networks:
  swag:
    name: swag
    ipam:
      config:
        - subnet: 172.20.0.0/16
  qbit:
    name: qbit
  shoko:
    name: shoko
  arr:
    name: arr

services:
  firefox:
    image: lscr.io/linuxserver/firefox:latest
    container_name: firefox
    security_opt:
      - seccomp:unconfined #optional
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Etc/UTC
    volumes:
      - firefox:/config
    ports:
      - 3003:3000
      - 3004:3001
    shm_size: "1gb"
    restart: unless-stopped

  librewolf:
    image: d3ec5f138a5c
    container_name: librewolf
    security_opt:
      - seccomp:unconfined #optional
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Etc/UTC
    volumes:
      - librewolf-conf:/config
    ports:
      - 3000:3000
      - 3001:3001
    shm_size: "10gb"
    restart: unless-stopped

  syncthing:
    image: lscr.io/linuxserver/syncthing:latest
    container_name: syncthing
    environment:
      - PUID=1000
      - PGID=1000
    volumes:
      - syncdata:/config
      - /mnt/nextcloud:/mnt/files
    ports:
      - 8384:8384
      - 22000:22000/tcp
      - 22000:22000/udp
      - 21027:21027/udp
    restart: unless-stopped

  caddy:
    image: caddy:latest
    container_name: caddy
    restart: unless-stopped
    cap_add:
      - NET_ADMIN
    ports:
      - 80:80
      - 443:443
      - 443:443/udp
    volumes:
      - caddy_set:/etc/caddy
      - caddy_srv:/srv
      - caddy_data:/data
      - caddy_config:/config
    networks:
      swag:
        ipv4_address: 172.20.0.10


  technitium:
    container_name: technitium
    image: technitium/dns-server:latest
    network_mode: "host"
        # ports:
        #   - "5380:5380/tcp" #DNS web console (HTTP)
        #   # - "53443:53443/tcp" #DNS web console (HTTPS)
        #   - "53:53/udp" #DNS service
        #   - "53:53/tcp" #DNS service
        #   # - "853:853/udp" #DNS-over-QUIC service
        #   # - "853:853/tcp" #DNS-over-TLS service
        #   # - "443:443/udp" #DNS-over-HTTPS service (HTTP/3)
        #   # - "443:443/tcp" #DNS-over-HTTPS service (HTTP/1.1, HTTP/2)
        #   # - "80:80/tcp" #DNS-over-HTTP service (use with reverse proxy or certbot certificate renewal)
        #   # - "8053:8053/tcp" #DNS-over-HTTP service (use with reverse proxy)
        #   # - "67:67/udp" #DHCP service      
    environment:
      - DNS_SERVER_DOMAIN=technitium #The primary domain name used by this DNS Server to identify itself.
      - DNS_SERVER_ADMIN_PASSWORD=${PASS}
    volumes:
      - technitium:/etc/dns
    restart: unless-stopped
      #    sysctls:
      #      - net.ipv4.ip_local_port_range=1024 65000

  prowlarr:
    image: lscr.io/linuxserver/prowlarr:latest
    container_name: prowlarr
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Etc/UTC
    volumes:
      - prowlarr:/config
    ports:
      - 9696:9696
    restart: unless-stopped
    networks:
      - arr
      - qbit

  sonarr:
    image: lscr.io/linuxserver/sonarr:latest
    container_name: sonarr
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Etc/UTC
    volumes:
      - sonarr:/config
      - /mnt/massdrive/media:/mnt/media
    ports:
      - 8989:8989
    restart: unless-stopped
    networks:
      - arr
      - qbit

  qbittorrent:
    image: lscr.io/linuxserver/qbittorrent:latest
    container_name: qbittorrent
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Etc/UTC
      - WEBUI_PORT=8181
    volumes:
      - qbittorrent:/config
      - /mnt/nextcloud:/mnt/files
    ports:
      - 8181:8181
      - 6881:6881
      - 6881:6881/udp
    restart: unless-stopped
    networks: 
      - qbit

  shoko:
    shm_size: 256m
    container_name: shoko
    image: shokoanime/server:daily
    restart: always
    environment:
      - "PUID=1000"
      - "PGID=1000"
      - "TZ=Etc/UTC"
    ports:
      - "8111:8111"
    volumes:
      - shoko:/home/shoko/.shoko
      - /mnt/massdrive/media:/mnt/media
    networks: 
      - shoko


  vaultwarden:
    image: vaultwarden/server:latest
    container_name: vaultwarden
    restart: unless-stopped
    environment: 
      DOMAIN: "https://vault.mintyserver.net"
      WEBSOCKET_ENABLED: true
      SIGNUPS_ALLOWED: false
      ADMIN_TOKEN: ${PASS} 
    volumes:
      - vaultwarden:/data
    networks: 
      - swag
    ports:
      - 8089:80


  monerod:
    image: sethsimmons/simple-monerod:latest
    restart: unless-stopped
    container_name: monerod
    volumes:
      - bitmonero:/home/monero/.bitmonero:rw
    ports:
      - 18080:18080
      - 18089:18089
      - 18083:18083
    command:
      - "--disable-dns-checkpoints"
      - "--rpc-restricted-bind-ip=0.0.0.0"
      - "--rpc-restricted-bind-port=18089"
      - "--no-igd"
      - "--enable-dns-blocklist"
      - "--prune-blockchain"
      - "--zmq-pub=tcp://0.0.0.0:18083"

