version: '2' volumes: data: {} certs: {} services: chromium: image: andrey01/chromium network_mode: bridge devices: - /dev/dri # Uncomment to allow webcam: # - /dev/video0 volumes: - data:/data - certs:/home/user/.pki/nssdb - $HOME/Downloads:/home/user/Downloads - /tmp/.X11-unix:/tmp/.X11-unix:ro - $XDG_RUNTIME_DIR/pulse:/run/user/1000/pulse - /var/run/cups:/var/run/cups:ro - /var/run/dbus/system_bus_socket:/var/run/dbus/system_bus_socket:ro - /tmp/krb5cc_1000:/tmp/krb5cc_1000:ro - /etc/localtime:/etc/localtime:ro environment: - DISPLAY=unix$DISPLAY - PULSE_SERVER=unix:$XDG_RUNTIME_DIR/pulse/native # SYS_ADMIN is NOT required if you run chrome with `--no-sandbox` flag # more on CAP_SYS_ADMIN https://lwn.net/Articles/486306/ cap_add: - SYS_ADMIN shm_size: 4G