version: '3'

services:
  archivebox:
    container_name: archivebox
    image: archivebox/archivebox:dev
    command: server --quick-init 0.0.0.0:8000
    environment:
      - ALLOWED_HOSTS=*
      - MEDIA_MAX_SIZE=750m
      - PUBLIC_ADD_VIEW=True
      - PUBLIC_INDEX=True
      - PUBLIC_SNAPSHOTS=False
      - SAVE_TITLE=True
      - SAVE_FAVICON=True
      - SAVE_WGET=False
      - SAVE_WARC=False
      - SAVE_PDF=True
      - SAVE_SCREENSHOT=True
      - SAVE_DOM=False
      - SAVE_SINGLEFILE=True
      - SAVE_READABILITY=True
      - SAVE_MERCURY=False
      - SAVE_GIT=False
      - SAVE_MEDIA=False
      - SAVE_ARCHIVE_DOT_ORG=False
    ports:
      - 8000:8000
    restart: always
    volumes:
      - ${DOCKER_CONFIGS}/archivebox/data:/data

  authelia:
    container_name: authelia
    image: authelia/authelia
    environment:
      - TZ=${TZ}
    ports:
      - 9091:9091
    restart: always
    volumes:
      - ${DOCKER_CONFIGS}/authelia/config:/config

  filebrowser:
    container_name: filebrowser
    image: filebrowser/filebrowser:latest
    ports:
      - 8484:80
    restart: always
    volumes:
      - ${DOCKER_CONFIGS}/filebrowser/config/filebrowser.db:/database/filebrowser.db
      - ${DOCKER_CONFIGS}/filebrowser/config/.filebrowser.json:/.filebrowser.json
      - ${DOCKER_CONFIGS}/filebrowser/files:/srv
      - ${STORAGE_DIR}:/truenas-storage

  goaccess:
    container_name: goaccess
    image: 'xavierh/goaccess-for-nginxproxymanager:latest'
    environment:
      - PUID=0
      - PGID=0
      - TZ=America/Chicago      
      - SKIP_ARCHIVED_LOGS=True
      - DEBUG=False
      - BASIC_AUTH=False
      - EXCLUDE_IPS=127.0.0.1,192.168.1.1-192.168.1.255
      - LOG_TYPE=NPM
      - HTML_REFRESH=5
      - KEEP_LAST=30
    ports:
      - 7880:7880
    restart: always
    volumes:
      - ${DOCKER_CONFIGS}/nginxproxymanager/data/logs:/opt/log

  homepage:
    container_name: homepage
    image: ghcr.io/gethomepage/homepage:latest
    environment:
      PUID: ${PUID}
      PGID: ${PGID}
    env_file: .env
    ports:
      - 3005:3000
    volumes:
      - ${DOCKER_CONFIGS}/homepage/config:/app/config

  nginxproxymanager:
    container_name: nginxproxymanager
    image: jc21/nginx-proxy-manager:2.10.4
    environment:
      - X_FRAME_OPTIONS=sameorigin
      - DB_SQLITE_FILE=/data/database.sqlite
    ports:
      - 443:443/tcp
      - 80:80/tcp
      - 81:81/tcp
    restart: always
    volumes:
      - ${DOCKER_CONFIGS}/nginxproxymanager/data:/data
      - ${DOCKER_CONFIGS}/nginxproxymanager/letsencrypt:/etc/letsencrypt
      - ${DOCKER_CONFIGS}/nginxproxymanager/snippets:/snippets:ro
      - /etc/localtime:/etc/localtime:ro

  opengist:
    container_name: opengist
    image: ghcr.io/thomiceli/opengist:1
    ports:
      - 6157:6157
    restart: always
    volumes:
      - ${DOCKER_CONFIGS}/opengist:/opengist

