version: '3.2'

services:
  traefik:
    image: traefik:latest
    container_name: traefik
    depends_on:
      - dockersock-proxy
    command: --api --acme.email=${ACME_EMAIL} --docker.domain=traefik.${DOMAIN_BASE}
    networks:
      - web
      - default
      - dockersock-traefik-proxy
    ports:
      - 80:80
      - 443:443
    labels:
      - "traefik.docker.network=web"
      - "traefik.enable=true"
      - "traefik.backend=traefik"
      - "traefik.frontend.rule=Host:traefik.${DOMAIN_BASE}"
      - "traefik.port=8080"
      - "com.centurylinklabs.watchtower.enable=true"
    volumes:
      - ${PERSISTENT_DIR}/traefik/traefik.toml:/traefik.toml
      - ${PERSISTENT_DIR}/traefik/acme.json:/acme.json
      - ${PERSISTENT_DIR}/traefik/traefik.htpasswd:/traefik.htpasswd
      - ${PERSISTENT_DIR}/traefik/log:/var/log
    restart: unless-stopped

  dockersock-proxy:
    image: tecnativa/docker-socket-proxy:latest
    container_name: dockersock-proxy
    environment:
      - CONTAINERS=1
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    networks:
      - dockersock-traefik-proxy
    ports:
      - 2375
    labels:
      - "com.centurylinklabs.watchtower.enable=true"
    restart: unless-stopped

  watchtower:
    image: containrrr/watchtower:latest
    container_name: watchtower
    command: --interval 900 --label-enable --cleanup
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    labels:
      - "com.centurylinklabs.watchtower.enable=true"
    restart: unless-stopped

  fail2ban:
    image: crazymax/fail2ban:latest
    container_name: fail2ban
    network_mode: "host"
    cap_add:
      - NET_ADMIN
      - NET_RAW
    volumes:
      - ${PERSISTENT_DIR}/traefik/log:/var/log:ro
      - ${PERSISTENT_DIR}/fail2ban/data:/data
    labels:
      - "com.centurylinklabs.watchtower.enable=true"
    restart: unless-stopped

  jackett:
    image: linuxserver/jackett:latest
    container_name: jackett
    networks:
      - web
    ports:
      - 9117:9117
    environment:
      - PUID=${PUID}
      - PGID=${PGID}
      - TZ=${TZ}
    volumes:
      - ${PERSISTENT_DIR}/jackett/config:/config
      - ${PERSISTENT_DIR}/jackett/downloads:/downloads
    labels:
      - "traefik.docker.network=web"
      - "traefik.enable=true"
      - "traefik.backend=jackett"
      - "traefik.frontend.rule=Host:jackett.${DOMAIN_BASE}"
      - "traefik.port=9117"
      - "com.centurylinklabs.watchtower.enable=true"
    restart: unless-stopped
  sonarr:
    image: linuxserver/sonarr:preview
    container_name: sonarr
    networks:
      - web
    ports:
      - 8989:8989
    environment:
      - PUID=${PUID}
      - PGID=${PGID}
      - TZ=${TZ}
    volumes:
      - ${PERSISTENT_DIR}/sonarr/config:/config
      - /volume1/Stefan/Downloads:/downloads
      - /volume1/Stefan/Anime:/anime
    labels:
      - "traefik.docker.network=web"
      - "traefik.enable=true"
      - "traefik.backend=sonarr"
      - "traefik.frontend.rule=Host:sonarr.${DOMAIN_BASE}"
      - "traefik.port=8989"
      - "com.centurylinklabs.watchtower.enable=true"
    restart: unless-stopped
  radarr:
    image: linuxserver/radarr
    container_name: radarr
    networks:
      - web
    ports:
      - 7878:7878
    environment:
      - PUID=${PUID}
      - PGID=${PGID}
      - TZ=${TZ}
    volumes:
      - ${PERSISTENT_DIR}/radarr/config:/config
      - /volume1/Stefan/Downloads:/downloads
      - /volume1/Stefan/Movies:/movies
    labels:
      - "traefik.docker.network=web"
      - "traefik.enable=true"
      - "traefik.backend=radarr"
      - "traefik.frontend.rule=Host:radarr.${DOMAIN_BASE}"
      - "traefik.port=7878"
      - "com.centurylinklabs.watchtower.enable=true"
    restart: unless-stopped
  deluge:
    image: linuxserver/deluge
    container_name: deluge
    networks:
      - web
    ports:
      - 8112:8112
    environment:
      - PUID=${PUID}
      - PGID=${PGID}
      - TZ=${TZ}
      - UMASK_SET=022
    volumes:
      - ${PERSISTENT_DIR}/deluge/config:/config
      - /volume1/Stefan/Downloads:/downloads
    labels:
      - "traefik.docker.network=web"
      - "traefik.enable=true"
      - "traefik.backend=deluge"
      - "traefik.frontend.rule=Host:deluge.${DOMAIN_BASE}"
      - "traefik.port=8112"
      - "com.centurylinklabs.watchtower.enable=true"
    restart: unless-stopped
  jellyfin:
    image: linuxserver/jellyfin
    container_name: jellyfin
    networks:
      - web
    ports:
      - 8096:8096
    environment:
      - PUID=${PUID}
      - PGID=${PGID}
      - TZ=${TZ}
    volumes:
      - ${PERSISTENT_DIR}/jellyfin/config:/config
      - /volume1/Stefan/Anime:/data/tvshows
      - /volume1/Stefan/Movies:/data/movies
      - /volume1/Share/Foto:/data/pictures
    labels:
      - "traefik.docker.network=web"
      - "traefik.enable=true"
      - "traefik.backend=jellyfin"
      - "traefik.frontend.rule=Host:jellyfin.${DOMAIN_BASE}"
      - "traefik.port=8096"
      - "com.centurylinklabs.watchtower.enable=true"
    restart: unless-stopped

networks:
  web:
    external: true
  dockersock-traefik-proxy:
  default:
    driver: bridge