Docker Compose YAML -services behind wireguard

services:
  wireguard:
    image: linuxserver/wireguard #orig: lscr.io/linuxserver/wireguard
    container_name: wireguard
    hostname: wireguard
    networks:
      wireguard_net:
        ipv4_address: 10.0.1.100
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=America/New_York
    privileged: true
    volumes:
      - ./wireguard:/config
      - /lib/modules:/lib/modules
    ports:
      - 8180:8180 #qbittorrent
      - 6881:6881 #qbittorrent
      - 6881:6881/udp #qbittorrent
      - 8280:8280 #sabnzb
      - 8081:8081 # MeTube
    sysctls:
      - net.ipv4.conf.all.src_valid_mark=1
      - net.ipv6.conf.all.disable_ipv6=0
    restart: unless-stopped # no | always | on-failure | unless-stopped
  qbittorrent:
    image: linuxserver/qbittorrent #orig: lscr.io/linuxserver/qbittorrent:latest
    container_name: qbittorrent
    depends_on:
      - wireguard
    network_mode: service:wireguard
    #    deploy:
    #      resources:
    #        limits:
    #        cpus: "2.0"
    #          memory: 1G
    #        reservations:
    #          cpus: "2.0"
    #          memory: 1G
    #    mem_swappiness: 0 # Disable swap usage
    #    oom_kill_disable: false # Keep this false for safety
    #    ulimits:
    #      memlock:
    #        soft: -1
    #        hard: -1 # Allows locking memory in RAM
    #    stop_grace_period: 40s
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=America/New_York
      - WEBUI_PORT=8180
    volumes:
      - ./qbittorrent:/config
      - ../servarr-downloads:/downloads
    restart: unless-stopped # no | always | on-failure | unless-stopped
  sabnzb:
    image: linuxserver/sabnzbd #orig: lscr.io/linuxserver/sabnzbd:latest
    container_name: sabnzb
    #hostname: nzbget #produces an error against network-mode
    depends_on:
      - wireguard
    network_mode: service:wireguard
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=America/New_York
    volumes:
      - ./sabnzb:/config
      - ./sabnzb-scripts:/scripts
      - ./sabnzb/backups:/backups
      - ../servarr-downloads:/downloads #optional
    restart: unless-stopped # no | always | on-failure | unless--stopped
  metube:
    image: alexta69/metube:latest
    container_name: metube
    depends_on:
      - wireguard
    network_mode: service:wireguard
    environment:
      - UID=1000
      - GID=1000
      - TZ=America/New_York
      - YTDL_OPTIONS={"cookiefile":"/cookies/cookies.txt"}
      - DEFAULT_THEME=dark
    volumes:
      - docker_misc_downloads:/downloads
      - /mnt/synology-docker-downloads:/downloads
      - /mnt/cifs-docker-downloads:/downloads
      - ./metube/cookies.txt:/cookies/cookies/cookies.txt
    restart: unless-stopped # no | always | on-failure | unless--stopped
networks:
  wireguard_net:
    ipam:
      driver: default
      config:
        - subnet: 10.0.1.0/24

#volumes:
#  docker_misc_downloads:
#    external: true