docker-compose.yml

version: "3.7"
services:

  vpn-tunnel:
    image: linuxserver/wireguard:latest # alternatively, use "qmcgaw/gluetun" or "dperson/openvpn-client"
    container_name: tunnel-mango         # it does not even have to be defined in this compose file
    restart: unless-stopped
    # remove the stuff below here if you are not using wireguard
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    volumes:
      - /lib/modules:/lib/modules
      - wireguard-data-volume:/config
    sysctls:
      - net.ipv4.conf.all.src_valid_mark=1
      - net.ipv6.conf.all.disable_ipv6=0 # for raspberry pi compatibility?

  vpn-proxy:
    image: nginx:stable
    restart: unless-stopped
    environment:
      - TZ=America/Los_Angeles
    read_only: true
    tmpfs:
      - /var/run
      - /var/cache/nginx
    volumes:
      - $PWD/vpn-proxy.conf:/etc/nginx/conf.d/vpn-proxy.conf:ro # can't define a single file in the volumes section below
      - comm-volume:/comm
    network_mode: container:tunnel-mango
    depends_on:
      - container:tunnel-mango

  aggregator-proxy:
    image: nginx:stable
    restart: unless-stopped
    environment:
      TZ: America/Los_Angeles
    read_only: true
    ports:
      - 80:80/tcp
    tmpfs:
      - /var/run
      - /var/cache/nginx
    volumes:
      - $PWD/aggregator-proxy.conf:/etc/nginx/conf.d/aggregator-proxy.conf:ro # can't define a single file in the volumes section below
      - comm-volume:/comm
      - homepage-volume:/etc/nginx/html

  radarr:
    image: linuxserver/radarr:latest
    restart: unless-stopped
    volumes:
      - sharebear-volume:/sharebear
      - radarr-data-volume:/config
    environment:
      - TZ=America/Los_Angeles
      - PUID=2001
      - PGID=4321
    network_mode: service:aggregator-proxy
    depends_on:
      - service:aggregator-proxy

  lidarr:
    image: linuxserver/lidarr:latest
    restart: unless-stopped
    volumes:
      - sharebear-volume:/sharebear
      - lidarr-data-volume:/config
    environment:
      - TZ=America/Los_Angeles
      - PUID=2002
      - PGID=4321
    network_mode: service:aggregator-proxy
    depends_on:
      - service:aggregator-proxy

  sonarr:
    image: linuxserver/sonarr:latest
    restart: unless-stopped
    volumes:
      - sharebear-volume:/sharebear
      - sonarr-data-volume:/config
    environment:
      - TZ=America/Los_Angeles
      - PUID=2003
      - PGID=4321
    network_mode: service:aggregator-proxy
    depends_on:
      - service:aggregator-proxy

  readarr:
    image: linuxserver/readarr:develop
    restart: unless-stopped
    volumes:
      - sharebear-volume:/sharebear
      - readarr-data-volume:/config
    environment:
      - TZ=America/Los_Angeles
      - PUID=2004
      - PGID=4321
    network_mode: service:aggregator-proxy
    depends_on:
      - service:aggregator-proxy

  prowlarr:
    image: linuxserver/prowlarr:develop
    restart: unless-stopped
    environment:
      - TZ=America/Los_Angeles
      - PUID=2005
      - PGID=4321
    network_mode: container:tunnel-mango
    volumes:
      - prowlarr-data-volume:/config
    depends_on:
      - container:tunnel-mango
  
  rtorrent:
    image: crazymax/rtorrent-rutorrent:latest
    restart: unless-stopped
    volumes:
     - sharebear-volume:/sharebear
     - rtorrent-data-volume:/data
    environment:
     - TZ=America/Los_Angeles
     - PUID=2006
     - PGID=4321
    ulimits:
      nproc: 65535
      nofile:
        soft: 32000
        hard: 40000
    network_mode: container:tunnel-mango
    depends_on:
      - container:tunnel-mango

volumes:
  comm-volume: # leave this as tmpfs in RAM - it is for container to container communication
    driver_opts:
        type: tmpfs
        device: tmpfs
  homepage-volume: # this contains the HTML files for the status page
    driver: local
    driver_opts:
        o: bind,ro
        type: none
        device: "$PWD/html"
  sharebear-volume: # this is the downloads & media volume - change this to a persistent volume
    # external: true # recommend setting up this volume manually outside of docker-compose
    driver_opts:
        type: tmpfs
        device: tmpfs
  rtorrent-data-volume: # this is data for rtorrent - change this to a persistent volume
    driver_opts:
        type: tmpfs
        device: tmpfs
  prowlarr-data-volume: # this is data for prowlarr - change this to a persistent volume
    driver_opts:
        type: tmpfs
        device: tmpfs
  radarr-data-volume: # this is data for radarr - change this to a persistent volume
    driver_opts:
        type: tmpfs
        device: tmpfs
  lidarr-data-volume: # this is data for lidarr - change this to a persistent volume
    driver_opts:
        type: tmpfs
        device: tmpfs
  sonarr-data-volume: # this is data for sonarr - change this to a persistent volume
    driver_opts:
        type: tmpfs
        device: tmpfs
  readarr-data-volume: # this is data for readarr - change this to a persistent volume
    driver_opts:
        type: tmpfs
        device: tmpfs
  wireguard-data-volume: # writeable location of wg0.conf - remove this if you are not using wireguard 
    driver: local
    driver_opts:
        o: bind
        type: none
        device: "$PWD/wireguard/"
networks:
  default: