services:
  haproxy:
    image: haproxy:2.8.1   # < 2.8.2 so it's vulnerable by default
    ports:
      - "6655:8080"
    volumes:
      - ./haproxy.cfg:/usr/local/etc/haproxy/haproxy.cfg:ro