docker-compose.yml

version: "3.9"

networks:
    shared:
        external: true
    isolate-boring:
        external: true
    isolate-w4dup2de:
        external: true
    isolate-infiniteecho:
        external: true
    isolate-litarcade:
        external: true
    isolate-funcpairing:
        external: true
    isolate-bflat:
        external: true

volumes:
    ctf-data:
        external: true

services:
    boring:
        build: ./pwn/boring/challenge
        restart: unless-stopped
        ports:
            - "31770:1337"
        deploy:
            resources:
                limits:
                    cpus: '0.50'
                    memory: 250M
        networks:
            - isolate-boring
        cap_drop:
            - ALL

    w4dup2de:
        build: ./pwn/w4dup2de/challenge
        restart: unless-stopped
        privileged: true
        ports:
            - "31771:5000"
        deploy:
            resources:
                limits:
                    cpus: '0.50'
                    memory: 250M
        networks:
            - isolate-w4dup2de
        cap_drop:
            - ALL

    infiniteecho:
        build: ./pwn/infiniteecho/challenge
        restart: unless-stopped
        privileged: true
        ports:
            - "31772:5000"
        deploy:
            resources:
                limits:
                    cpus: '0.50'
                    memory: 250M
        networks:
            - isolate-infiniteecho
        cap_drop:
            - ALL

    litarcade:
        build: ./pwn/litarcade/challenge
        restart: unless-stopped
        privileged: true
        ports:
            - "31773:5000"
        deploy:
            resources:
                limits:
                    cpus: '0.50'
                    memory: 250M
        networks:
            - isolate-litarcade
        cap_drop:
            - ALL

    funcpairing:
        build: ./pwn/funcpairing/challenge
        restart: unless-stopped
        privileged: true
        ports:
            - "31774:5000"
        deploy:
            resources:
                limits:
                    cpus: '0.50'
                    memory: 250M
        networks:
            - isolate-funcpairing
        cap_drop:
            - ALL

    bflat:
        build: ./pwn/bflat/challenge
        restart: unless-stopped
        ports:
            - "31775:1337"
        deploy:
            resources:
                limits:
                    cpus: '0.50'
                    memory: 250M
        networks:
            - isolate-bflat
        cap_drop:
            - ALL

    # Web
    kirbytime:
        build: ./web/kirbytime
        restart: unless-stopped
        ports:
            - "31776:8000"
        deploy:
            resources:
                limits:
                    cpus: '0.50'
                    memory: 250M
        networks:
            - shared
        cap_drop:
            - ALL

    jwt-2:
        build: ./web/jwt-2
        restart: unless-stopped
        ports:
            - "31777:3000"
        deploy:
            resources:
                limits:
                    cpus: '0.50'
                    memory: 250M
        networks:
            - shared
        cap_drop:
            - ALL

    retreat:
        build: ./web/retreat
        restart: on-failure
        ports:
            - "31778:3000"
        deploy:
            resources:
                limits:
                    cpus: '0.50'
                    memory: 250M
        networks:
            - shared
        cap_drop:
            - ALL
        healthcheck:
            test: ["CMD-SHELL", "curl -f http://litctf.org:31778/ || exit 1"]
            interval: 5m
            timeout: 10s
            retries: 3
            start_period: 30s
        # healthcheck is to periodically restart challenge, not actually checking health


    anti-inspect:
        build: ./web/anti-inspect
        restart: unless-stopped
        ports:
            - "31779:8080"
        deploy:
            resources:
                limits:
                    cpus: '0.10'
                    memory: 64M
        networks:
            - shared

    scrainbow:
        build: ./web/scrainbow
        restart: unless-stopped
        ports:
            - "31780:3000"
        deploy:
            resources:
                limits:
                    cpus: '0.50'
                    memory: 250M
        networks:
            - shared
        cap_drop:
            - ALL

    jwt-1:
        build: ./web/jwt-1
        restart: unless-stopped
        ports:
            - "31781:3000"
        deploy:
            resources:
                limits:
                    cpus: '0.50'
                    memory: 250M
        networks:
            - shared
        cap_drop:
            - ALL

    kablewy:
        build: ./rev/kablewy
        restart: unless-stopped
        ports:
            - "31782:8080"
        deploy:
            resources:
                limits:
                    cpus: '0.10'
                    memory: 64M
        networks:
            - shared

    srsa:
        build: ./crypto/srsa
        restart: unless-stopped
        ports:
            - "31783:4242"
        deploy:
            resources:
                limits:
                    cpus: '0.50'
                    memory: 250M
        networks:
            - shared

    revsite1:
        build: ./rev/revsite1
        restart: unless-stopped
        ports:
            - "31784:8080"
        deploy:
            resources:
                limits:
                    cpus: '0.10'
                    memory: 64M
        networks:
            - shared

    revsite2:
        build: ./rev/revsite2
        restart: unless-stopped
        ports:
            - "31785:8080"
        deploy:
            resources:
                limits:
                    cpus: '0.10'
                    memory: 64M
        networks:
            - shared