infra/12_torrent/docker-compose.yml

services:
  glueten:
    image: qmcgaw/gluetun
    cap_add:
      - NET_ADMIN

    devices:
      - /dev/net/tun

    environment:
      - VPN_SERVICE_PROVIDER=private internet access
      - OPENVPN_USER=${OPENVPN_USER}
      - OPENVPN_PASSWORD=${OPENVPN_PASSWORD}
      - SERVER_REGIONS=Netherlands
      - PORT_FORWARDING=on
      - TZ=Europe/Paris

    volumes:
      - /home/docker/DenGate:/gluetun

    ports:
      - 8085:8090
      - 52000-52100:52000-52100/udp

    networks:
      vpn-network:
      tan-network:
        ipv4_address: 10.10.0.120

    labels:
      - traefik.enable=true
      - traefik.docker.network=tan-network

      # qbittorrent
      - traefik.http.routers.qbittorrent.rule=Host(`torrent.luckyden.org`)
      - traefik.http.routers.qbittorrent.entrypoints=websecure
      - traefik.http.routers.qbittorrent.tls.certresolver=cloudflare
      - traefik.http.routers.qbittorrent.service=qbittorrent
      - traefik.http.services.qbittorrent.loadbalancer.server.port=8090

    restart: unless-stopped

    healthcheck:
      test: ["CMD", "ping", "-c", "1", "1.1.1.1"]
      interval: 1m
      timeout: 10s
      retries: 3


  qbittorrent:
    image: lscr.io/linuxserver/qbittorrent:latest
    restart: unless-stopped
    network_mode: service:glueten

    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Paris
      - WEBUI_PORT=8090

    volumes:
      - /home/docker/BitDen/config:/config
      - /mnt/bindmounts/multimedia/Downloads:/downloads

    depends_on:
      glueten:
        condition: service_healthy


  neko:
    image: ghcr.io/m1k1o/neko/firefox:latest
    restart: unless-stopped
    shm_size: 2gb
    network_mode: service:glueten

    volumes:
      - /home/docker/BrowDen/firefox:/home/neko/.mozilla/firefox

    environment:
      - NEKO_WEBRTC_EPR=52000-52100
      - NEKO_WEBRTC_ICELITE=1
      - NEKO_WEBRTC_NAT1TO1=192.168.0.9
      - NEKO_MEMBER_MULTIUSER_USER_PASSWORD=${NEKO_USER_PASS}
      - NEKO_MEMBER_MULTIUSER_ADMIN_PASSWORD=${NEKO_ADMIN_PASS}

    depends_on:
      glueten:
        condition: service_healthy


  prowlarr:
    image: lscr.io/linuxserver/prowlarr:latest
    restart: unless-stopped

    networks:
      tan-network:
        ipv4_address: 10.10.0.121

    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Paris

    volumes:
      - /home/docker/ProwDen/config:/config

    labels:
      - traefik.enable=true
      - traefik.docker.network=tan-network
      - traefik.http.routers.prowlarr.rule=Host(`prowlarr.luckyden.org`)
      - traefik.http.routers.prowlarr.entrypoints=websecure
      - traefik.http.routers.prowlarr.tls.certresolver=cloudflare
      - traefik.http.services.prowlarr.loadbalancer.server.port=9696


  jackett:
    image: lscr.io/linuxserver/jackett:latest
    restart: unless-stopped

    networks:
      tan-network:
        ipv4_address: 10.10.0.122

    environment:
      - FLARESOLVERR_URL=http://flaresolverr:8191
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Paris

    volumes:
      - /home/docker/ProwDen/jackett/config:/config
      - /home/docker/ProwDen/jackett/downloads:/downloads


  flaresolverr:
    image: ghcr.io/flaresolverr/flaresolverr:latest
    restart: unless-stopped

    networks:
      tan-network:
        ipv4_address: 10.10.0.123

    environment:
      - TZ=Europe/Paris
      - LOG_LEVEL=info


  radarr:
    image: lscr.io/linuxserver/radarr:latest
    restart: unless-stopped

    networks:
      tan-network:
        ipv4_address: 10.10.0.124

    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Paris

    volumes:
      - /home/docker/RadDen/config:/config
      - /mnt/bindmounts/multimedia/Médias:/movies
      - /mnt/bindmounts/multimedia/Downloads:/downloads

    labels:
      - traefik.enable=true
      - traefik.http.routers.radarr.rule=Host(`radarr.luckyden.org`)
      - traefik.http.routers.radarr.entrypoints=websecure
      - traefik.http.routers.radarr.tls.certresolver=cloudflare
      - traefik.http.services.radarr.loadbalancer.server.port=7878


  sonarr:
    image: lscr.io/linuxserver/sonarr:latest
    restart: unless-stopped

    networks:
      tan-network:
        ipv4_address: 10.10.0.125

    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Paris

    volumes:
      - /home/docker/SonDen/config:/config
      - /mnt/bindmounts/multimedia/Médias:/tv
      - /mnt/bindmounts/multimedia/Downloads:/downloads

    labels:
      - traefik.enable=true
      - traefik.http.routers.sonarr.rule=Host(`sonarr.luckyden.org`)
      - traefik.http.routers.sonarr.entrypoints=websecure
      - traefik.http.routers.sonarr.tls.certresolver=cloudflare
      - traefik.http.services.sonarr.loadbalancer.server.port=8989


  seerr:
    image: ghcr.io/seerr-team/seerr:latest
    restart: unless-stopped
    init: true

    networks:
      tan-network:
        ipv4_address: 10.10.0.126

    environment:
      - LOG_LEVEL=debug
      - TZ=Europe/Paris

    volumes:
      - /home/docker/DenRequest/config:/app/config

    labels:
      - traefik.enable=true
      - traefik.http.routers.seerr.rule=Host(`jellyseerr.luckyden.org`)
      - traefik.http.routers.seerr.entrypoints=websecure
      - traefik.http.routers.seerr.tls.certresolver=cloudflare
      - traefik.http.services.seerr.loadbalancer.server.port=5055


  tdarr:
    image: ghcr.io/haveagitgat/tdarr:latest
    restart: unless-stopped

    networks:
      tan-network:
        ipv4_address: 10.10.0.127

    environment:
      - TZ=Europe/Paris
      - PUID=1000
      - PGID=1000
      - UMASK_SET=002
      - serverIP=0.0.0.0
      - serverPort=8266
      - webUIPort=8265
      - auth=true
      - authSecretKey=${RENDEN_SECRET_KEY}
      - apiKey=${RENDEN_API_KEY}

    volumes:
      - /home/docker/RenDen/server:/app/server
      - /home/docker/RenDen/configs:/app/configs
      - /home/docker/RenDen/logs:/app/logs
      - /mnt/bindmounts/multimedia:/media
      - /tmp/tdarr/transcodes:/temp

    devices:
      - /dev/dri:/dev/dri


networks:
  vpn-network:
    name: vpn-network
  tan-network:
    external: true