services:
  trojan:
    image: ${TROJAN_IMAGE:?set an immutable image digest}
    container_name: trojan
    network_mode: host
    privileged: true
    restart: always
    command: init
    env_file: /opt/trojan/runtime.env
    volumes:
      - /opt/trojan/config:/usr/local/etc/trojan
      - /opt/trojan/manager:/var/lib/trojan-manager
      - /opt/trojan/acme:/root/.acme.sh
      - /opt/trojan/certs:/etc/trojan/certs
      - /opt/trojan/manager-config:/etc/trojan-manager