services:
  exploit-lab:
    build: 
      context: ./kali
      dockerfile: Dockerfile
    image: exploit-lab:latest
    stdin_open: true
    tty: true
    network_mode: "none"
    restart: "no"
    cap_drop:
      - ALL
    read_only: true
    tmpfs:
      - /tmp:rw,size=256m
    volumes:
      - ./challenge:/home/kali/challenge:ro
      - kali-work:/home/kali/work:rw
    deploy:
      resources:
        limits:
          cpus: '1.0'
          memory: 1G
    user: "1000:1000"
volumes:
  kali-work: