version: "3.4"


services:

  vpn:
    image: alekslitvinenk/openvpn
    ports:
      - 8080:8080/tcp
      - 1194:1194/udp
    cap-add:
      - NET_ADMIN
    deploy:
      mode: replicated
      restart_policy:
        condition: any
      placement:
        constraints:
          - node.role == manager
      update_config:
        parallelism: 1
        order: start-first