  orbital-sync:
    container_name: orbital-sync
    image: mattwebbio/orbital-sync:1
    environment:
      - PRIMARY_HOST_BASE_URL=http://192.168.1.2:80
      - PRIMARY_HOST_PASSWORD=${WEBPASSWORD}
      - SECONDARY_HOST_1_BASE_URL=http://192.168.1.3:80
      - SECONDARY_HOST_1_PASSWORD=${WEBPASSWORD}
      - SECONDARY_HOST_2_BASE_URL=http://192.168.1.4:8180
      - SECONDARY_HOST_2_PASSWORD=${WEBPASSWORD}
      - INTERVAL_MINUTES=30
    restart: always

  pihole:
    container_name: pihole
    image: cbcrowe/pihole-unbound:latest
    hostname: ${HOSTNAME}
    domainname: ${DOMAIN_NAME}
    environment:
      - FTLCONF_LOCAL_IPV4=${FTLCONF_LOCAL_IPV4}
      - TZ=${TZ}
      - WEBPASSWORD=${WEBPASSWORD}
      - WEBTHEME=${WEBTHEME:-default-dark}
      - REV_SERVER=${REV_SERVER:-false}
      - PIHOLE_DNS_=127.0.0.1#5335
      - DNSSEC="true"
      - DNSMASQ_LISTENING=single
    ports:
      - 53:53
      - 53:53/udp
      - 8180:80
    restart: always
    volumes:
      - ${DOCKER_CONFIGS}/pihole/unbound:/etc/pihole:rw
      - ${DOCKER_CONFIGS}/pihole/dnsmasq-unbound:/etc/dnsmasq.d:rw

  uptime-kuma:
    container_name: uptime-kuma
    image: louislam/uptime-kuma:1
    ports:
      - 3001:3001
    restart: always
    volumes:
      - ${DOCKER_CONFIGS}/uptimekuma/data:/app/data

  vaultwarden:
    container_name: vaultwarden
    image: vaultwarden/server:latest
    environment:
      - TZ=${TZ}
      - ADMIN_TOKEN=h/oRssGu83I1E1WQGiSchYMAJnM0JcDXmjeI/A3QgMCasn/IK9zZldH5FXim0rSi
      - DATABASE_URL=data/db.sqlite3
      - DISABLE_ADMIN_TOKEN=false
      - DOMAIN=https://bitwarden.akanealw.com
      - ENABLE_DB_WAL=true
      - INVITATIONS_ALLOWED=false
      - SHOW_PASSWORD_HINT=false
      - SIGNUPS_ALLOWED=false
      - SIGNUPS_VERIFY=false
      - SMTP_PORT=587
      - SMTP_SSL=true
    ports:
      - 8089:80
    restart: always
    volumes:
      - ${DOCKER_CONFIGS}/vaultwarden:/data
      - /etc/localtime:/etc/localtime:ro

  vaultwarden-backup:
    container_name: vaultwarden-backup
    image: bruceforce/vaultwarden-backup
    environment:
      - BACKUP_DIR=/data/backups
      - CRON_TIME=15 * * * *
      - TIMESTAMP=true
      - UID=${PUID}
      - GID=${PGID}
    depends_on:
      - vaultwarden
    init: true
    restart: always
    volumes:
      - ${DOCKER_CONFIGS}/vaultwarden:/data
      - /home/akanealw/backups/vaultwardenbackups:/data/backups

  wg-easy:
    container_name: wg-easy      
    image: weejewel/wg-easy
    environment:
      - WG_HOST=${WG_HOST}
      - PASSWORD=${WG_PASSWORD}
      - WG_DEFAULT_DNS=10.8.0.6
      - WG_PORT=51830
      - WG_PERSISTENT_KEEPALIVE=25
      - WG_DEFAULT_ADDRESS=10.8.0.x
      - WG_MTU=1420
      - WG_ALLOWED_IPS=10.8.0.0/24
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    sysctls:
      - net.ipv4.ip_forward=1
      - net.ipv4.conf.all.src_valid_mark=1
    ports:
      - 51830:51820/udp
      - 51831:51821
    restart: always
    volumes:
      - ${DOCKER_CONFIGS}/wireguard:/etc/wireguard

networks:
  proxy: