services:
  gluetun:
    image: qmcgaw/gluetun:latest
    container_name: gluetun
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun:/dev/net/tun
    environment:
      - VPN_SERVICE_PROVIDER=mullvad
      - VPN_TYPE=wireguard
      - WIREGUARD_PRIVATE_KEY=${WIREGUARD_PRIVATE_KEY}
      - WIREGUARD_ADDRESSES=${WIREGUARD_ADDRESSES}
      - SERVER_CITIES=${SERVER_CITIES}
      - FIREWALL_OUTBOUND_SUBNETS=${FIREWALL_OUTBOUND_SUBNETS:-172.16.0.0/12,192.168.0.0/16,10.0.0.0/8}
      - TZ=${TZ}
    ports:
      # qBittorrent WebUI (qbittorrent-vpn uygulamasi bu netns'i paylasiyor)
      - 8080:8080
      # qBittorrent BitTorrent peer portu (TCP + UDP ayni numara olmali)
      - 6881:6881
      - 6881:6881/udp
      # --- ileride baska bir seyi buraya VPN'lemek istersen ---
      # o servisin host:container portunu buraya ekle, orn:
      # - 9117:9117        # ornek: baska bir uygulamanin WebUI'si
      # detaylar için metadata/description.md
    volumes:
      - ${APP_DATA_DIR}/data/gluetun:/gluetun
    restart: unless-stopped
    x-runtipi:
      is_main: true
      internal_port: 8080

x-runtipi:
  schema_version: 2