---
services:
  gluetun:
    image: qmcgaw/gluetun
    restart: unless-stopped
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun:/dev/net/tun
    environment:
      - TZ=America/Vancouver
      - VPN_TYPE=wireguard
      - VPN_SERVICE_PROVIDER=mullvad
      - SERVER_HOSTNAMES=  # Mullvad server id, eg us-sea-wg-001, from https://mullvad.net/en/servers
      - WIREGUARD_PRIVATE_KEY=  # Download a wireguard configuration file from mullvads website and copy the private key here
      - WIREGUARD_ADDRESSES=  # and the address here
      - DNS_ADDRESS=1.1.1.1
      - DNS_UPSTREAM_RESOLVER_TYPE=doh
      - BLOCK_MALICIOUS=off 
    ports:
      - 15000:15000  # All traffic to qbittorrent goes through gluetun; set qbits WEBUI_PORT here and on line 30; see https://github.com/qdm12/gluetun-wiki/blob/main/setup/port-mapping.md

  qbittorrent:
    image: lscr.io/linuxserver/qbittorrent:latest
    restart: unless-stopped
    environment:
      - PUID=1000 
      - PGID=1000
      - TZ=America/Vancouver
      - WEBUI_PORT=15000  # This needs to match the port mapping on line 21
    volumes:
      - config:/config
      - /srv/bittorrent/:/downloads  # Downloads folder from host shared between qbit and servarr containers; set UID/GID on line 27 & 28 to match the owner/group on host
    network_mode: "service:gluetun"

volumes:
  config: