services:
  chishin_nginx-proxy-manager-zh:
    image: chishin/nginx-proxy-manager-zh:latest
    ports:
    - 6443:443/tcp
    - 6680:80/tcp
    - 6681:81/tcp
    volumes:
    - ./npm/data:/data
    - ./npm/letsencrypt:/etc/letsencrypt
    environment:
    - TZ=Asia/Shanghai
    entrypoint:
    - /init
    restart: always
    network_mode: bridge
    tty: true
    init: false
    stdin_open: true
    cap_add:
    - AUDIT_WRITE
    - CHOWN
    - DAC_OVERRIDE
    - FOWNER
    - FSETID
    - KILL
    - MKNOD
    - NET_BIND_SERVICE
    - NET_RAW
    - SETFCAP
    - SETGID
    - SETPCAP
    - SETUID
    - SYS_CHROOT
    cap_drop:
    - AUDIT_CONTROL
    - AUDIT_READ
    - BLOCK_SUSPEND
    - BPF
    - CHECKPOINT_RESTORE
    - DAC_READ_SEARCH
    - IPC_LOCK
    - IPC_OWNER
    - LEASE
    - LINUX_IMMUTABLE
    - MAC_ADMIN
    - MAC_OVERRIDE
    - NET_ADMIN
    - NET_BROADCAST
    - PERFMON
    - SYSLOG
    - SYS_ADMIN
    - SYS_BOOT
    - SYS_MODULE
    - SYS_NICE
    - SYS_PACCT
    - SYS_PTRACE
    - SYS_RAWIO
    - SYS_RESOURCE
    - SYS_TIME
    - SYS_TTY_CONFIG