version: "3"
services:
#  certbot:
#    image: certbot/certbot
#    container_name: certbot
#    hostname: certbot
#    volumes:
#      - ./data/ssl:/etc/letsencrypt
#    ports:
#      - 80:80
#    command: certonly --non-interactive --keep-until-expiring --standalone --preferred-challenges http --agree-tos --email pycm1k@yandex.ru -d tshk.duckdns.org -d tormob.duckdns.org

  openconnect:
#    depends_on:
 #     - certbot #:
       # condition: service_completed_successfully
    image: r4venme/openconnect
    container_name: openconnect
    restart: unless-stopped
    deploy:
      resources:
        limits:
          cpus: '0.50'
          memory: 200M
    cap_add:
      - NET_ADMIN
    hostname: openconnect
    environment:
      - TZ="Europe/Samara"
      - SRV_CN="tshk.duckdns.org"
    volumes:
      - ./data:/etc/ocserv
      - /app/certbot/ssl/:/etc/ocserv/ssl
    devices:
      - /dev/net/tun:/dev/net/tun
    ports:
      - 43443:443/tcp