# vi: ft=yaml
version: '3.5'

networks:
  traefik:
    external: true

volumes:
  media:
    driver_opts:
      type: "nfs"
      o: "addr=lewis.dmz,nolock,soft,rw"
      device: ":/mnt/data/nfs/media"
  jellyfin_config:
    driver_opts:
      type: "nfs"
      o: "addr=lewis.dmz,nolock,soft,rw"
      device: ":/mnt/data/nfs/jellyfin/config"
  transmission_config:
    driver_opts:
      type: "nfs"
      o: "addr=lewis.dmz,nolock,soft,rw"
      device: ":/mnt/data/nfs/transmission/config"
  jellyseerr_config:
    driver_opts:
      type: "nfs"
      o: "addr=lewis.dmz,nolock,soft,rw"
      device: ":/mnt/data/nfs/jellyseerr/config"
  jellyfin_cache:

services:
  jellyfin:
    image: jellyfin/jellyfin:10.8.13-1
    network_mode: 'host'
    volumes:
      - jellyfin_cache:/cache
      - type: volume
        source: jellyfin_config
        target: /config
        volume:
          nocopy: true
      - type: volume
        source: media
        target: /media
        volume:
          nocopy: true
    # Alternative address used for autodiscovery
    environment:
      - JELLYFIN_PublishedServerUrl=http://media.kun.is:444
    # Optional - may be necessary for docker healthcheck to pass if running in host network mode
    # extra_hosts:
    #   - "host.docker.internal:host-gateway"
    networks:
      - traefik
    deploy:
      labels:
        - traefik.enable=true
        - traefik.http.routers.jellyfin.entrypoints=websecure
        - traefik.http.routers.jellyfin.rule=Host(`media.kun.is`)
        - traefik.http.routers.jellyfin.tls=true
        - traefik.http.routers.jellyfin.tls.certresolver=letsencrypt
        - traefik.http.routers.jellyfin.service=jellyfin
        - traefik.http.services.jellyfin.loadbalancer.server.port=8096
        - traefik.docker.network=traefik

  transmission:
    image: lscr.io/linuxserver/transmission:latest
    ports:
      - "{{ bittorrent_port }}:{{ bittorrent_port }}"
      - "{{ bittorrent_port }}:{{ bittorrent_port }}/udp"
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Amsterdam
    volumes:
      - type: volume
        source: transmission_config
        target: /config
        volume:
          nocopy: true
      - type: volume
        source: media
        target: /media
        volume:
          nocopy: true
    networks:
      - traefik
    deploy:
      labels:
        - traefik.enable=true
        - traefik.http.routers.transmission.entrypoints=localsecure
        - traefik.http.routers.transmission.rule=Host(`transmission.kun.is`)
        - traefik.http.routers.transmission.tls=true
        - traefik.http.routers.transmission.tls.certresolver=letsencrypt
        - traefik.http.routers.transmission.service=transmission
        - traefik.http.services.transmission.loadbalancer.server.port=9091
        - traefik.docker.network=traefik

  jellyseerr:
    image: fallenbagel/jellyseerr:1.7.0
    environment:
      # TODO: fix log level
      - LOG_LEVEL=debug
      - TZ=Europe/Amsterdam
    volumes:
      - type: volume
        source: jellyseerr_config
        target: /app/config
        volume:
          nocopy: true
    networks:
      - traefik
    deploy:
      labels:
        - traefik.enable=true
        - traefik.http.routers.jellyseerr.entrypoints=localsecure
        - traefik.http.routers.jellyseerr.rule=Host(`jellyseerr.kun.is`)
        - traefik.http.routers.jellyseerr.tls=true
        - traefik.http.routers.jellyseerr.tls.certresolver=letsencrypt
        - traefik.http.routers.jellyseerr.service=jellyseerr
        - traefik.http.services.jellyseerr.loadbalancer.server.port=5055
        - traefik.docker.network=traefik