/wdev/zcode-desktop/certs/mitm-ca.pem:/mitm-ca.pem:ro
      - /root/.ssh/id_ed25519:/tmp/zcode-host-id_ed25519:ro
      - /root/.ssh/id_ed25519.pub:/tmp/zcode-host-id_ed25519_pub:ro
      - /root/.ssh/authorized_keys:/tmp/zcode-host-authorized_keys:ro
      - /root/.ssh/known_hosts:/tmp/zcode-host-known_hosts:ro

volumes:
  zcode4-state:
    name: "${ZCODE_NAME:-zcode4}-state"
  zcode4-gui:
    name: "${ZCODE_NAME:-zcode4}-gui"
  zcode4-browser:
    name: "${ZCODE_NAME:-zcode4}-browser"
  zcode4-ssh:
    name: "${ZCODE_NAME:-zcode4}-ssh"