services:
  snowflake-dashboard:
    container_name: snowflake-dashboard
    image: ghcr.io/lone-cloud/snowflake-dashboard:latest
    restart: unless-stopped
    network_mode: host
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
    depends_on:
      snowflake-proxy:
        condition: service_healthy

  snowflake-proxy:
    container_name: snowflake-proxy
    image: containers.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake:latest
    restart: unless-stopped
    network_mode: host
    # For a full list of Snowflake Proxy CLI parameters see
    # https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/tree/main/proxy?ref_type=heads#running-a-standalone-snowflake-proxy
    command: ["-metrics", "-metrics-address", "0.0.0.0", "-metrics-port", "9999"]
    healthcheck:
      test: ["CMD", "wget", "-qO-", "http://localhost:9999/metrics"]
      interval: 30s
      timeout: 5s
      start_period: 10s
      retries: 3
    # Optionally limit ephemeral port range for firewall rules:
    # command: ["-metrics", "-metrics-address", "0.0.0.0", "-metrics-port", "9999", "-ephemeral-ports-range", "30000:60000"]

  watchtower:
    container_name: watchtower
    image: nickfedor/watchtower:latest
    restart: unless-stopped
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    command: snowflake-proxy snowflake-dashboard