auto backup 2026-07-15_15:40:01

2026-07-15 15:40:01 +02:00
parent ae9d345ef6
commit 9170985162
1 changed files with 165 additions and 100 deletions
@@ -1,193 +1,261 @@
 services:
+  gluetun:
+    image: qmcgaw/gluetun
+    cap_add:
+      - NET_ADMIN
+
+    devices:
+      - /dev/net/tun
+
+    environment:
+      - VPN_SERVICE_PROVIDER=private internet access
+      - OPENVPN_USER=${OPENVPN_USER}
+      - OPENVPN_PASSWORD=${OPENVPN_PASSWORD}
+      - SERVER_REGIONS=Netherlands
+      - PORT_FORWARDING=on
+      - TZ=Europe/Paris
+
+    volumes:
+      - /home/docker/DenGate:/gluetun
+
+    ports:
+      - 8085:8090 # qbittorrent
+      - 8787:8080 # neko
+      - 52000-52100:52000-52100/udp
+      - 9696:9696 # prowlarr
+      - 7878:7878 # radarr
+      - 8989:8989 # sonarr
+      - 5055:5055 # seerr
+      - 9117:9117
+      - 8191:8191
+      - 8265:8265 # tdarr
+      - 8266:8266 # tdarr
+
+    networks:
+      vpn-network:
+      tan-network:
+        ipv4_address: 10.10.0.120
+
+    labels:
+      - traefik.enable=true
+      - traefik.docker.network=tan-network
+
+      # qbittorrent
+      - traefik.http.routers.qbittorrent.rule=Host(`torrent.luckyden.org`)
+      - traefik.http.routers.qbittorrent.entrypoints=websecure
+      - traefik.http.routers.qbittorrent.tls.certresolver=cloudflare
+      - traefik.http.routers.qbittorrent.service=qbittorrent
+      - traefik.http.services.qbittorrent.loadbalancer.server.port=8090
+
+      # neko
+      - traefik.http.routers.neko.rule=Host(`neko.luckyden.org`)
+      - traefik.http.routers.neko.entrypoints=websecure
+      - traefik.http.routers.neko.tls.certresolver=cloudflare
+      - traefik.http.routers.neko.service=neko
+      - traefik.http.services.neko.loadbalancer.server.port=8080
+
+      # prowlarr
+      - traefik.http.routers.prowlarr.rule=Host(`prowlarr.luckyden.org`)
+      - traefik.http.routers.prowlarr.entrypoints=websecure
+      - traefik.http.routers.prowlarr.tls.certresolver=cloudflare
+      - traefik.http.routers.prowlarr.service=prowlarr
+      - traefik.http.services.prowlarr.loadbalancer.server.port=9696
+
+      # radarr
+      - traefik.http.routers.radarr.rule=Host(`radarr.luckyden.org`)
+      - traefik.http.routers.radarr.entrypoints=websecure
+      - traefik.http.routers.radarr.tls.certresolver=cloudflare
+      - traefik.http.routers.radarr.service=radarr
+      - traefik.http.services.radarr.loadbalancer.server.port=7878
+
+      # sonarr
+      - traefik.http.routers.sonarr.rule=Host(`sonarr.luckyden.org`)
+      - traefik.http.routers.sonarr.entrypoints=websecure
+      - traefik.http.routers.sonarr.tls.certresolver=cloudflare
+      - traefik.http.routers.sonarr.service=sonarr
+      - traefik.http.services.sonarr.loadbalancer.server.port=8989
+
+      # seerr
+      - traefik.http.routers.seerr.rule=Host(`jellyseerr.luckyden.org`)
+      - traefik.http.routers.seerr.entrypoints=websecure
+      - traefik.http.routers.seerr.tls.certresolver=cloudflare
+      - traefik.http.routers.seerr.service=seerr
+      - traefik.http.services.seerr.loadbalancer.server.port=5055
+
+      # tdarr
+      - traefik.http.routers.tdarr.rule=Host(`tdarr.luckyden.org`)
+      - traefik.http.routers.tdarr.entrypoints=websecure
+      - traefik.http.routers.tdarr.tls.certresolver=cloudflare
+      - traefik.http.routers.tdarr.service=tdarr
+      - traefik.http.services.tdarr.loadbalancer.server.port=8265
+
+    restart: unless-stopped
+
+    healthcheck:
+      test: ["CMD", "ping", "-c", "1", "1.1.1.1"]
+      interval: 5s
+      timeout: 10s
+      retries: 3
+

