version: '3.8'  # Use an appropriate version of Docker Compose

services:
  twingate_connector:  # Define a service named "twingate_connector"
    restart: always  # Ensure the container restarts automatically if it exits (e.g., after a crash or system reboot)
    image: "twingate/connector:1"  # Use the "twingate/connector" Docker image with the "latest" tag
    environment:
      - SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt
      - TWINGATE_API_ENDPOINT=/connector.stock
      - TWINGATE_NETWORK=  # Set the environment variable "TWINGATE_NETWORK"
      - TWINGATE_ACCESS_TOKEN=  # Set the environment variable "TWINGATE_ACCESS_TOKEN"
      - TWINGATE_REFRESH_TOKEN=  # Set the environment variable "TWINGATE_REFRESH_TOKEN"
      - TWINGATE_LABEL_HOSTNAME=twingate  # Set the environment variable "TWINGATE_LABEL_HOSTNAME"
    sysctls:
      - "net.ipv4.ping_group_range=0 65535"  # Set the sysctl parameter "net.ipv4.ping_group_range" to allow user IDs in the range 0 to 65535 to create ICMP echo request (ping) sockets