Example Docker Compose Plex/Oracle/Wireguard

---
version: "2"
services:

  plex:
    container_name: plex
    image: plexinc/pms-docker
    restart: unless-stopped
    environment:
      - TZ=America/New_York
      - PLEX_CLAIM=[my claim token]
    network_mode: service:wireguard
    #ports:
    #  - 32400:32400 #port reservation is done in the wireguard container
    depends_on:
      - wireguard
    volumes:
      - /configs/Plex:/config
      - /plextranscode:/transcode
      - /srv/dev-disk-by-uuid-fa4bc6a8-3afb-4939-a860-7b2859288ca3/Music:/mnt/Music
      - /srv/dev-disk-by-uuid-fa4bc6a8-3afb-4939-a860-7b2859288ca3/Movies:/mnt/Movies
      - /srv/dev-disk-by-uuid-fa4bc6a8-3afb-4939-a860-7b2859288ca3/TV:/mnt/TV
      - /srv/dev-disk-by-uuid-fa4bc6a8-3afb-4939-a860-7b2859288ca3/Photos:/mnt/Photos
      - /var/lib/docker/volumes/servarr_shield_mount/_data:/mnt/Shield
    devices:
      - /dev/dri:/dev/dri

  wireguard:
    image: lscr.io/linuxserver/wireguard:latest
    container_name: wireguard
    labels:
      - "com.centurylinklabs.watchtower.enable=false" #this prevents Watchtower from auto-updating Wireguard (because that breaks Plex)
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    environment:
      - PUID=1000
      - PGID=100
      - TZ=America/New_York
    ports:
      - 32400:32400/tcp #Only the public Plex port is forwarded through Oracle, along with the UDP Wireguard connection port
      - 3005:3005/tcp #These ports below are for local Plex discovery only, not forwarded in Oracle
      - 8324:8324/tcp
      - 32469:32469/tcp
      - 1900:1900/udp
      - 32410:32410/udp
      - 32412:32412/udp
      - 32413:32413/udp
      - 32414:32414/udp
    networks:
      default:
        ipv4_address: 172.18.0.50 #This IP is part of the wg-oracle 172.18.0.0/24 subnet, which was defined outside this yaml
    volumes:
      - /configs/Wireguard:/config
      - /lib/modules:/lib/modules
    sysctls:
      - net.ipv4.conf.all.src_valid_mark=1
    restart: unless-stopped

networks:
  default:
    name: wg-oracle
    external: true