version: "3"
services:
  gluetun:
    image: qmcgaw/gluetun:latest
    container_name: gluetun
    # line above must be uncommented to allow external containers to connect. See https://github.com/qdm12/gluetun/wiki/Connect-a-container-to-gluetun#external-container-to-gluetun
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun:/dev/net/tun
    ports:
      - 8888:8888/tcp # HTTP proxy
      - 8388:8388/tcp # Shadowsocks
      - 8388:8388/udp # Shadowsocks
      - 8080:8080/tcp # sabnzbd webUI
      - 8085:8085/tcp # sabnzbd webUI
    volumes:
      - /vpn-gluetun:/gluetun
    environment:
      # See https://github.com/qdm12/gluetun/wiki
      - VPN_SERVICE_PROVIDER=mullvad
      - VPN_TYPE=wireguard
      # Wireguard:
      # - mullvad device name "adaptive human" Created 2022-11-10
      - WIREGUARD_PRIVATE_KEY=OMXf1VjWAX55MuTMnCsA0bZmNkwfRYxqvJF9qpBUQEE=
      - WIREGUARD_ADDRESSES=10.67.7.220/32
      - TZ=America/New_York # Timezone for accurate log times
      # optional, server_[countries, cities]
      # - SERVER_COUNTRIES: Comma separated list of countries
      # - SERVER_CITIES=Stockholm
      # - SERVER_HOSTNAMES: Comma separated list of server hostnames
    restart: always
  sabnzbd:
    image: lscr.io/linuxserver/sabnzbd:latest
    container_name: sabnzbd
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=America/New_York
    volumes:
      - /mnt/d/docker/sabnzbd/config:/config
      - /mnt/d/media/downloads/sabnzbd/complete:/downloads
      - /mnt/d/media/downloads/sabnzbd/incomplete:/incomplete-downloads
    # network_mode: "service:gluetun" forces sabnzbd to connect to the internet through the VPN defined in the gluetun container above
    network_mode: "service:gluetun"
    restart: always