---

docker_users:
  - ladmin

docker_networks:
  - name: torrent
    driver: bridge
    driver_options:
      # com.docker.network.bridge.name: docker-torrent
      com.docker.network.bridge.enable_ip_masquerade: true
      com.docker.network.bridge.enable_icc: true
      # com.docker.network.container_iface_prefix: container-torrent
    attachable: true
    enable_ipv6: false
    internal: false
    ipam:
      - subnet: 192.168.99.0/24
        gateway: 192.168.99.254

docker_volumes:
  - name: torrent-data
    driver: local
    driver_options:
      type: none
      device: /media/nvme/downloads
      o: bind
  - name: torrent-config
    driver: local
    driver_options:
      type: none
      device: /etc/qbittorrent
      o: bind

docker_images:
  - name: hotio/qbittorrent
    tag: release

docker_containers:
  - name: qbittorrent
    image: hotio/qbittorrent:release
    auto_remove: false
    capabilities:
      - NET_ADMIN
    domainname: balsillie.house
    env:
      PUID: '968'
      PGID: '968'
      UMASK: '002'
      TZ: Pacific/Auckland
      WEBUI_PORTS: 8080/tcp
      VPN_ENABLED: 'true'
      VPN_CONF: 'wg0'
      VPN_PROVIDER: 'proton'
      VPN_LAN_NETWORK: ''
      VPN_LAN_LEAK_ENABLED: 'false'
      VPN_EXPOSE_PORTS_ON_LAN: ''
      VPN_AUTO_PORT_FORWARD: 'true'
      VPN_AUTO_PORT_FORWARD_TO_PORTS: ''
      VPN_KEEP_LOCAL_DNS: 'false'
      VPN_FIREWALL_TYPE: 'nftables'
      VPN_HEALTHCHECK_ENABLED: 'true'
      PRIVOXY_ENABLED: 'false'
      UNBOUND_ENABLED: 'false'
    etc_hosts:
      tv.balsillie.house: 192.168.99.254
      movies.balsillie.house: 192.168.99.254
    hostname: torrent
    networks:
      - name: torrent
        aliases:
          - torrent
          - qbittorrent
        ipv4_address: 192.168.99.1
    restart_policy: 'unless-stopped'
    sysctls:
      net.ipv4.conf.all.src_valid_mark: 1
      net.ipv6.conf.all.disable_ipv6: 1
    volumes:
      - torrent-config:/config:rw
      - torrent-data:/data:rw