services: tor_dev: image: git.shadowvault.eu/zerostate/tor-dev:latest container_name: tor-dev ports: - "127.0.0.1:9050:9050" security_opt: - no-new-privileges:true cap_drop: - ALL cap_add: - NET_BIND_SERVICE