services:
  tor_portable:
    image: git.shadowvault.eu/zerostate/tor-portable:latest
    container_name: tor-portable
    ports: 
      - "127.0.0.1:9050:9050"
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    cap_add:
      - NET_BIND_SERVICE
      - NET_RAW