# --- NOTE!!!!!!!
# For rootless containers, you may need to tweak with settings to allow it to bind to what would normally be the SSH port.
services:
    the-pit:
        # have you read above?
        ports:
            - 22:22
        image: codeberg.org/gigirassy/the-pit:latest
        cap_drop:
            - ALL
        security_opt:
            - no-new-privileges:true