networks:
  caddy:
    name: caddy
  qbit:
    name: qbit
  shoko:
    name: shoko
  arr:
    name: arr
  bookstack:
    name: bookstack

services:
  bookstack:
    image: lscr.io/linuxserver/bookstack
    container_name: bookstack
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=America/Chicago
      - APP_URL=https://bookstack.mintyserver.net
      - DB_HOST=bookstack_db
      - DB_PORT=3306
      - DB_USER=bookstack
      - DB_PASS=${PASS}
      - DB_DATABASE=bookstackapp
    volumes:
      - bookstack:/config
      #ports:
      #- 6875:80
    restart: unless-stopped
    depends_on:
      - bookstack_db
    networks:
      - caddy
      - bookstack
  
  bookstack_db:
    image: lscr.io/linuxserver/mariadb
    container_name: bookstack_db
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=America/Chicago
      - MYSQL_ROOT_PASSWORD=${PASS}
      - MYSQL_DATABASE=bookstackapp
      - MYSQL_USER=bookstack
      - MYSQL_PASSWORD=${PASS}
    volumes:
      - bookstack_db:/config
    restart: unless-stopped
    networks:
      - bookstack


  maigret:
    image: soxoj/maigret:latest
    container_name: maigret
    volumes:
      - /mnt/nextcloud/poslop/Maigret:/app/reports

  gluetun:
    image: ghcr.io/qdm12/gluetun
    cap_add:
      - NET_ADMIN
    container_name: gluetun
    environment:
      - VPN_SERVICE_PROVIDER=mullvad
      - VPN_TYPE=wireguard
      - WIREGUARD_PRIVATE_KEY=${MULLKEY}
      - WIREGUARD_ADDRESSES=10.64.21.169/32
      - SERVER_CITIES=Chicago IL
        #- LOG_LEVEL=debug
    volumes:
      - gluetun:/gluetun
    ports:
      - 8181:8181
      - 6881:6881
      - 6881:6881/udp
    restart: unless-stopped
    networks:
      - qbit

  caddy:
    image: caddy:latest
    container_name: caddy
    restart: unless-stopped
    cap_add:
      - NET_ADMIN
    ports:
      - 80:80
      - 443:443
      - 443:443/udp
    volumes:
      - caddy_set:/etc/caddy
      - caddy_srv:/srv
      - caddy_data:/data
      - caddy_config:/config
    networks:
      - caddy
        #ipv4_address: 172.20.0.10


  technitium:
    container_name: technitium
    image: technitium/dns-server:latest
    network_mode: "host"
        # ports:
        #   - "5380:5380/tcp" #DNS web console (HTTP)
        #   # - "53443:53443/tcp" #DNS web console (HTTPS)
        #   - "53:53/udp" #DNS service
        #   - "53:53/tcp" #DNS service
        #   # - "853:853/udp" #DNS-over-QUIC service
        #   # - "853:853/tcp" #DNS-over-TLS service
        #   # - "443:443/udp" #DNS-over-HTTPS service (HTTP/3)
        #   # - "443:443/tcp" #DNS-over-HTTPS service (HTTP/1.1, HTTP/2)
        #   # - "80:80/tcp" #DNS-over-HTTP service (use with reverse proxy or certbot certificate renewal)
        #   # - "8053:8053/tcp" #DNS-over-HTTP service (use with reverse proxy)
        #   # - "67:67/udp" #DHCP service      
    environment:
      - DNS_SERVER_DOMAIN=technitium #The primary domain name used by this DNS Server to identify itself.
      - DNS_SERVER_ADMIN_PASSWORD=${PASS}
    volumes:
      - technitium:/etc/dns
    restart: unless-stopped
      #    sysctls:
      #      - net.ipv4.ip_local_port_range=1024 65000

  prowlarr:
    image: lscr.io/linuxserver/prowlarr:latest
    container_name: prowlarr
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Etc/UTC
    volumes:
      - prowlarr:/config
    ports:
      - 9696:9696
    restart: unless-stopped
    networks:
      - arr
      - qbit

  sonarr:
    image: lscr.io/linuxserver/sonarr:latest
    container_name: sonarr
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Etc/UTC
    volumes:
      - sonarr:/config
      - /mnt/massdrive/media:/mnt/media
    ports:
      - 8989:8989
    restart: unless-stopped
    networks:
      - arr
      - qbit

  qbittorrent:
    image: lscr.io/linuxserver/qbittorrent:latest
    container_name: qbittorrent
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Etc/UTC
      - WEBUI_PORT=8181
    network_mode: "service:gluetun"
    volumes:
      - qbittorrent:/config
      - /mnt/nextcloud:/mnt/files
    restart: unless-stopped
    depends_on:
      gluetun:
        condition: service_healthy
      #networks: 
      #- qbit

  shoko:
    shm_size: 256m
    container_name: shoko
    image: shokoanime/server:daily
    restart: always
    environment:
      - "PUID=1000"
      - "PGID=1000"
      - "TZ=Etc/UTC"
    ports:
      - "8111:8111"
    volumes:
      - shoko:/home/shoko/.shoko
      - /mnt/massdrive/media:/mnt/media
    networks: 
      - shoko


  vaultwarden:
    image: vaultwarden/server:latest
    container_name: vaultwarden
    restart: unless-stopped
    environment: 
      DOMAIN: "https://vault.mintyserver.net"
      WEBSOCKET_ENABLED: true
      SIGNUPS_ALLOWED: false
      ADMIN_TOKEN: ${PASS} 
    volumes:
      - vaultwarden:/data
    networks: 
      - caddy
    ports:
      - 8089:80


