docker-compose.yaml

services:
  ubuntu-desktop:
    image: ghcr.io/mscrnt/ubuntu-desktop:latest
    container_name: ubuntu-desktop
    hostname: ubuntu-desktop
    restart: unless-stopped
    # systemd-as-PID1 needs a writable cgroup hierarchy (provided by host on
    # cgroup v2) plus tmpfs for /tmp and /run. No --privileged required.
    cgroup: host
    stop_signal: SIGRTMIN+3
    stop_grace_period: 30s
    volumes:
      - /sys/fs/cgroup:/sys/fs/cgroup:rw
    tmpfs:
      - /run
      - /run/lock
      - /tmp
    environment:
      USERNAME: ${USERNAME:?set USERNAME in .env}
      PASSWORD: ${PASSWORD:?set PASSWORD in .env}
      VNCPASSWORD: ${VNCPASSWORD:?set VNCPASSWORD in .env}
      VNC_GEOMETRY: ${VNC_GEOMETRY:-1920x1080}
      VNC_DEPTH: ${VNC_DEPTH:-24}
      DISABLE_VNC: ${DISABLE_VNC:-0}
      DISABLE_XRDP: ${DISABLE_XRDP:-0}
      DISABLE_SSH: ${DISABLE_SSH:-0}
    ports:
      - "${SSH_PORT:-2222}:22"
      - "${RDP_PORT:-13389}:3389"
      - "${VNC_PORT:-5901}:5901"
      # NoMachine NX (only useful if the image was built with
      # INCLUDE_NOMACHINE=true; otherwise this port has nothing listening).
      - "${NX_PORT:-4000}:4000"
    healthcheck:
      test: ["CMD", "/usr/local/bin/healthcheck"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 45s