services:
  qbittorrent:
    image: ghcr.io/hotio/qbittorrent:latest
    container_name: qBittorrent-GlueTUN
    security_opt:
      - no-new-privileges:true
    healthcheck:
      test: ["CMD-SHELL", "curl -f http://localhost:8080 || exit 1"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 60s
    cap_add:
      - NET_ADMIN
    sysctls:
      - net.ipv4.conf.all.src_valid_mark=1
      - net.ipv6.conf.all.disable_ipv6=1
    ports:
      - 9090:8080
    environment:
      - PUID=1026 # https://mariushosting.com/synology-find-uid-userid-and-gid-groupid-in-5-seconds/
      - PGID=100 # https://mariushosting.com/synology-find-uid-userid-and-gid-groupid-in-5-seconds/
      - TZ=Europe/Bucharest # https://timezone.mariushosting.com/
      - VPN_ENABLED=true #or false
      - VPN_CONF=
      - VPN_PROVIDER=
      - VPN_LAN_NETWORK=
      - VPN_LAN_LEAK_ENABLED=
      - VPN_AUTO_PORT_FORWARD=
      - VPN_KEEP_LOCAL_DNS=
      - VPN_FIREWALL_TYPE=
      - VPN_HEALTHCHECK_ENABLED=
      - LocalHostAuth=
      - PRIVOXY_ENABLED=
      - UNBOUND_ENABLED=
    volumes:
      - /mnt/StoragePool/docker/qbittorrent/config:/config:rw
      - /mnt/StoragePool/docker/qbittorrent/downloads:/downloads:rw
    devices:
      - /dev/net/tun:/dev/net/tun
    restart: on-failure:5