version: "2.1"

services:
  gluetun:
    image: qmcgaw/gluetun
    container_name: gluetun
    cap_add:
      - NET_ADMIN
    ports:
      - 8080:8080       # qbit
      - 40605:6881     # qbit
      - 40605:6881/udp # qbit
    environment:
      - VPN_SERVICE_PROVIDER=mullvad
      - VPN_TYPE=wireguard
      - SERVER_CITIES=Toronto
    env_file:
      - .env
    restart: unless-stopped
    networks:
      - proxy

  qbittorrent:
    image: lscr.io/linuxserver/qbittorrent:4.6.0-r0-ls294
    container_name: qbittorrent
    environment:
      - PUID=1001
      - PGID=1001
      - TZ=America/New_York
      - WEBUI_PORT=8080
    volumes:
      - /media/qbittorrent/config:/config
      - /media/qbittorrent/downloads:/downloads
    restart: unless-stopped
    network_mode: service:gluetun
    depends_on:
      gluetun:
        condition: service_healthy
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.qbittorrent-websecure.entrypoints=websecure"
      - "traefik.http.routers.qbittorrent-websecure.rule=Host(`qbittorrent.meftimes.com`)"
      - "traefik.http.routers.qbittorrent-websecure.service=qbittorrent-websecure"
      # - "traefik.http.routers.qbittorrent.middlewares=authelia@docker"
      - "traefik.http.services.qbittorrent-websecure.loadbalancer.server.port=8080"

networks:
  proxy:
    external: true