{
  "services": [
    {
      "name": "rego-tunnel-linux",
      "image": "rego-vpn:latest",
      "isMain": true,
      "internalPort": 8806,
      "privileged": true,
      "capAdd": ["NET_ADMIN"],
      "devices": ["/dev/net/tun:/dev/net/tun"],
      "environment": {
        "VNC_PASSWORD": "${VNC_PASSWORD}",
        "NOVNC_PORT": "8806"
      },
      "volumes": [
        { "hostPath": "${APP_DATA_DIR}/data", "containerPath": "/data" }
      ]
    }
  ]
}