services:

  cockpit-ws:
    image: cockpit-ws:latest
    container_name: cockpit-ws
    hostname: cockpit.localdomain
    volumes:
      # Authentication
      - /etc/passwd:/etc/passwd:ro
      - /etc/group:/etc/group:ro
      - /etc/shadow:/etc/shadow:ro
      # Docker access
      - /var/run/docker.sock:/var/run/docker.sock
      # Dummy home directories
      - /var/run/cockpit-ws/home:/home
    restart: always
    privileged: true
    ports:
      - "9092:9092"

  portainer:
    image: portainer/portainer-ce:latest
    container_name: portainer-ce
    hostname: portainer.localdomain
    volumes:
      # Docker access
      - /var/run/docker.sock:/var/run/docker.sock
    restart: always
    ports:
      - "9000:9000"