falcon.yml

volumes:
  netdata-lib:
  netdata-cache:

x-timezone: &tz
  TZ: Asia/Kolkata

x-environment-vars: &env
  PUID: 1001
  PGID: 1001
  UMASK: 002
  <<: *tz

networks:
  default:
    name: network1
    ipam:
      config:
        - subnet: 172.18.0.0/16

  mqtt:
    external: true

  vlan:
    name: vlan
    driver: macvlan
    driver_opts:
      parent: eth0
    ipam:
      config:
        - subnet: 10.0.0.1/24
          gateway: 10.0.0.1
          ip_range: 10.0.0.80/28 # 10.0.0.80 - 10.0.0.95

  proxy:
    name: proxy
    ipam:
      config:
        - subnet: 172.19.2.0/24

  media:
    name: media
    ipam:
      config:
        - subnet: 172.19.3.0/24

services:

  overseerr:
    container_name: overseerr
    image: linuxserver/overseerr
    restart: unless-stopped
    environment:
      <<: *env
    networks:
      - media
    volumes:
      - /opt/appdata/overseerr:/config
    labels:
      traefik.enable: true
      traefik.name: overseerr

  dashdot:
    container_name: dash.
    image: mauricenino/dashdot
    restart: unless-stopped
    privileged: true
    environment:
      DASHDOT_CPU_POLL_INTERVAL: 1500
      DASHDOT_NETWORK_POLL_INTERVAL: 1500
      DASHDOT_NETWORK_SHOWN_DATAPOINTS: 30
      DASHDOT_SPEED_TEST_INTERVAL: 1440
      DASHDOT_PAGE_TITLE: dash. - falcon
      DASHDOT_ENABLE_CPU_TEMPS: true
      DASHDOT_ENABLE_STORAGE_SPLIT_VIEW: true
      DASHDOT_ALWAYS_SHOW_PERCENTAGES: true
      DASHDOT_ACCEPT_OOKLA_EULA: true
    ports:
      - 81:3001
    volumes:
      - /:/mnt/host:ro
    labels:
      traefik.enable: true
      traefik.http.routers.dashdot.rule: Host(`falcon.nt`)

  samba:
    container_name: samba
    image: elswork/samba
    restart: unless-stopped
    command: ${SAMBA_COMMAND}
    healthcheck:
      disable: true
    logging:
      driver: none
    environment:
      <<: *tz
    ports:
      - 445:445/tcp
    volumes:
      - /opt/appdata/samba:/etc/samba
      - /mnt:/mnt
      - ~/:/ssd
      - /opt/storage:/nas

  pts:
    container_name: plextraktsync
    image: ghcr.io/taxel/plextraktsync
    restart: unless-stopped
    user: 1001:1001
    command: watch
    depends_on:
      - plex
    networks:
      - media
    environment:
      PTS_LOG_DIR: /logs
      <<: *tz
    tmpfs:
      - /logs:size=10m,uid=1001,gid=1001
    volumes:
      - /opt/appdata/plextraktsync:/app/config

  aria2:
    container_name: aria2
    image: hurlenko/aria2-ariang
    restart: unless-stopped
    environment:
      ARIA2RPCPORT: 80
      <<: *env
    volumes:
      - /opt/appdata/aria2:/aria2/conf
      - /opt/storage/downloads:/aria2/data
    labels:
      traefik.enable: true
      traefik.name: aria2

  vnstat:
    image: vergoh/vnstat
    container_name: vnstat
    restart: unless-stopped
    network_mode: host
    environment:
      SERVER_NAME: falcon
      HTTP_PORT: 7077
      LARGE_FONTS: 1
      HTTP_LOG: /dev/null
      <<: *tz
    volumes:
      - /opt/appdata/vnstat/vnstat.conf:/etc/vnstat.conf
      - /opt/appdata/vnstat:/var/lib/vnstat
    labels:
      traefik.enable: true
      traefik.name: vnstat
      traefik.http.services.vnstat.loadbalancer.server.port: 7077
      traefik.http.routers.vnstat.middlewares: vnstat-themecolor
      traefik.http.middlewares.vnstat-themecolor.plugin.rewritebody.rewrites.regex: </head>
      traefik.http.middlewares.vnstat-themecolor.plugin.rewritebody.rewrites.replacement: <meta name="theme-color" content="#333333"> </head>
      traefik.http.middlewares.vnstat-themecolor.plugin.rewritebody.rewrites.type: text/html

