version: '3.7'

services:
  tor:
    init: true
    build: .
    volumes:
      - /tmp/.X11-unix:/tmp/.X11-unix:ro
      - $XDG_RUNTIME_DIR/pulse:/run/user/1000/pulse:ro
      - $HOME/Downloads:/home/user/tor-browser_en-US/Browser/Downloads
    environment:
      - DISPLAY=unix$DISPLAY
      - PULSE_SERVER=unix:$XDG_RUNTIME_DIR/pulse/native
    cap_add:
      - IPC_LOCK # lock memory to prevent sensitive values from being swapped to disk.
    shm_size: 4G