breadpot/docker-compose.yaml at main · PigeonSec/breadpot · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
version: '3.8'

services:
  honeypot:
    build: .
    image: breadcrumb-pot:latest
    container_name: breadcrumb-pot
    restart: unless-stopped

    ports:
      # HTTP
      - "8080:8080"

      # DNS (requires privileged or NET_ADMIN capability)
      - "53:53/udp"
      - "53:53/tcp"

      # TCP services
      - "22:22"    # SSH
      - "23:23"    # Telnet
      - "21:21"    # FTP
      - "3306:3306" # MySQL

    volumes:
      # Mount configuration
      - ./config.yaml:/app/config.yaml:ro

      # Mount templates directory
      - ./templates:/app/templates:ro

      # Mount logs directory (persistent)
      - ./logs:/app/logs

    # For DNS on port 53, you may need privileged mode or NET_ADMIN
    # Uncomment one of these if needed:
    # privileged: true
    # cap_add:
    #   - NET_ADMIN
    #   - NET_BIND_SERVICE

    environment:
      - TZ=UTC

    networks:
      - honeypot-net

    logging:
      driver: "json-file"
      options:
        max-size: "10m"
        max-file: "3"

networks:
  honeypot-net:
    driver: bridge