services:
  gluetun:
    image: qmcgaw/gluetun:latest
    container_name: gluetun
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun:/dev/net/tun
    sysctls:
      # Debian 13 + yeni kernel'de gorulen "default route not found"
      # crash-loop hatasi icin: IPv6'yi bu container icin kapatiyoruz.
      - net.ipv6.conf.all.disable_ipv6=1
    environment:
      - VPN_SERVICE_PROVIDER=mullvad
      - VPN_TYPE=wireguard
      - WIREGUARD_PRIVATE_KEY=${WIREGUARD_PRIVATE_KEY}
      - WIREGUARD_ADDRESSES=${WIREGUARD_ADDRESSES}
      - SERVER_CITIES=${SERVER_CITIES}
      - FIREWALL_OUTBOUND_SUBNETS=${FIREWALL_OUTBOUND_SUBNETS:-172.16.0.0/12,192.168.0.0/16,10.0.0.0/8}
      - TZ=${TZ}
    ports:
      # qBittorrent WebUI - host:container, ikisi ayni numara (61235)
      - 61235:61235
      # qBittorrent torrent peer portu (TCP+UDP), asagidaki
      # TORRENTING_PORT ile ayni olmak zorunda
      - 61234:61234
      - 61234:61234/udp
    volumes:
      - ${APP_DATA_DIR}/data/gluetun:/gluetun
    restart: unless-stopped
    x-runtipi:
      is_main: true
      internal_port: 61235

  qbittorrent:
    image: lscr.io/linuxserver/qbittorrent:latest
    container_name: qbittorrent
    # Kendi agi yok, gluetun'un ag namespace'ini paylasiyor - tum
    # trafik VPN tunelinden geciyor (kill switch qbittorrent'i de kapsar).
    network_mode: "service:gluetun"
    depends_on:
      gluetun:
        condition: service_healthy
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=${TZ}
      - WEBUI_PORT=61235
      - TORRENTING_PORT=61234
    volumes:
      - ${APP_DATA_DIR}/data/config:/config
      - ${APP_DATA_DIR}/data/downloads:/downloads
    restart: unless-stopped

x-runtipi:
  schema_version: 2