docker-compose.yml

version: '3.5'

services:
  ## vpnission (transmission-daemon + proton wireguard VPN)
  vpnission:
    restart: unless-stopped
    image: danackerson/vpnission:latest
    privileged: true
    container_name: vpnission
    environment:
      - GITHUB_RUN_ID=$GITHUB_RUN_ID
      - TRANSMISSION_HOST_NAME=$TRANSMISSION_HOST_NAME
      - PROTONVPN_SERVER=$PROTONVPN_SERVER
    volumes:
      - "/mnt/usb4TB/DLNA/torrents:/mnt/torrents"
      - "/etc/wireguard:/etc/wireguard"
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.vpnission.tls.domains=$TRANSMISSION_HOST_NAME"
      - "traefik.http.routers.vpnission.rule=Host(`$TRANSMISSION_HOST_NAME`)"
      - "traefik.http.routers.vpnission.middlewares=http-ratelimit@file,secHeaders@file"
      - "traefik.http.routers.vpnission.service=vpnission-svc"
      - "traefik.http.services.vpnission-svc.loadbalancer.server.port=9091"
    ports:
      - "9091:9091"
      - "51413:51413"
      - "51413:51413/udp"
    sysctls:
      - net.ipv4.conf.all.src_valid_mark=1

  ## jelly (https://jellyfin.org/docs/general/administration/installing.html)
  jelly:
    restart: unless-stopped
    image: jellyfin/jellyfin:latest
    container_name: jelly
    volumes:
      - "/srv/jellyfin/config:/config"
      - "/srv/jellyfin/cache:/cache"
      - "/mnt/usb4TB/DLNA:/media"
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.jelly.tls.domains=jelly.ackerson.de"
      - "traefik.http.routers.jelly.rule=Host(`jelly.ackerson.de`)"
      - "traefik.http.routers.jelly.middlewares=secHeaders@file"

  ## Traefik Server
  traefik:
    restart: unless-stopped
    image: traefik:2.8
    container_name: traefik
    volumes:
      - "/var/run/docker.sock:/var/run/docker.sock:ro"
      - "~/traefik/logs:/var/log/traefik/"
      - "/etc/letsencrypt/live/ackerson.de/fullchain.pem:/certs/ackde.crt"
      - "/etc/letsencrypt/live/ackerson.de/privkey.pem:/keys/ackde.key"
      - "~/traefik/dynamic_conf.yml:/dynamic_conf.yml"
      - "~/traefik/usersFile:/usersFile"
    command:
      - "--accesslog.filepath=/var/log/traefik/access.log"
      - "--log.filepath=/var/log/traefik/traefik.log"
      - "--log.level=WARN"
      - "--providers.docker.exposedByDefault=false"
      - "--providers.file.filename=/dynamic_conf.yml"
      - "--entrypoints.web.address=:80"
      - "--entrypoints.secure.address=:443"
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.https-redirect.rule=HostRegexp(`{any:.*}`)"
      - "traefik.http.routers.https-redirect.middlewares=https-redirect@docker"
      - "traefik.http.middlewares.https-redirect.redirectscheme.scheme=https"
      - "traefik.http.middlewares.https-redirect.redirectscheme.permanent=true"
      - "traefik.http.middlewares.https-redirect.redirectscheme.port=443"
    ports:
      - "80:80"
      - "443:443"