agent-lab/compose.yaml at master · uscient/agent-lab · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
name: agent-lab

services:
  dns:
    image: coredns/coredns:1.14.3
    profiles:
      - core
    command:
      - -conf
      - /etc/coredns/Corefile
    networks:
      agents:
        ipv4_address: ${AGENT_LAB_DNS_IP:-172.30.0.10}
    volumes:
      - ./dns/coredns/Corefile:/etc/coredns/Corefile:ro
    read_only: true
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    cap_add:
      # CoreDNS must bind UDP/TCP 53 inside the container.
      - NET_BIND_SERVICE
    pids_limit: 128
    restart: unless-stopped

networks:
  agents:
    driver: bridge
    internal: true
    enable_ipv6: false
    driver_opts:
      com.docker.network.bridge.gateway_mode_ipv4: isolated
    ipam:
      config:
        - subnet: ${AGENT_LAB_AGENTS_SUBNET:-172.30.0.0/24}
  egress:
    driver: bridge
    ipam:
      config:
        - subnet: ${AGENT_LAB_EGRESS_SUBNET:-198.18.0.0/24}

volumes:
  audit: