version: '3'

services:
  authelia:
    container_name: authelia
    hostname: authelia
    image: authelia/authelia
    environment:
      - TZ=America/Chicago
    ports:
      - 9091:9091
    restart: always
    volumes:
      - ./appdata/authelia/config:/config
    
  gluetun:
    container_name: gluetun    
    hostname: gluetun
    image: qmcgaw/gluetun
    environment:
      - VPN_SERVICE_PROVIDER=mullvad
      - VPN_TYPE=wireguard
      - WIREGUARD_PRIVATE_KEY=2FvoteYGU2iKkP80VHNdeRU9+zIOTC1Ksj1EW+P3m0o=
      - WIREGUARD_ADDRESSES=10.66.209.114/32
      - HTTPPROXY=on
      - SERVER_CITIES=Chicago IL
      - TZ=$TZ
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun:/dev/net/tun
    ports:
      - 8888:8888/tcp # HTTP proxy
      - 8388:8388/tcp # Shadowsocks
      - 8388:8388/udp # Shadowsocks
    restart: always
    volumes:
      - ./appdata/gluetun:/gluetun

  nginxproxymanager:
    container_name: nginxproxymanager
    hostname: nginxproxymanager
    image: jc21/nginx-proxy-manager:latest
    environment:
      - X_FRAME_OPTIONS=sameorigin
      - DB_SQLITE_FILE=/data/database.sqlite
    ports:
      - 8443:443/tcp
      - 8080:80/tcp
      - 8081:81/tcp
    restart: always
    volumes:
      - ./appdata/nginxproxymanager/data:/data
      - ./appdata/nginxproxymanager/letsencrypt:/etc/letsencrypt
      - /etc/localtime:/etc/localtime:ro

  openvpn:
    container_name: openvpn
    hostname: openvpn
    image: kylemanna/openvpn    
    cap_add:
     - NET_ADMIN
    ports:
     - "1194:1194/tcp"
    restart: always
    volumes:
     - ./appdata/openvpn/conf:/etc/openvpn

  openssh-server:
    container_name: openssh-server
    hostname: openssh-server
    image: lscr.io/linuxserver/openssh-server:latest
    environment:
      - PUID=$PUID
      - PGID=$PGID
      - TZ=$TZ
      - PUBLIC_KEY_FILE=/config/aknlw.com.pub
      - USER_NAME=akanealw
    ports:
      - 2222:2222
    restart: always
    volumes:
      - ./appdata/openssh-server/config:/config

networks:
  default: