version: '3'

services:

  myonion:
    image: goldy/tor-hidden-service
    volumes:
      - ./hidden-services:/var/lib/tor/hidden_service # .onion address and private key will be located in ./hidden_service
    environment:
      - SERVICE1_TOR_SERVICE_HOSTS=80:mybunker:8080
      - SERVICE1_TOR_SERVICE_VERSION=3

  mybunker:
    image: bunkerity/bunkerweb:1.4.0
    # ⚠️ read this if you use local folders for volumes ⚠️
    # bunkerweb runs as an unprivileged user with UID/GID 101
    # don't forget to edit the permissions of the files and folders accordingly
    # example if you need to create a directory : mkdir folder && chown root:101 folder && chmod 770 folder
    # another example for existing folder : chown -R root:101 folder && chmod -R 770 folder
    # more info at https://docs.bunkerweb.io
    volumes:
      - bw_cache:/cache
    environment:
      # disable common security measures based on IP
      - USE_BAD_BEHAVIOR=no
      - USE_DNSBL=no
      - USE_WHITELIST=no
      - USE_BLACKLIST=no
      # enable captcha at least
      - USE_ANTIBOT=captcha
      - USE_CLIENT_CACHE=yes
      - USE_GZIP=yes
      - USE_REVERSE_PROXY=yes
      - REVERSE_PROXY_URL=/
      - REVERSE_PROXY_HOST=http://myapp

  myapp:
    image: tutum/hello-world

volumes:
  bw_cache: