2 clients on vpn + tailscale

version: '3.8'

services:
  wireguard:
    image: thrnz/wireguard-pia
    container_name: wireguard
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    sysctls:
      - net.ipv4.conf.all.src_valid_mark=1
    environment:
      - REGION=us_california
      - USER=piausername
      - PASS=piapassword
      - PORT_FORWARDING=1
    volumes:
      - ./pia-config:/pia
    restart: unless-stopped

  transmission:
    image: linuxserver/transmission
    container_name: transmission
    network_mode: "service:wireguard"
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Etc/UTC
      - USER=transmission
      - PASS=securepassword
    volumes:
      - ./downloads:/downloads
      - ./watch:/watch
      - ./config/transmission:/config
    depends_on:
      - wireguard

  transmission-ts:
    image: tailscale/tailscale
    container_name: ts-transmission
    hostname: ts-transmission
    network_mode: "service:transmission"
    cap_add:
      - NET_ADMIN
    environment:
      - TS_AUTHKEY=tskey-...
    volumes:
      - ./ts-state/transmission:/var/lib/tailscale
      - /dev/net/tun:/dev/net/tun
    command: tailscaled
    depends_on:
      - transmission

  qbittorrent:
    image: linuxserver/qbittorrent
    container_name: qbittorrent
    network_mode: "service:wireguard"
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Etc/UTC
      - WEBUI_PORT=8080
    volumes:
      - ./downloads:/downloads
      - ./watch:/watch
      - ./config/qbittorrent:/config
    depends_on:
      - wireguard

  qbittorrent-ts:
    image: tailscale/tailscale
    container_name: ts-qbittorrent
    hostname: ts-qbittorrent
    network_mode: "service:qbittorrent"
    cap_add:
      - NET_ADMIN
    environment:
      - TS_AUTHKEY=tskey-...
    volumes:
      - ./ts-state/qbittorrent:/var/lib/tailscale
      - /dev/net/tun:/dev/net/tun
    command: tailscaled
    depends_on:
      - qbittorrent