services:
  test:
    image: ${TEST_IMAGE:-curlimages/curl:8.14.1}
    restart: "no"

    depends_on:
      - proxy

    environment:
      PROXY_HOST: proxy
      PROXY_PORT: "${PROXY_PORT:-3128}"
      SOCKS_PORT: "${SOCKS_PORT:-1080}"

      TEST_HTTP_URL: "${TEST_HTTP_URL:-http://api.ipify.org}"
      TEST_HTTPS_URL: "${TEST_HTTPS_URL:-https://api.ipify.org}"
      TEST_ATTEMPTS: "${TEST_ATTEMPTS:-20}"
      TEST_RETRY_DELAY: "${TEST_RETRY_DELAY:-1}"
      TEST_TIMEOUT: "${TEST_TIMEOUT:-15}"

      EXPECTED_EXIT_IP: "${EXPECTED_EXIT_IP:-}"
      ASSERT_SAME_PROXY_EXIT: "${ASSERT_SAME_PROXY_EXIT:-true}"
      ASSERT_DIFFERENT_FROM_DIRECT: "${ASSERT_DIFFERENT_FROM_DIRECT:-true}"

    entrypoint:
      - /bin/sh
      - /tests/smoke.sh

    command: []

    volumes:
      - ./tests/smoke.sh:/tests/smoke.sh:ro

    read_only: true

    tmpfs:
      - /tmp:size=1m,mode=1777

    cap_drop:
      - ALL

    security_opt:
      - no-new-privileges:true

    networks:
      - proxy