version: '3.7'

services:
  firefox:
    build: .
    devices:
      - /dev/dri
      # - /dev/video0
    volumes:
      - /tmp/.X11-unix:/tmp/.X11-unix:ro
      - $XDG_RUNTIME_DIR/pulse:/run/user/1000/pulse
      - $HOME/Downloads:/home/user/Downloads
      - /var/run/cups:/var/run/cups:ro
      - /tmp/krb5cc_1000:/tmp/krb5cc_1000:ro
      - /etc/localtime:/etc/localtime:ro
      - /etc/machine-id:/etc/machine-id:ro
      - ./data:/home/user
    environment:
      - DISPLAY=unix$DISPLAY
      - PULSE_SERVER=unix:$XDG_RUNTIME_DIR/pulse/native
    cap_add:
      - IPC_LOCK # lock memory to prevent sensitive values from being swapped to disk.
    shm_size: 4G
    # mem_limit: 4G

# For versions above: '3.0'
#    deploy:
#      resources:
#        limits:
#          memory: 4G
#      restart_policy:
#        condition: none
#        delay: 5s
#        max_attempts: 1
#        window: 120s