version: '2.4'

networks:
  privatenetwork:
    name: privatenetwork
    driver: bridge
    ipam:
      driver: default
      config:
        - subnet: 192.168.111.0/24
          gateway: 192.168.111.1

services:
  portainer:
    read_only: true
    image: portainer/portainer-ce:latest
    healthcheck:
      disable: true
    container_name: portainer
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    networks:
      - privatenetwork
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - /mnt/pool/appdata/portainer/data:/data:rw
    ports:
      - "2001:9443"