services:
  zeek:
    image: zeek/zeek:latest
    network_mode: host
    cap_add:
      - NET_RAW
      - NET_ADMIN
    environment:
      ZEEK_INTERFACE: ${ZEEK_INTERFACE:-eth0}
    command: ["zeek", "-i", "${ZEEK_INTERFACE:-eth0}", "Log::default_logdir=/logs"]
    volumes:
      - ./data/zeek:/logs
    restart: unless-stopped

  acaua:
    build: .
    command: ["serve", "--bind", "0.0.0.0:8787", "--data-dir", "/data/acaua"]
    ports:
      - "127.0.0.1:8787:8787"
    volumes:
      - ./data/zeek:/data/zeek:ro
      - ./data/acaua:/data/acaua
    restart: unless-stopped