version: '3.9'
services:
    ubuntu:
        image: ubuntu
        security_opt:
            - 'label=level:s0'
        ulimits:
            nofile:
                hard: 1024
                soft: 1024
        stop_signal: SIGTERM
        read_only: true
        labels:
            - com.example.foo=bar
        sysctls:
            - net.ipv4.ip_forward=1
        devices:
            - '/dev/sda:/dev/sda'
        tmpfs:
            - /tmp
        logging:
            driver: json-file
        healthcheck:
            test: 'echo healthy'
        restart: always
        group_add:
            - group1
        user: '1000:1000'
        working_dir: /app
        entrypoint: /bin/bash
        dns:
            - 8.8.8.8
        hostname: myhostname
        container_name: mycontainer
        environment:
            - MY_VAR=value
        volumes:
            - '/tmp/host:/container/path'
        cap_add:
            - NET_ADMIN
        ports:
            - '8080:80'
        networks:
            bridge: {}
        tty: true
        stdin_open: true
networks:
    bridge: {}