services:
  minishell:

    container_name: "minishell"
    restart: always

    build:
      context: ./minishell
      dockerfile: Dockerfile

    cap_drop:
      - ALL
    cap_add:
      - SETGID
      - FSETID
      - SETUID

    devices:
      - /dev/kvm

    # Prevents gaining new privileges
    security_opt:
      - no-new-privileges

    networks:
      website_net:

  nginx-site:
    container_name: "nginx-site"
    image: nginx

    restart: always
    volumes:
      - ./nginx/nginx.conf:/etc/nginx/nginx.conf
      - ./nginx/certs:/certs

    networks:
      website_net:

    ports:
      - 5080:80
      - 5443:443

  website:
    container_name: "site"
    restart: always
    build:
      context: ./vvsite
      dockerfile: Dockerfile

    networks:
      website_net:

networks:
  website_net:
    external: true
    # internal: true
    driver: bridge