docker-compose.yml

version: '3'
services:
  vpn:
    image: dperson/openvpn-client
    container_name: ctf-vpn
    # user: '${UID}:${GID}'
    cap_add:
      - NET_ADMIN
    security_opt:
      - label:disable
    devices:
      - /dev/net/tun
    volumes:
      - /dev/net:/dev/net:z
      - ./ctf.ovpn:/vpn/vpn.conf:ro
      # - ./credentials.txt:/vpn/credentials.txt:ro
    sysctls:
      - net.ipv6.conf.all.disable_ipv6=0
    ports:
      # for the socks proxy
      - 127.0.0.1:1080:1080
      # for the http proxy
      - 127.0.0.1:8888:8888
    restart: unless-stopped
    command: openvpn.sh -D

  db:
    image: postgres:12-alpine
    container_name: ctf-db
    volumes:
      - ctf_db:/var/lib/postgresql/data
    environment:
      POSTGRES_USER: msf
      POSTGRES_PASSWORD: password123
    restart: unless-stopped

  socks:
    image: arjenz/ctf-proxy
    container_name: ctf-socks
    depends_on:
      - vpn
    network_mode: 'service:vpn'
    restart: unless-stopped

  http:
    image: arjenz/tinyproxy
    container_name: ctf-http
    depends_on:
      - vpn
    network_mode: 'service:vpn'
    command: 'ANY'
    restart: unless-stopped

  kali:
    image: arjenz/ctf-kali
    container_name: ctf-kali
    depends_on:
      - db
      - vpn
    network_mode: 'service:vpn'
    volumes:
      - ctf_kali:/root
      - /tmp/.X11-unix:/tmp/.X11-unix
    environment:
      - DISPLAY=${HOSTNAME}:0
    # keep it alive
    command: tail -F /dev/null
    restart: unless-stopped

volumes:
  ctf_db:
  ctf_kali: