services:
  gluetun:
    image: qmcgaw/gluetun:v3
    environment:
      # Core VPN Configuration - WireGuard (faster)
      #- VPN_SERVICE_PROVIDER=protonvpn
      #- VPN_TYPE=wireguard
      #- WIREGUARD_PRIVATE_KEY=MDzSV32z3GxR5VPtmtVfDR8Vkw00irXJQqyye+8sg3o=

      # Core VPN Configuration - OpenVPN (fallback - uncomment if WireGuard issues)
      - VPN_SERVICE_PROVIDER=protonvpn
      - VPN_TYPE=openvpn
      - OPENVPN_USER=LKXaFJ0HOa6RbySE+pmp
      - OPENVPN_PASSWORD=6fISYNXVzWrgzUskzsAbVF3MjYYqJ8JV

      # Server Selection
      - SERVER_COUNTRIES=United States
      - SERVER_CITIES=Secaucus,Chicago,New York

      # Basic Settings
      - TZ=America/New_York
      - PUID=1000
      - PGID=1000

      # Proxy Configuration
      - HTTPPROXY=on
      - HTTPPROXY_LISTENING_ADDRESS=:38888
      - HTTPPROXY_STEALTH=on

      # Security Features
      - BLOCK_ADS=on
      - BLOCK_MALICIOUS=on

      # Control Server
      - HTTP_CONTROL_SERVER_ADDRESS=:8000


    ports:
      - 38888:38888    # Gluetun HTTP proxy server
      - 38443:443      # HTTPS/SSL traffic passthrough
      - 8999:80        # HTTP traffic/alternative web interface port
      - 8898:8000
      - 21080:1080

    labels:
      - "autoheal=true"
      - "com.centurylinklabs.watchtower.enable=true"
    container_name: gluetun
    devices:
      - /dev/net/tun:/dev/net/tun
    cap_add:
      - NET_ADMIN
    restart: unless-stopped
    volumes:
      - ./:/gluetun

  socks5:
    image: serjs/go-socks5-proxy:latest
    container_name: gluetun-socks5
    network_mode: "service:gluetun"
    environment:
      - REQUIRE_AUTH=false
    depends_on:
      - gluetun
    restart: unless-stopped