version: '3.7'

services:
  nsd:
    container_name: nsd
    restart: always
    image: ghcr.io/the-kube-way/nsd:v4.6.0
    read_only: true
    tmpfs:
      - /tmp
      - /var/db/nsd
    volumes:
      - /apps/nsd/conf:/etc/nsd:ro
      - /apps/nsd/zones:/zones
      - /apps/nsd/keys:/keys
    ports:
      - 53:53
      - 53:53/udp