services:
  ids:
    build:
      context: .
      dockerfile: Dockerfile
    image: routeros-suricata-tzsp:local
    container_name: routeros-suricata-tzsp
    restart: unless-stopped
    env_file:
      - .env
    cap_add:
      - NET_ADMIN
      - NET_RAW
      - SYS_NICE
    devices:
      - /dev/net/tun:/dev/net/tun
    ports:
      - "37008:37008/udp"
      - "8080:8080/tcp"
    volumes:
      - ./data:/data
      - ./logs:/var/log/suricata
    healthcheck:
      test: ["CMD", "python3", "/opt/ids/scripts/healthcheck.py"]
      interval: 15s
      timeout: 5s
      retries: 5
      start_period: 20s