Trying to install using docker compose, fails

[Xsatc77]

Im trying to install using docker compose file. I put the following in stacks:
version: '3.3' services: transmission-openvpn: cap_add: - NET_ADMIN volumes: - '/mnt/downloads:/data' - '/opt/transmission:/config' environment: - OPENVPN_PROVIDER=HIDEME - OPENVPN_CONFIG=UK - OPENVPN_USERNAME=********** - OPENVPN_PASSWORD=********** - LOCAL_NETWORK=192.168.1.0/24 logging: driver: json-file options: max-size: 10m ports: - '9091:9091' image: haugene/transmission-openvpn

It fails, and here is the log:
Starting container with revision: 48299204d160d2d699ce6dd5ccdfcba0ecf13c83 TRANSMISSION_HOME is currently set to: /config/transmission-home Creating TUN device /dev/net/tun Using OpenVPN provider: HIDEME Running with VPN_CONFIG_SOURCE auto No bundled config script found for HIDEME. Defaulting to external config Will get configs from https://github.com/haugene/vpn-configs-contrib.git Repository is already cloned, checking for update Already up to date. Already on 'main' Your branch is up to date with 'origin/main'. Found configs for HIDEME in /config/vpn-configs-contrib/openvpn/hideme, will replace current content in /etc/openvpn/hideme Starting OpenVPN using config UK.ovpn Modifying /etc/openvpn/hideme/UK.ovpn for best behaviour in this container Modification: Point auth-user-pass option to the username/password file Modification: Change ca certificate path Modification: Change ping options Modification: Update/set resolv-retry to 15 seconds Modification: Change tls-crypt keyfile path Modification: Set output verbosity to 3 Modification: Remap SIGUSR1 signal to SIGTERM, avoid OpenVPN restart loop Modification: Updating status for config failure detection Setting OpenVPN credentials... adding route to local network 192.168.1.0/24 via 172.20.0.1 dev eth0 2023-09-01 03:30:18 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning. 2023-09-01 03:30:18 OpenVPN 2.5.5 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 14 2022 2023-09-01 03:30:18 library versions: OpenSSL 3.0.2 15 Mar 2022, LZO 2.10 2023-09-01 03:30:18 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts 2023-09-01 03:30:18 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication 2023-09-01 03:30:18 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication 2023-09-01 03:30:18 TCP/UDP: Preserving recently used remote address: [AF_INET]89.238.142.216:4000 2023-09-01 03:30:18 Socket Buffers: R=[212992->212992] S=[212992->212992] 2023-09-01 03:30:18 UDP link local: (not bound) 2023-09-01 03:30:18 UDP link remote: [AF_INET]89.238.142.216:4000 2023-09-01 03:30:18 TLS: Initial packet from [AF_INET]89.238.142.216:4000, sid=a659f85f 80e59b6f 2023-09-01 03:30:18 VERIFY OK: depth=2, C=MY, ST=Wilayah Persekutuan, L=Labuan, O=eVenture Limited, OU=Certificate Authority, CN=Hide.Me Root CA 2023-09-01 03:30:18 VERIFY OK: depth=1, C=MY, ST=Wilayah Persekutuan, L=Labuan, O=eVenture Limited, OU=Certificate Authority, CN=Hide.Me Server CA #1 2023-09-01 03:30:18 VERIFY KU OK 2023-09-01 03:30:18 Validating certificate extended key usage 2023-09-01 03:30:18 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication 2023-09-01 03:30:18 VERIFY EKU OK 2023-09-01 03:30:18 VERIFY X509NAME OK: C=MY, ST=Wilayah Persekutuan, L=Labuan, O=eVenture Limited, OU=Certificate Authority, CN=*.hide.me 2023-09-01 03:30:18 VERIFY OK: depth=0, C=MY, ST=Wilayah Persekutuan, L=Labuan, O=eVenture Limited, OU=Certificate Authority, CN=*.hide.me 2023-09-01 03:30:18 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, peer certificate: 8192 