docker-compose.yml

services:
  hubit-node:
    # the image is built by the GitHub Action of this repository; `docker compose up -d --build` builds it here instead
    image: ${HUBIT_NODE_IMAGE:-ghcr.io/hubit-git/hubit-node:latest}
    build: .
    container_name: hubit-node
    network_mode: host
    restart: unless-stopped
    pids_limit: 100000  # a high cap on purpose: with none, systemd gives a container a default of about 15 % of the system's thread limit (4538 here), which a busy node reaches. (-1 does not lift it.)
    cap_add:
      - NET_ADMIN
      - SYS_PTRACE  # lets `ss -p` see which process owns a connection (the online list)
    devices:
      - /dev/net/tun:/dev/net/tun
    volumes:
      - ./data:/data