services:
  openvpn-server:
    image: kylemanna/openvpn:2.4
    container_name: openvpn-server
    cap_add:
      - NET_ADMIN
    extra_hosts:
      - "host:${HOST_IP}"
    ports:
      - 444:443
    privileged: true
    restart: unless-stopped
    volumes:
      - /opt/openvpn-server:/etc/openvpn
      - /opt/openvpn-server/logrotate.d/openvpn:/etc/logrotate.d/openvpn
    healthcheck:
      test: ["CMD-SHELL", "ip link show tun0 || exit 1"]
      interval: 30s
      timeout: 5s
      retries: 3