services:
  dns-proxy:
    build: .
    ports:
      - "8080:8080"
    environment:
      TARGET_URL: "https://internal.example.com"
      # PROXY_INSECURE_TLS: "1"   # if upstream uses a self-signed cert
      # PRESERVE_HOST: "1"       # keep the client's Host header instead of the upstream host
    dns:
      - 10.0.0.53   # custom DNS required to resolve TARGET_URL
    # Extra hosts are also an option instead of / alongside custom DNS:
    # extra_hosts:
    #   - "internal.example.com:10.0.0.10"
    restart: unless-stopped