version: '3.8'
services:
  tor:
    image: wizardrysteamworks/tor:latest
    read_only: true
    volumes:
      - type: tmpfs
        target: /run
    environment:
      - TOR_SOCKS_PORT:9050
      - TOR_HTTP_TUNNEL_PORT:9055
      - TOR_DNS_PORT:9053
      - CHECK_CIRCUIT_PORT:7050
    ports:
      # SOCKS
      - 9050:9050
      # tor DNSPort
      - 9053:9053
      # CheckCircuit - https://grimore.org/windows/checkcircuit
      - 7050:7050
    deploy:
      labels:
        - shepherd.enable=true
        - shepherd.auth.config=docker
      replicas: 1
      placement:
        max_replicas_per_node: 1