bit RSA, signature: RSA-SHA512 2023-09-01 03:30:18 [*.hide.me] Peer Connection Initiated with [AF_INET]89.238.142.216:4000 2023-09-01 03:30:19 SENT CONTROL [*.hide.me]: 'PUSH_REQUEST' (status=1) 2023-09-01 03:30:20 PUSH: Received control message: 'PUSH_REPLY,topology subnet,ping 15,ping-restart 60,explicit-exit-notify,tun-ipv6,sndbuf 16777216,rcvbuf 16777216,route-gateway 10.133.184.1,redirect-gateway,dhcp-option DNS 10.133.184.1,dhcp-renew,dhcp-release,register-dns,block-outside-dns,redirect-gateway ipv6,dhcp-option DNS6 fd00:6968:6564:2dc::1,ifconfig-ipv6 fd00:6968:6564:2dc::a85:b9f8/64 fd00:6968:6564:2dc::1,ifconfig 10.133.185.248 255.255.254.0,peer-id 1,cipher AES-256-GCM' 2023-09-01 03:30:20 Options error: Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:11: dhcp-renew (2.5.5) 2023-09-01 03:30:20 Options error: Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:12: dhcp-release (2.5.5) 2023-09-01 03:30:20 Options error: Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:13: register-dns (2.5.5) 2023-09-01 03:30:20 Options error: Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:14: block-outside-dns (2.5.5) 2023-09-01 03:30:20 WARNING: You have specified redirect-gateway and redirect-private at the same time (or the same option multiple times). This is not well supported and may lead to unexpected results 2023-09-01 03:30:20 OPTIONS IMPORT: timers and/or timeouts modified 2023-09-01 03:30:20 OPTIONS IMPORT: explicit notify parm(s) modified 2023-09-01 03:30:20 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified 2023-09-01 03:30:20 Socket Buffers: R=[212992->425984] S=[212992->425984] 2023-09-01 03:30:20 OPTIONS IMPORT: --ifconfig/up options modified 2023-09-01 03:30:20 OPTIONS IMPORT: route options modified 2023-09-01 03:30:20 OPTIONS IMPORT: route-related options modified 2023-09-01 03:30:20 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified 2023-09-01 03:30:20 OPTIONS IMPORT: peer-id set 2023-09-01 03:30:20 OPTIONS IMPORT: adjusting link_mtu to 1624 2023-09-01 03:30:20 OPTIONS IMPORT: data channel crypto options modified 2023-09-01 03:30:20 Data Channel: using negotiated cipher 'AES-256-GCM' 2023-09-01 03:30:20 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key 2023-09-01 03:30:20 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key 2023-09-01 03:30:20 net_route_v4_best_gw query: dst 0.0.0.0 2023-09-01 03:30:20 net_route_v4_best_gw result: via 172.20.0.1 dev eth0 2023-09-01 03:30:20 ROUTE_GATEWAY 172.20.0.1/255.255.0.0 IFACE=eth0 HWADDR=02:42:ac:14:00:02 2023-09-01 03:30:20 GDG6: remote_host_ipv6=n/a 2023-09-01 03:30:20 net_route_v6_best_gw query: dst :: 2023-09-01 03:30:20 sitnl_send: rtnl: generic error (-101): Network is unreachable 2023-09-01 03:30:20 ROUTE6: default_gateway=UNDEF 2023-09-01 03:30:20 TUN/TAP device tun0 opened 2023-09-01 03:30:20 net_iface_mtu_set: mtu 1500 for tun0 2023-09-01 03:30:20 net_iface_up: set tun0 up 2023-09-01 03:30:20 net_addr_v4_add: 10.133.185.248/23 dev tun0 2023-09-01 03:30:20 net_iface_mtu_set: mtu 1500 for tun0 2023-09-01 03:30:20 net_iface_up: set tun0 up 2023-09-01 03:30:20 net_addr_v6_add: fd00:6968:6564:2dc::a85:b9f8/64 dev tun0 2023-09-01 03:30:20 sitnl_send: rtnl: generic error (-13): Permission denied 2023-09-01 03:30:20 Linux can't add IPv6 to interface tun0 2023-09-01 03:30:20 Exiting due to fatal error

Im at a loss (pretty new to all this) and so is my brother (more versed in this stuff than me). What are we missing? Thanks!

[pkishino]

see your last lines.. Permission denied for IPv6.. disable it instead..check the documentation