  qbittorrent:
    image: lscr.io/linuxserver/qbittorrent:latest
    restart: unless-stopped
-    ports:
-      - 8085:8090
+    network_mode: service:gluetun
+
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Paris
      - WEBUI_PORT=8090
      - DOCKER_MODS=ghcr.io/gabe565/linuxserver-mod-vuetorrent
+
    volumes:
      - /home/docker/BitDen/config:/config
      - /mnt/bindmounts/multimedia/Downloads:/downloads
-    labels:
-      - traefik.enable=true
-      - traefik.docker.network=tan-network
-      - traefik.http.routers.qbittorrent.rule=Host(`torrent.luckyden.org`)
-      - traefik.http.routers.qbittorrent.entrypoints=websecure
-      - traefik.http.routers.qbittorrent.tls.certresolver=cloudflare
-      - traefik.http.routers.qbittorrent.service=qbittorrent
-      - traefik.http.services.qbittorrent.loadbalancer.server.port=8090
-    networks:
-      tan-network:
-        ipv4_address: 10.10.0.120
+
+    depends_on:
+      gluetun:
+        condition: service_healthy


  neko:
    image: ghcr.io/m1k1o/neko/firefox:latest
    restart: unless-stopped
    shm_size: 2gb
-    ports:
-      - 8787:8080
+    network_mode: service:gluetun
+
    volumes:
      - /home/docker/BrowDen/firefox:/home/neko/.mozilla/firefox
+
    environment:
      - NEKO_WEBRTC_EPR=52000-52100
      - NEKO_WEBRTC_ICELITE=1
      - NEKO_WEBRTC_NAT1TO1=192.168.0.9
      - NEKO_MEMBER_MULTIUSER_USER_PASSWORD=${NEKO_USER_PASS}
      - NEKO_MEMBER_MULTIUSER_ADMIN_PASSWORD=${NEKO_ADMIN_PASS}
-    labels:
-      - traefik.enable=true
-      - traefik.docker.network=tan-network
-      - traefik.http.routers.neko.rule=Host(`neko.luckyden.org`)
-      - traefik.http.routers.neko.entrypoints=websecure
-      - traefik.http.routers.neko.tls.certresolver=cloudflare
-      - traefik.http.routers.neko.service=neko
-      - traefik.http.services.neko.loadbalancer.server.port=8080
-    networks:
-      tan-network:
-        ipv4_address: 10.10.0.121
+
+    depends_on:
+      gluetun:
+        condition: service_healthy


  prowlarr:
    image: lscr.io/linuxserver/prowlarr:latest
    restart: unless-stopped
-    ports:
-      - 9696:9696
+    network_mode: service:gluetun
+
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Paris
+
    volumes:
      - /home/docker/ProwDen/config:/config
-    labels:
-      - traefik.enable=true
-      - traefik.docker.network=tan-network
-      - traefik.http.routers.prowlarr.rule=Host(`prowlarr.luckyden.org`)
-      - traefik.http.routers.prowlarr.entrypoints=websecure
-      - traefik.http.routers.prowlarr.tls.certresolver=cloudflare
-      - traefik.http.routers.prowlarr.service=prowlarr
-      - traefik.http.services.prowlarr.loadbalancer.server.port=9696
-    networks:
-      tan-network:
-        ipv4_address: 10.10.0.122
+
+    depends_on:
+      gluetun:
+        condition: service_healthy


  jackett:
    image: lscr.io/linuxserver/jackett:latest
    restart: unless-stopped
+    network_mode: service:gluetun
+
    environment:
      - FLARESOLVERR_URL=http://127.0.0.1:8191
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Paris
      - AUTO_UPDATE=true
+
    volumes:
      - /home/docker/ProwDen/jackett/config:/config
      - /home/docker/ProwDen/jackett/downloads:/downloads
-    networks:
-      tan-network:
-        ipv4_address: 10.10.0.123
+
+    depends_on:
+      gluetun:
+        condition: service_healthy


  flaresolverr:
    image: ghcr.io/flaresolverr/flaresolverr:latest
    restart: unless-stopped
+    network_mode: service:gluetun
+
    environment:
      - TZ=Europe/Paris
      - LOG_LEVEL=info
-    networks:
-      tan-network:
-        ipv4_address: 10.10.0.124
+
+    depends_on:
+      gluetun:
+        condition: service_healthy


