---

networks:
  default:
    name: media_network
    driver: bridge
    attachable: true

volumes:
  gluetun: # Gluetun app data.
    driver: local
    driver_opts:
      type: "nfs"
      o: "addr=${NFS_SERVER},rw,tcp,nolock,hard,wsize=65536,rsize=65536"
      device: ":${NFS_VOLUME}/docker_data/gluetun"

secrets:
  wireguard_private_key:
    file: ./secrets/wireguard_private_key.secret

services:
  gluetun:
    # See more: https://github.com/qdm12/gluetun-wiki
    image: qmcgaw/gluetun
    container_name: gluetun
    restart: always
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun:/dev/net/tun
    secrets:
      - wireguard_private_key
    env_file: ./env/gluetun.env
    volumes:
      - gluetun:/gluetun

  watchtower:
    # See more: https://github.com/containrrr/watchtower
    image: containrrr/watchtower
    container_name: watchtower
    env_file: ./env/watchtower.env
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock

include:
  - bittorrent-compose.yml
  - arr-compose.yml
  - jellyfin-compose.yml