  traefik:
    container_name: traefik
    image: traefik
    restart: unless-stopped
    mem_limit: 200m
    command:
      - --log.level=INFO
      - --api.insecure=true
      - --global.checknewversion=false
      - --global.sendanonymoususage=false
      - --experimental.localplugins.rewritebody.modulename=github.com/packruler/rewrite-body
      - --providers.docker=true
      - --providers.docker.exposedByDefault=false
      - --providers.docker.defaultRule=Host(`{{ index .Labels "traefik.name" }}.falcon.nt`)
    extra_hosts:
      - "host.docker.internal:10.0.0.11"
    networks:
      - default
      - proxy
      - media
    ports:
      - 80:80/tcp
    volumes:
      - /opt/appdata/traefik/plugins:/plugins-local
      - /var/run/docker.sock:/var/run/docker.sock
    labels:
      traefik.enable: true
      traefik.http.routers.traefik.rule: Host(`web.falcon.nt`) || Host(`10.0.0.11`) || Host(`falcon`)
      traefik.http.routers.traefik.service: api@internal
      traefik.http.middlewares.homer-cors.headers.accessControlAllowMethods: GET #,PUT,OPTIONS
      traefik.http.middlewares.homer-cors.headers.accessControlAllowOriginList: http://home.lab

  archive:
    container_name: archivebox
    image: archivebox/archivebox
    restart: unless-stopped
    environment:
      MEDIA_MAX_SIZE: 750m
      <<: *env
    volumes:
      - /opt/appdata/archivebox:/data
    labels:
      traefik.enable: true
      traefik.name: archives

  filebrowser:
    image: filebrowser/filebrowser
    container_name: filebrowser
    restart: unless-stopped
    user: 1001:1001
    healthcheck:
      disable: true
    environment:
      FB_DATABASE: /config/database.db
      FB_DISABLE-EXEC: true
      FB_DISABLE-TYPE-DETECTION-BY-HEADER: true
      FB_DISABLE-PREVIEW-RESIZE: true
    volumes:
      - /opt/appdata/filebrowser:/config
      - ~/:/srv/home
      - /opt/storage:/srv/storage
      - /opt/appdata:/srv/appdata
      - /mnt:/srv/mnt
    labels:
      traefik.enable: true
      traefik.name: files

  shairport:
    container_name: shairport-sync
    image: mikebrady/shairport-sync
    restart: unless-stopped
    networks:
      - vlan
      - mqtt
    volumes:
      - /opt/appdata/shairport-sync/config.conf:/etc/shairport-sync.conf
    devices:
      - /dev/snd:/dev/snd

  freshrss:
    image: linuxserver/freshrss
    container_name: freshrss
    restart: unless-stopped
    environment:
      <<: *env
    tmpfs:
      - /config/log:size=50m,uid=1001,gid=1001
    volumes:
      - /opt/appdata/freshrss:/config
    labels:
      traefik.enable: true
      traefik.name: rss

  scrutiny:
    container_name: scrutiny
    image: ghcr.io/analogj/scrutiny
    restart: unless-stopped
    privileged: true
    volumes:
      - /opt/appdata/scrutiny/config:/opt/scrutiny/config
      - /opt/appdata/scrutiny/db:/opt/scrutiny/influxdb
      - /run/udev:/run/udev:ro
      - /dev:/dev
    labels:
      traefik.enable: true
      traefik.name: drives

  hassio:
    container_name: home-assistant
    image: homeassistant/home-assistant
    restart: unless-stopped
    expose: ['80']
    networks:
      - media
      - mqtt
      - vlan
    environment:
      <<: *tz
    volumes:
      - /opt/appdata/homeassistant:/config
    labels:
      traefik.enable: true
      traefik.docker.network: media
      traefik.http.routers.hassio.rule: Host(`home-assistant.falcon.nt`)
      traefik.http.routers.hassio-web.rule: Host(`home-assistant-agneev.duckdns.org`)
      traefik.http.routers.hassio-ts.rule: Host(`falcon.tailnet-d10c.ts.net`)

  qbittorrent-wg:
    container_name: qbittorrent-wg
    image: hotio/qbittorrent
    restart: unless-stopped
    cap_add:
      - NET_ADMIN
    sysctls:
      - net.ipv4.conf.all.src_valid_mark=1
      - net.ipv6.conf.all.disable_ipv6=1
    ports:
      - 8000:8080
      - 8118:8118
    networks:
      - media
    environment:
      <<: *env
      VPN_ENABLED: true
      VPN_LAN_NETWORK: 10.0.0.0/24
      PRIVOXY_ENABLED: true
    volumes:
      - /opt/appdata/qbittorrent/wg:/config
      - ~/scripts/qbt_post_dl.sh:/script.sh:ro
      - /mnt/mfs-media/local/qbt:/media/local/qbt
    labels:
      traefik.enable: true
      traefik.name: qbt-wg
      traefik.http.services.app.loadbalancer.server.port: 8080

