docker-compose.yml

version: '3'

services:
    # Front-End Proxy and organizer
    openvpn:
        build: openvpn/
        hostname: helheim
        container_name: openvpn
        cap_add:
            - NET_ADMIN
        environment:
            - PUID=0
            - PGID=0
            - TZ=America/Denver
            - FILE__PASSWORD=/config/etc/VyperVPN.txt
            - INTERFACE=ens160
            - DOMAIN_NAME="docker.local"
        cap_add:
            - NET_ADMIN
        devices:
            - "/dev/net/tun:/dev/net/tun"
        privileged: true
        tty: true
        volumes:
            - /root/MediaRage/OpenVPN/data:/data
            - /root/MediaRage/OpenVPN/etc:/etc/openvpn
        networks:
            - internal
            - proxy
        ports:
            # OpenVPN-as
            - 943:943
            - 9443:9443
            - 1194:1194/udp
            # traefik
            #- 80:80
            #- 443:443
            # Sonaar
            - 8989:8989
            # Radarr
            - 7878:7878
            # Ombi
            - 3579:3579
            # Portainer
            - 2375:2375
            - 8000:8000
            - 9000:9000
        labels:
            - "traefik.enable=true"
            - "traefik.http.routers.openvpn.rule=Host(`openvpn`)"
            - "traefik.http.services.openvpn.loadbalancer.server.port=1194"
        restart: always

    traefik:
        container_name: traefik
        image: camel:5000/traefik
        restart: always
        domainname: docker.localhost
        environment:
            - PUID=0
            - PGID=0
            - TZ=America/Denver
            - DOMAIN_NAME="docker.local"
        command:  --api.insecure=true --providers.docker
        ports:
            - 80:80
            #- 443:443
            - 8080:8080
        volumes:
            - /etc/localtime:/etc/localtime:ro
            - /var/run/docker.sock:/var/run/docker.sock:ro
            - /root/MediaRage/traefik/traefik.toml:/etc/traefik.toml
        labels:
            - "traefik.enable=true"
            - "traefik.backend=docker"
            - "traefik.http.routers.traefik.rule=Host(`traefik`)"
            - "traefik.port=8080"
            - "traefik.http.services.traefik.loadbalancer.server.port=80"
            - "traefik.http.services.traefik.loadbalancer.server.port=8080"

    sonarr:
        image: camel:5000/sonarr
        depends_on:
            - openvpn
        container_name: sonarr
        network_mode: service:openvpn
        volumes:
            # Moved to /root for performance
            - /root/MediaRage/sonarr:/config
            #
            - "data02Downloads:/Downloads"
            - "data02TV:/tv"
            - "data02Anime:/anime"
            - /var/run/docker.sock:/var/run/docker.sock
        environment:
            - PUID=0
            - PGID=0
            - UMASK_SET=022
            - TZ=America/Denver
            - DOMAIN_NAME="docker.local"
        env_file:
            - uidgid.env
        labels:
            - "traefik.http.routers.sonarr.rule=Host(`sonarr`)"
            - "traefik.http.services.sonarr.loadbalancer.server.port=8989"
        restart: always

    radarr:
        image: camel:5000/radarr
        depends_on:
            - openvpn
        container_name: radarr
        network_mode: service:openvpn
        volumes:
            # Moved to /root for performance
            - /root/MediaRage/radarr:/config
            #
            - "data02Downloads:/Downloads"
            - "data02Movies:/Movies"
            - /mnt/data02/Movies/SortMe:/SortMe
            - /var/run/docker.sock:/var/run/docker.sock
        environment:
            - PUID=0
            - PGID=0
            - UMASK_SET=022
            - TZ=America/Denver
            - DOMAIN_NAME="docker.local"
        env_file:
            - uidgid.env
        labels:
            - "traefik.enable=true"
            - "traefik.http.routers.radarr.rule=Host(`radarr`)"
            - "traefik.http.services.radarr.loadbalancer.server.port=7878"
        restart: always

    portainer:
        container_name: portainer
        image: camel:5000/portainer
        depends_on:
            - openvpn
        environment:
            - PUID=0
            - PGID=0
            - UMASK_SET=022
            - TZ=America/Denver
            - DOMAIN_NAME="docker.local"
        network_mode: service:openvpn
        volumes:
            - /var/run/docker.sock:/var/run/docker.sock
            - /data/portainer_data:/data
        #  This should keep the container running even with no command specified
        tty: true
        labels:
            - "traefik.http.routers.portainer.rule=Host(`portainer`)"
            - "traefik.http.services.portainer.loadbalancer.server.port=2375"
        restart: always

    ombi:
        image: camel:5000/ombi
        depends_on:
            - openvpn
        container_name: ombi
        environment:
            - PUID=0
            - PGID=0
            - UMASK_SET=022
            - TZ=America/Denver
            - BASE_URL=/ombi #optional
            - DOMAIN_NAME="docker.local"
        network_mode: service:openvpn
        volumes:
            - /root/MediaRage/ombi:/config
        tty: true
        labels:
            - "traefik.http.routers.ombi.rule=Host(`ombi`)"
            - "traefik.http.services.ombi.loadbalancer.server.port=3579"
        restart: always

volumes:
    data02Downloads:
        driver_opts:
            type: "nfs"
            o: "addr=expeditor,nolock,soft,rw"
            device: ":/volume1/data02/Downloads"
    data02Configs:
        driver_opts:
            type: "nfs"
            o: "addr=expeditor,nolock,soft,rw"
            device: ":/volume1/data02/config"
    data02Movies:
        driver_opts:
            type: "nfs"
            o: "addr=expeditor,nolock,soft,rw"
            device: ":/volume1/data02/Movies"
    data02TV:
        driver_opts:
            type: "nfs"
            o: "addr=expeditor,nolock,soft,rw"
            device: ":/volume1/data02/Television"
    data02Anime:
        driver_opts:
            type: "nfs"
            o: "addr=expeditor,nolock,soft,rw"
            device: ":/volume1/data02/Anime"

networks:
  proxy:
      external: true
  internal:
      external: false