docker-compose.yml

---
version: "3.8"
services:
  dns:
    image: alazif/exploit-host-dns:latest
    ports:
      - "53:53/tcp"
      - "53:53/udp"
    volumes:
      - type: volume
        source: /var/www/zones.json
        target: /opt/dns-config-watchdog/zones.json
        read_only: true
    environment:
      REDIRECT_IPV4: $(ip route get 1.1.1.1 2> /dev/null | awk -F"src " 'NR==1{split($2,a," ");print a[1]}')
      REDIRECT_IPV6: $(ip route get 2606:4700:4700::1111 2> /dev/null | awk -F"src " 'NR==1{split($2,a," ");print a[1]}')
    restart: unless-stopped
  http:
    image: alazif/exploit-host-http:latest
    ports:
      - "80:80/tcp"
      - "443:443/tcp"
    volumes:
      - type: bind
        source: /var/www
        target: /var/www
        read_only: true
      - type: bind
        source: /var/log/nginx
        target: /var/log/nginx
        read_only: false
    environment:
      # This is left blank on purpose so it uses the ENV variable from the host
      ROOT_DOMAIN:
      # This is left blank on purpose because it's stored as a secret on the host
      CERTBOT_EMAIL:
    restart: unless-stopped
  watchtower:
    # This container is to keep all the docker containers up-to-date
    image: containrrr/watchtower:latest
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    restart: unless-stopped