  qbittorrent:
    container_name: qbittorrent
    image: linuxserver/qbittorrent
    restart: unless-stopped
    environment:
      <<: *env
    networks:
      - media
    volumes:
      - /opt/appdata/qbittorrent/lsio:/config
      - ~/scripts/qbt_post_dl.sh:/script.sh:ro
      - /mnt/mfs-media/local/qbt:/media/local/qbt
    labels:
      traefik.enable: true
      traefik.name: qbt
      traefik.http.services.qbittorrent.loadbalancer.server.port: 8080

  flood:
    container_name: qbittorrent-flood
    image: jesec/flood:master
    restart: unless-stopped
    user: 1001:1001
    command: --rundir /config --qburl http://qbittorrent:8080 --qbuser abc --qbpass abc
    depends_on:
      - qbittorrent
    networks:
      - media
    volumes:
      - /opt/appdata/qbittorrent/flood:/config
      - /opt/storage/downloads:/downloads
      - /mnt/mfs-media/local/qbt:/media/local/qbt
    labels:
      traefik.enable: true
      traefik.name: qbt-flood
      traefik.http.routers.flood.middlewares: flood-themecolor
      traefik.http.middlewares.flood-themecolor.plugin.rewritebody.rewrites.regex: name="theme-color" content="#000000"
      traefik.http.middlewares.flood-themecolor.plugin.rewritebody.rewrites.replacement: name="theme-color" content="#111418"

  plex:
    container_name: plex
    image: hotio/plex
    restart: unless-stopped
    environment:
      <<: *env
    ports:
      - 32400:32400
    networks:
      - media
      - vlan
    tmpfs:
      - /transcode:size=4g
      - /tmp:size=1g
    volumes:
      - "/opt/appdata/plex/Library/Application Support/Plex Media Server:/config"
      - /mnt/mfs-media:/media
    labels:
      traefik.enable: true
      traefik.name: plex
      traefik.docker.network: media
      traefik.http.services.plex.loadbalancer.server.port: 32400
      traefik.http.routers.plex.middlewares: plex-themecolor
      traefik.http.middlewares.plex-themecolor.plugin.rewritebody.rewrites.regex: </head>
      traefik.http.middlewares.plex-themecolor.plugin.rewritebody.rewrites.replacement: <meta name="theme-color" content="#0C0C0C"> </head>
      traefik.http.middlewares.plex-themecolor.plugin.rewritebody.rewrites.type: text/html

  tautulli:
    container_name: tautulli
    image: linuxserver/tautulli
    restart: unless-stopped
    environment:
      <<: *env
    networks:
      - media
    ports:
      - 8181:8181/tcp
    volumes:
      - /opt/appdata/tautulli:/config
      - /opt/appdata/plex/Logs:/plex-logs:ro
    labels:
      traefik.enable: true
      traefik.name: stats.plex
      traefik.http.routers.tautulli.middlewares: homer-cors,tautulli-themecolor
      traefik.http.middlewares.tautulli-themecolor.plugin.rewritebody.rewrites.regex: name="theme-color" content="#282a2d"
      traefik.http.middlewares.tautulli-themecolor.plugin.rewritebody.rewrites.replacement: name="theme-color" content="#000000"
      traefik.http.middlewares.tautulli-themecolor.plugin.rewritebody.rewrites.type: text/html

  autoscan:
    container_name: autoscan
    image: cloudb0x/autoscan
    restart: unless-stopped
    depends_on:
      - plex
    environment:
      <<: *env
    networks:
      - media
    volumes:
      - /opt/appdata/autoscan:/config

  radarr:
    container_name: radarr
    image: linuxserver/radarr
    restart: unless-stopped
    expose: ['80']
    depends_on:
      - prowlarr
      - qbittorrent
    environment:
      <<: *env
    networks:
      - media
    volumes:
      - /opt/appdata/radarr:/config
      - ~/scripts/radarr_connect.sh:/script.sh
      - /mnt/mfs-media:/media
    labels:
      traefik.enable: true
      traefik.name: radarr
      traefik.http.routers.radarr.middlewares: homer-cors

