run
-d
--rm
--name=boxmaker-s1-1-7-egress
--label=boxmaker=egress
--network=pasta
--read-only
--cap-drop=all
--security-opt=no-new-privileges
--userns=keep-id
--pids-limit=64
--memory=128m
--volume=/h/run/egress/boxmaker-s1-1-7:/run/egress:rw
localhost/boxmaker-tools@sha256:0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef
/bin/toolkit
egress-proxy
--socket
/run/egress/egress.sock
--allow
example.com,*.example.org