version: '2'

services:
  chrome:
    build: ./
    read_only: true
    networks:
      - net
      - pulseaudio
    devices:
      - /dev/dri
      # - /dev/shm
    volumes:
      - /tmp/.X11-unix:/tmp/.X11-unix
      - /tmp/krb5cc_1000:/tmp/krb5cc_1000:ro
      - /var/run/cups:/var/run/cups:ro
      - $HOME/.config/google-chrome/:/data
      - $HOME/Downloads:/home/chrome/Downloads
    environment:
      DISPLAY: unix$DISPLAY
      PULSE_SERVER: tcp:pulseaudio:4713
    cap_add:
      - SYS_ADMIN

networks:
  net: {}
  pulseaudio:
    external:
      name: pulseaudio_net