docker-qbittorrent-wireguard/Docker-Compose_proton_cloudflare.yml at master · tenseiken/docker-qbittorrent-wireguard · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
services:
  qbittorrent-wireguard:
    cap_add:
      - "NET_ADMIN"
    container_name: "qbittorrent-wireguard"
    entrypoint:
      - "/bin/bash"
      - "/start.sh"
    environment:
      - "PUID=1234"
      - "PGID=567"
      - "LAN_NETWORK=192.168.1.0/24"
      - "QBT_LEGAL_NOTICE=confirm"
      - "ENABLEPROTONVPNPORTFWD=1"
      - "WEBUI_URL=https://subdomain.domain.tld"
    image: "docker.io/tenseiken/qbittorrent-wireguard:latest"
    ipc: "private"
    network_mode: "bridge"
    ports:
      - "8999:8999/tcp"
      - "8999:8999/udp"
      - "8080:8080/tcp"
    restart: "unless-stopped"
    security_opt:
      - "label=disable"
    stdin_open: true
    sysctls:
      - "net.ipv4.conf.all.rp_filter=2"
      - "net.ipv4.conf.all.src_valid_mark=1"
      - "net.ipv6.conf.all.disable_ipv6=1"
    tty: true
    volumes:
      - "/host/path/to/downloads:/downloads"
      - "/host/path/to/config:/config"
    working_dir: "/opt"
    secrets:
      - "WEBUI_APIKEY"
      - "CF_ACCESS_CLIENT_ID"
      - "CF_ACCESS_CLIENT_SECRET"
secrets:
  WEBUI_APIKEY:
    file: "/path/on/host/to/WEBUI_APIKEY"
  CF_ACCESS_CLIENT_ID:
    file: "/path/on/host/to/CF_ACCESS_CLIENT_ID"
  CF_ACCESS_CLIENT_SECRET:
    file: "/path/on/host/to/CF_ACCESS_CLIENT_SECRET"