services:
  vpn:
    build: .
    restart: unless-stopped
    network_mode: host
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    volumes:
      - ./certs/server.crt:/etc/swanctl/x509/server.crt:ro
      - ./certs/server-chain.crt:/etc/swanctl/x509ca/server-chain.crt:ro
      - ./certs/server.key:/etc/swanctl/private/server.key:ro
      - ./users.conf:/etc/strongswan/users.conf:ro
    environment:
      - VPN_DOMAIN=vpn.yyamashita.com