docker-stack.yml

# IB Gateway stack
version: "3.8"

services:
  tws:
    image: rylorin/ib-gateway-docker:stable
    environment:
      IB_ACCOUNT: ${TWS_USERID}
      IB_PASSWORD: ${TWS_PASSWORD}
      TRADE_MODE: ${TRADE_MODE:-paper}
      VNC_SERVER_PASSWORD: ${VNC_SERVER_PASSWORD:-}
      IB_GATEWAY_PING_CLIENT_ID: ${IB_GATEWAY_PING_CLIENT_ID:-1001}
      IBGW_WATCHDOG_CLIENT_ID: ${IBGW_WATCHDOG_CLIENT_ID:-1002}
    restart: unless-stopped
    networks:
      - default
    ports:
      - published: 4002
        target: 4002
        protocol: tcp
        mode: ingress
      - published: 5900
        target: 5900
        protocol: tcp
        mode: ingress
    deploy:
      placement:
        constraints:
          - node.platform.os == linux
          - node.role == manager
      replicas: 1

networks:
  default:
  system_dmz_network:
    external: true