  radarr:
    image: lscr.io/linuxserver/radarr:latest
    restart: unless-stopped
-    ports:
-      - 7878:7878
+    network_mode: service:gluetun
+
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Paris
+
    volumes:
      - /home/docker/RadDen/config:/config
      - /mnt/bindmounts/multimedia/Médias:/movies
      - /mnt/bindmounts/multimedia/Downloads:/downloads
-    labels:
-      - traefik.enable=true
-      - traefik.docker.network=tan-network
-      - traefik.http.routers.radarr.rule=Host(`radarr.luckyden.org`)
-      - traefik.http.routers.radarr.entrypoints=websecure
-      - traefik.http.routers.radarr.tls.certresolver=cloudflare
-      - traefik.http.routers.radarr.service=radarr
-      - traefik.http.services.radarr.loadbalancer.server.port=7878
-    networks:
-      tan-network:
-        ipv4_address: 10.10.0.125
+
+    depends_on:
+      gluetun:
+        condition: service_healthy


  sonarr:
    image: lscr.io/linuxserver/sonarr:latest
    restart: unless-stopped
-    ports:
-      - 8989:8989
+    network_mode: service:gluetun
+
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Paris
+
    volumes:
      - /home/docker/SonDen/config:/config
      - /mnt/bindmounts/multimedia/Médias:/tv
      - /mnt/bindmounts/multimedia/Downloads:/downloads
-    labels:
-      - traefik.enable=true
-      - traefik.docker.network=tan-network
-      - traefik.http.routers.sonarr.rule=Host(`sonarr.luckyden.org`)
-      - traefik.http.routers.sonarr.entrypoints=websecure
-      - traefik.http.routers.sonarr.tls.certresolver=cloudflare
-      - traefik.http.routers.sonarr.service=sonarr
-      - traefik.http.services.sonarr.loadbalancer.server.port=8989
-    networks:
-      tan-network:
-        ipv4_address: 10.10.0.126
+
+    depends_on:
+      gluetun:
+        condition: service_healthy


  seerr:
    image: ghcr.io/seerr-team/seerr:latest
    restart: unless-stopped
    init: true
-    ports:
-      - 5055:5055
+    network_mode: service:gluetun
+
    environment:
      - LOG_LEVEL=debug
      - TZ=Europe/Paris
+
    volumes:
      - /home/docker/DenRequest/config:/app/config
-    labels:
-      - traefik.enable=true
-      - traefik.docker.network=tan-network
-      - traefik.http.routers.seerr.rule=Host(`jellyseerr.luckyden.org`)
-      - traefik.http.routers.seerr.entrypoints=websecure
-      - traefik.http.routers.seerr.tls.certresolver=cloudflare
-      - traefik.http.routers.seerr.service=seerr
-      - traefik.http.services.seerr.loadbalancer.server.port=5055
-    networks:
-      tan-network:
-        ipv4_address: 10.10.0.127
+
+    depends_on:
+      gluetun:
+        condition: service_healthy


  tdarr:
    image: ghcr.io/haveagitgat/tdarr:latest
    restart: unless-stopped
-    ports:
-      - 8265:8265
-      - 8266:8266
+    network_mode: service:gluetun
+
    environment:
      - TZ=Europe/Paris
      - PUID=1000
@@ -205,6 +273,7 @@ services:
      - nodeName=RenDen_node
      - NVIDIA_DRIVER_CAPABILITIES=all
      - NVIDIA_VISIBLE_DEVICES=all
+
    volumes:
      - /home/docker/RenDen/server:/app/server
      - /home/docker/RenDen/configs:/app/configs
@@ -215,21 +284,17 @@ services:
      - /mnt/bindmounts/multimedia/Médias/Animations:/media/animations
      - /mnt/bindmounts/multimedia/Médias/Animes Jeunesse:/media/animes jeunesse
      - /tmp/tdarr/transcodes:/temp
+
    devices:
      - /dev/dri:/dev/dri
-    labels:
-      - traefik.enable=true
-      - traefik.docker.network=tan-network
-      - traefik.http.routers.tdarr.rule=Host(`tdarr.luckyden.org`)
-      - traefik.http.routers.tdarr.entrypoints=websecure
-      - traefik.http.routers.tdarr.tls.certresolver=cloudflare
-      - traefik.http.routers.tdarr.service=tdarr
-      - traefik.http.services.tdarr.loadbalancer.server.port=8265
-    networks:
-      tan-network:
-        ipv4_address: 10.10.0.128
+
+    depends_on:
+      gluetun:
+        condition: service_healthy


 networks:
+  vpn-network:
+    name: vpn-network
  tan-network:
    external: true