services:
  gluetun:
    image: qmcgaw/gluetun:latest
    container_name: gluetun
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun:/dev/net/tun
    environment:
      - VPN_SERVICE_PROVIDER=protonvpn
      - VPN_TYPE=wireguard
      - WIREGUARD_PRIVATE_KEY=MYPRIVATEKEY
      - WIREGUARD_ADDRESSES=10.2.0.2/32
      - SERVER_COUNTRIES=Australia
      - VPN_PORT_FORWARDING=on
      - VPN_PORT_FORWARDING_PROVIDER=protonvpn
      # When Proton assigns/rotates the PF port, Gluetun runs this:
      - VPN_PORT_FORWARDING_UP_COMMAND=/bin/sh -c 'until wget -qO- --retry-connrefused --post-data "json={\"listen_port\":{{PORTS}}}" http://127.0.0.1:8080/api/v2/app/setPreferences; do echo "Waiting for qBittorrent..."; sleep 2; done'
      - TZ=Australia/Sydney
      - PORT_FORWARDING_STATUS_FILE=/gluetun/forwarded_port
      - FIREWALL=on
    volumes:
      - ./gluetun:/gluetun
    ports:
      - 8080:8080          # qBittorrent Web UI ONLY
    restart: unless-stopped

  qbittorrent:
    image: lscr.io/linuxserver/qbittorrent:latest
    container_name: qbittorrent
    network_mode: "service:gluetun"     # share Gluetun's netns (so 127.0.0.1 works)
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Australia/Sydney
      - WEBUI_PORT=8080                 # (linuxserver env is WEBUI_PORT)
    volumes:
      - ./qbittorrent/config:/config
      - /mnt/hdd_6tb/torrents:/downloads
    depends_on:
      - gluetun
    restart: unless-stopped