services:
  zap:
    image: ghcr.io/zaproxy/zaproxy:stable
    container_name: zap-webswing
    ports:
      - "${ZAP_GUI_PORT}:8080"   # Webswing GUI
      - "${ZAP_API_PORT}:9090"   # ZAP API
    volumes:
      - "${ZAP_WORK_DIR}:/zap/wrk:rw"
    environment:
      - ZAP_WEBSWING_OPTS=-host 0.0.0.0 -port 8080
    user: zap
    command: zap-webswing.sh
    restart: unless-stopped