# Ansible managed
# Sites de test du PoC BunkerWeb, mode split
# Ports publiés sur 192.168.200.161, filtrés par la chaîne iptables BWPOC :
# seul le WAF (192.168.200.155) peut les joindre.

services:
  www:
    image: nginx:1.30-alpine
    container_name: poc-www
    restart: unless-stopped
    read_only: true
    tmpfs:
      - /var/cache/nginx
      - /run
      - /tmp
    volumes:
      - ./www:/usr/share/nginx/html:ro
    ports:
      - "192.168.200.161:8081:80"
    networks: [apps]

  shop:
    image: bkimminich/juice-shop:v20.3.0
    container_name: poc-shop
    restart: unless-stopped
    ports:
      - "192.168.200.161:8082:3000"
    networks: [apps]

  api:
    image: mccutchen/go-httpbin:2.26.0
    container_name: poc-api
    restart: unless-stopped
    read_only: true
    ports:
      - "192.168.200.161:8083:8080"
    networks: [apps]

networks:
  apps:
    name: poc-apps