  monerod:
    image: sethsimmons/simple-monerod:latest
    restart: unless-stopped
    container_name: monerod
    volumes:
      - bitmonero:/home/monero/.bitmonero:rw
    ports:
      - 18080:18080
      - 18089:18089
      - 18083:18083
    command:
      - "--add-priority-node=p2pmd.xmrvsbeast.com:18080"
        #- "--add-priority-node=nodes.hashvault.pro:18080"
      - "--out-peers=32"
      - "--in-peers=64"
      - "--disable-dns-checkpoints"
      - "--rpc-restricted-bind-ip=0.0.0.0"
      - "--rpc-restricted-bind-port=18089"
      - "--no-igd"
      - "--enable-dns-blocklist"
      - "--prune-blockchain"
      - "--zmq-pub=tcp://0.0.0.0:18083"

  p2pool:
    image: sethsimmons/p2pool:latest
    restart: unless-stopped
    container_name: p2pool
    tty: true
    stdin_open: true
    volumes: 
      - p2pool-data:/home/p2pool
      - /dev/hugepages:/dev/hugepages:rw
    ports:
      - 3333:3333
      - 37889:37889
    command: >-
      --wallet "48Whozrwq4jDA6JZ3vJw3Z22VFCCdi4MnLDH5WfHX33w8ehHZ3hRsJC6JBFmgau8BjbXzfL6Um1GdGNfzzbqueDGPhSusji"
      --stratum "0.0.0.0:3333" --p2p "0.0.0.0:37889" --rpc-port "18089"
      --host "monerod"
      --loglevel 1


  ariang:
    image: hurlenko/aria2-ariang
    container_name: aria
      #ports: 
      #- 8989:8080
    restart: unless-stopped
    volumes: 
      - /mnt/nextcloud:/aria2/data
      - ariang:/aria2/conf
    environment:
      - PUID=1000
      - PGID=1000
      - RPC_SECRET=${PASS}
      - BASIC_AUTH_USERNAME=poslop
      - BASIC_AUTH_PASSWORD=${PASS}
      - ARIA2RPCPORT=443
    networks:
      - caddy
        # network_mode: none

  searxng:
    image: searxng/searxng:latest
    container_name: searxng
    environment: 
      - BASE_URL=https://searxng.mintyserver.net
    volumes:
      - searxng:/etc/searxng
        #    ports:
        #      - 8998:8080
    restart: unless-stopped
    networks: 
      - caddy

  puffer:
    image: pufferpanel/pufferpanel:latest
    container_name: puffer
    restart: always
        #ports:
        #  - 8081:8080
        #  - 5657:5657
    volumes:
      - puffer-config:/etc/pufferpanel
      - /var/lib/pufferpanel:/var/lib/pufferpanel
      - /var/run/docker.sock:/var/run/docker.sock
    networks: 
      - caddy

  gitea:
   image: gitea/gitea:latest
   container_name: gitea
   environment:
     - GITEA__service__DISABLE_REGISTRATION=true
     - USER_UID=1000
     - USER_GID=1000
   restart: always
   volumes:
     - gitea:/data
     - /etc/timezone:/etc/timezone:ro
     - /etc/localtime:/etc/localtime:ro
   ports:
     - "3030:3000"
       #  - "222:22"
   networks: 
     - caddy
 
  jellyfin:
    image: lscr.io/linuxserver/jellyfin:latest
    container_name: jellyfin
    devices: 
      - /dev/dri:/dev/dri
    environment: 
      - PUID=1000
      - PGID=1000
      - TZ=America/Chicago
    volumes:
      - jellyfin:/config
      - /mnt/massdrive/media:/data
    ports:
        #   - 7359:7359/udp
        #   - 1900:1900/udp
      - 8096:8096
    restart: unless-stopped
    networks:
      - caddy
      - shoko

  nextcloud:
    container_name: nextcloud-aio-mastercontainer
    init: true
    restart: unless-stopped
    image: nextcloud/all-in-one:latest
    volumes:
      - nextcloud_aio_mastercontainer:/mnt/docker-aio-config
      - /var/run/docker.sock:/var/run/docker.sock:ro
    ports:
      # - 8666:80
      - 8080:8080
        # - 8443:8443
    environment:
      - APACHE_PORT=11000
      - APACHE_IP_BINDING=0.0.0.0
        #- NEXTCLOUD_DATADIR=/mnt/docker/configs/ncaio
      - NEXTCLOUD_MOUNT=/mnt/nextcloud/
      - NEXTCLOUD_MEMORY_LIMIT=4096M

  watchtower:
    image: containrrr/watchtower
    container_name: watchtower
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock


volumes:
  caddy_config:
    name: caddy_config
  caddy_data:
    name: caddy_data
  caddy_srv:
    name: caddy_srv
  caddy_set:
    name: caddy_set
  vaultwarden:
    name: vaultwarden
    external: true
  qbittorrent:
    name: qbittorrent
    external: true
  shoko:
    name: shoko
    external: true
  ariang:
    name: ariang
  puffer-config:
    name: puffer-config
  searxng:
    name: searxng
    external: true
  jellyfin: 
    name: jellyfin
  gitea:
    name: gitea
  technitium:
    name: technitium
    external: true
  sonarr:
    name: sonarr
  prowlarr:
    name: prowlarr
    external: true
  nextcloud_aio_mastercontainer:
    name: nextcloud_aio_mastercontainer
  bitmonero:
    name: bitmonero
  p2pool-data:
    name: p2pool-data
  gluetun:
    name: gluetun
  bookstack:
    name: bookstack
  bookstack_db:
    name: booksstack_db