services:
  qbittorrentvpn:
    image: binhex/arch-qbittorrentvpn
    container_name: binhex-qbittorrentvpn
    privileged: true
    sysctls:
      - net.ipv4.conf.all.src_valid_mark=1
    environment:
      - PUID=1000
      - PGID=100
      - UMASK=000
      - TZ=America/Chicago
      - VPN_ENABLED=yes
      - VPN_USER=${VPN_USER}
      - VPN_PASS=${VPN_PASS}
      - VPN_PROV=${VPN_PROV}
      - VPN_CLIENT=openvpn
      - STRICT_PORT_FORWARD=yes
      - ENABLE_PRIVOXY=no
      - ENABLE_SOCKS=no
      - SOCKS_USER=${SOCKS_USER}
      - SOCKS_PASS=${SOCKS_PASS}
      - LAN_NETWORK=${LAN_NETWORK}
      - WEBUI_PORT=8080
      - VPN_INPUT_PORTS=
      - VPN_OUTPUT_PORTS=
      - DEBUG=false
      - VPN_OPTIONS=
      - ENABLE_STARTUP_SCRIPTS=no
      - USERSPACE_WIREGUARD=no
      - NAME_SERVERS=84.200.69.80,37.235.1.174,1.1.1.1,37.235.1.177,84.200.70.40,1.0.0.1
    volumes:
      - /mnt/user/appdata/binhex-qbittorrentvpn:/config
      - /mnt/disk8/media_root/temp/qbittorrent:/data
      - /mnt/user/appdata/binhex-shared:/shared
    ports:
      - "8080:8080"    # Web UI
      - "8118:8118"    # Privoxy
      - "9118:9118"    # microsocks
      - "58946:58946/tcp"  # Incoming port TCP (when VPN disabled)
      - "58946:58946/udp"  # Incoming port UDP (when VPN disabled)
    restart: unless-stopped
    networks:
      - default
    cap_add:
      - NET_ADMIN