  p2pool:
    image: sethsimmons/p2pool:latest
    restart: unless-stopped
    container_name: p2pool
    tty: true
    stdin_open: true
    volumes: 
      - p2pool-data:/home/p2pool
      - /dev/hugepages:/dev/hugepages:rw
    ports:
      - 3333:3333
      - 37889:37889
    command: >-
      --wallet "48Whozrwq4jDA6JZ3vJw3Z22VFCCdi4MnLDH5WfHX33w8ehHZ3hRsJC6JBFmgau8BjbXzfL6Um1GdGNfzzbqueDGPhSusji"
      --stratum "0.0.0.0:3333" --p2p "0.0.0.0:37889" --rpc-port "18089"
      --host "monerod"
      --loglevel 1


  ariang:
    image: hurlenko/aria2-ariang
    container_name: aria
      #ports: 
      #- 8989:8080
    restart: unless-stopped
    volumes: 
      - /mnt/nextcloud:/aria2/data
      - ariang:/aria2/conf
    environment:
      - PUID=1000
      - PGID=1000
      - RPC_SECRET=${PASS}
      - BASIC_AUTH_USERNAME=poslop
      - BASIC_AUTH_PASSWORD=${PASS}
      - ARIA2RPCPORT=443
    networks:
      - swag
        # network_mode: none

  searxng:
    image: searxng/searxng:latest
    container_name: searxng
    environment: 
      - BASE_URL=https://searxng.mintyserver.net
    volumes:
      - searxng:/etc/searxng
        #    ports:
        #      - 8998:8080
    restart: unless-stopped
    networks: 
      - swag

  puffer:
    image: pufferpanel/pufferpanel:latest
    container_name: puffer
    restart: always
        #ports:
        #  - 8081:8080
        #  - 5657:5657
    volumes:
      - puffer-config:/etc/pufferpanel
      - /var/lib/pufferpanel:/var/lib/pufferpanel
      - /var/run/docker.sock:/var/run/docker.sock
    networks: 
      - swag

  gitea:
   image: gitea/gitea:latest
   container_name: gitea
   environment:
     - USER_UID=1000
     - USER_GID=1000
   restart: always
   volumes:
     - gitea:/data
     - /etc/timezone:/etc/timezone:ro
     - /etc/localtime:/etc/localtime:ro
   ports:
     - "3030:3000"
       #  - "222:22"
   networks: 
     - swag
 
  jellyfin:
    image: lscr.io/linuxserver/jellyfin:latest
    container_name: jellyfin
    devices: 
      - /dev/dri:/dev/dri
    environment: 
      - PUID=1000
      - PGID=1000
      - TZ=America/Chicago
    volumes:
      - jellyfin:/config
      - /mnt/massdrive/media:/data
        # ports:
        #   - 7359:7359/udp
        #   - 1900:1900/udp
        #   - 8096:8096
    restart: unless-stopped
    networks:
      - swag
      - shoko

        #swag:
        #  container_name: swag
        #  image: lscr.io/linuxserver/swag:latest
        #  restart: unless-stopped
        #  volumes:
        #    - swag:/config
        #  environment:
        #    - PUID=1000
        #    - PGID=1000
        #    - TZ=America/Chicago
        #    - URL=mintyserver.net
        #    - VALIDATION=http 
        #    - SUBDOMAINS=aria,git,nextcloud,jelly,searxng,puffer,vault
        #  ports:
        #    - 443:443
        #    - 80:80
        #  networks: 
        #    - swag

  nextcloud:
    container_name: nextcloud-aio-mastercontainer
    init: true
    restart: unless-stopped
    image: nextcloud/all-in-one:latest
    volumes:
      - nextcloud_aio_mastercontainer:/mnt/docker-aio-config
      - /var/run/docker.sock:/var/run/docker.sock:ro
    ports:
      # - 8666:80
      - 8080:8080
        # - 8443:8443
    environment:
      - APACHE_PORT=11000
      - APACHE_IP_BINDING=0.0.0.0
        #- NEXTCLOUD_DATADIR=/mnt/docker/configs/ncaio
      - NEXTCLOUD_MOUNT=/mnt/nextcloud/
      - NEXTCLOUD_MEMORY_LIMIT=4096M

  watchtower:
    image: containrrr/watchtower
    container_name: watchtower
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock


volumes:
  caddy_config:
    name: caddy_config
  caddy_data:
    name: caddy_data
  caddy_srv:
    name: caddy_srv
  caddy_set:
    name: caddy_set
  vaultwarden:
    name: vaultwarden
  qbittorrent:
    name: qbittorrent
  shoko:
    name: shoko
  ariang:
    name: ariang
  puffer-config:
    name: puffer-config
  puffer-lib:
    name: puffer-lib
  searxng:
    name: searxng
  jellyfin: 
    name: jellyfin
  gitea:
    name: gitea
  technitium:
    name: technitium
  sonarr:
    name: sonarr
  prowlarr:
    name: prowlarr
  nextcloud_aio_mastercontainer:
    name: nextcloud_aio_mastercontainer
  bitmonero:
    name: bitmonero
  p2pool-data:
    name: p2pool-data
  swag:
    name: swag
  syncdata:
    name: syncdata
  librewolf-conf:
    name: librewolf-conf
  firefox:
    name: firefox