  radarr4k:
    container_name: radarr4k
    image: linuxserver/radarr
    restart: unless-stopped
    expose: ['80']
    depends_on:
      - prowlarr
      - qbittorrent
    environment:
      TP_THEME: pine-shadow
      TP_COMMUNITY_THEME: true
      TP_ADDON: radarr-4k-logo|radarr-alt-calendar
      TP_SCHEME: http
      TP_DOMAIN: 10.0.0.10:7070
      DOCKER_MODS: gilbn/theme.park:radarr
      <<: *env
    networks:
      - media
    volumes:
     - /opt/appdata/radarr4k:/config
     - ~/scripts/radarr_connect.sh:/script.sh
     - /mnt/mfs-media:/media
    labels:
      traefik.enable: true
      traefik.name: radarr4k
      traefik.http.routers.radarr4k.middlewares: homer-cors,radarr4k-themecolor
      traefik.http.middlewares.radarr4k-themecolor.plugin.rewritebody.rewrites.regex: name="theme-color" content="#3a3f51"
      traefik.http.middlewares.radarr4k-themecolor.plugin.rewritebody.rewrites.replacement: name="theme-color" content="#0F1112"
      traefik.http.middlewares.radarr4k-themecolor.plugin.rewritebody.rewrites.type: text/html

  sonarr:
    container_name: sonarr
    image: linuxserver/sonarr:develop
    restart: unless-stopped
    expose: ['80']
    depends_on:
      - prowlarr
      - qbittorrent
    environment:
      <<: *env
    networks:
      - media
    volumes:
      - /opt/appdata/sonarr:/config
      - /mnt/mfs-media:/media
    labels:
      traefik.enable: true
      traefik.name: sonarr
      traefik.http.routers.sonarr.middlewares: homer-cors

  sonarr4k:
    container_name: sonarr4k
    image: linuxserver/sonarr:develop
    restart: unless-stopped
    expose: ['80']
    depends_on:
      - prowlarr
      - qbittorrent
    environment:
      TP_THEME: plex
      TP_ADDON: sonarr-4k-text-logo
      TP_SCHEME: http
      TP_DOMAIN: 10.0.0.10:7070
      DOCKER_MODS: gilbn/theme.park:sonarr
      <<: *env
    networks:
      - media
    volumes:
      - /opt/appdata/sonarr4k:/config
      - /mnt/mfs-media:/media
    labels:
      traefik.enable: true
      traefik.name: sonarr4k
      traefik.http.routers.sonarr4k.middlewares: homer-cors,sonarr4k-themecolor
      traefik.http.middlewares.sonarr4k-themecolor.plugin.rewritebody.rewrites.regex: name="theme-color" content="#3a3f51"
      traefik.http.middlewares.sonarr4k-themecolor.plugin.rewritebody.rewrites.replacement: name="theme-color" content="#141414"
      traefik.http.middlewares.sonarr4k-themecolor.plugin.rewritebody.rewrites.type: text/html

  prowlarr:
    container_name: prowlarr
    image: linuxserver/prowlarr
    restart: unless-stopped
    expose: ['80']
    environment:
      <<: *env
    networks:
      - media
    volumes:
      - /opt/appdata/prowlarr:/config
    labels:
      traefik.enable: true
      traefik.name: prowlarr
      traefik.http.routers.prowlarr.middlewares: prowlarr-themecolor
      traefik.http.middlewares.prowlarr-themecolor.plugin.rewritebody.rewrites.regex: name="theme-color" content="#e66001"
      traefik.http.middlewares.prowlarr-themecolor.plugin.rewritebody.rewrites.replacement: name="theme-color" content="#595959"
      traefik.http.middlewares.prowlarr-themecolor.plugin.rewritebody.rewrites.type: text/html

  recyclarr:
    container_name: recyclarr
    image: recyclarr/recyclarr
    restart: unless-stopped
    user: 1001:1001
    depends_on:
      - radarr
      - radarr4k
      - sonarr
      - sonarr4k
    environment:
      <<: *tz
    networks:
      - media
    volumes:
      - /opt/appdata/recyclarr:/config

  unpackerr:
    container_name: unpackerr
    image: golift/unpackerr
    restart: unless-stopped
    user: 1001:1001
    environment:
      UN_SONARR_0_URL: http://sonarr
      UN_SONARR_0_API_KEY: ${SONARR_API_KEY}
      UN_SONARR_1_URL: http://sonarr4k
      UN_SONARR_1_API_KEY: ${SONARR4K_API_KEY}
      UN_RADARR_0_URL: http://radarr
      UN_RADARR_0_API_KEY: ${RADARR_API_KEY}
      UN_RADARR_1_URL: http://radarr4k
      UN_RADARR_1_API_KEY: ${RADARR4K_API_KEY}
      <<: *tz
    networks:
      - media
    volumes:
      - /mnt/mfs-media/local/qbt:/media/local/qbt

  librespot:
    container_name: librespot
    image: agneev/librespot-java
    restart: unless-stopped
    networks:
      - vlan
    devices:
      - /dev/snd:/dev/snd
    volumes:
      - /opt/appdata/librespot-java:/config