---
services:
  pantalaimon:
    image: matrixdotorg/pantalaimon:latest
    container_name: pantalaimon
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    volumes:
      - pantalaimon_data:/data
      - ./pantalaimon.conf:/data/pantalaimon.conf:ro,Z
    restart: always
    networks:
      - pantalaimon

volumes:
  pantalaimon_data:
networks:
  pantalaimon:
    name: pantalaimon
    internal: false
...