services:
  gluetun:
    image: qmcgaw/gluetun
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    network_mode: bridge
    devices:
      - /dev/net/tun:/dev/net/tun
    ports:
      - 8888:8888/tcp       # Gluetun HTTP proxy
      - 8388:8388/tcp       # Shadowsocks TCP
      - 8388:8388/udp       # Shadowsocks UDP

      # qBittorrent WebUI
      - 8080:8080

      # QUI WebUI
      - 7476:7476

      # AutoBrr WebUI
      - 7474:7474

    volumes:
      - /mnt/share/share:/data
    environment:
      - VPN_SERVICE_PROVIDER=mullvad
      - VPN_TYPE=wireguard
      - WIREGUARD_PRIVATE_KEY=UPW8ZplHpsrslWgzRNYclVts5P2Cx5m/qD0VOAqJsmc=
      - WIREGUARD_ADDRESSES=10.64.54.246/32
      - TZ=Europe/Berlin
      - UPDATER_PERIOD=24h
      - FIREWALL_INPUT_PORTS=8080,7476,7474
      - FIREWALL_OUTBOUND_SUBNETS=192.168.178.0/24
    restart: unless-stopped

  qbittorrent:
    image: linuxserver/qbittorrent
    network_mode: "service:gluetun"
    depends_on:
      - gluetun
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Berlin
      - WEBUI_PORT=8080
    volumes:
      - /mnt/share/qbittorrent/config:/config
      - /mnt/share/share/downloads:/downloads
    entrypoint: >
      /bin/sh -c "
      mkdir -p /config/qBittorrent &&
      CONF=/config/qBittorrent/qBittorrent.conf &&
      touch $$CONF &&
      grep -q '\\[Preferences\\]' $$CONF || echo '[Preferences]' >> $$CONF &&
      sed -i '/WebUI\\\\Password_PBKDF2/d' $$CONF &&
      sed -i '/\\[Preferences\\]/a WebUI\\\\Password_PBKDF2=\"@ByteArray(ARQ77eY1NUZaQsuDHbIMCA==:0WMRkYTUWVT9wVvdDtHAjU9b3b7uB8NR1Gur2hmQCvCDpm39Q+PsJRJPaCU51dEiz+dTzh8qbPsL8WkFljQYFQ==)\"' $$CONF &&
      exec /init
      "
    restart: unless-stopped

  qui:
    image: ghcr.io/autobrr/qui:latest
    container_name: qui
    network_mode: "service:gluetun"
    depends_on:
      - qbittorrent
    volumes:
      - /mnt/share/qui:/config
    restart: unless-stopped

  autobrr:
    image: ghcr.io/autobrr/autobrr:latest
    network_mode: "service:gluetun"
    depends_on:
      - gluetun
    environment:
      - TZ=Europe/Berlin
      - AUTOBRR__HOST=0.0.0.0
      - AUTOBRR__PORT=7474
    volumes:
      - /mnt/share/autobrr:/config
    restart: unless-stopped