ecac3c8949
- collect-compose.yml: Fetches all compose files from docker_hosts - collect-env-templates.yml: Creates .env.example with secrets redacted - deploy-compose.yml: Pushes compose files to hosts (with optional restart) - diff-compose.yml: Shows differences before deploying Collected 23 compose files from 7 hosts: - replicant: 12 stacks (arr-stack, mealie, portainer, etc) - docker666: 4 stacks (unifi, gluetun, uptime, utils) - databases: 3 stacks (postgres, forgejo, utils) - download-stack: 2 stacks (download-stack, utils) - media-transcode: 1 stack (utils) - network-services: 1 stack (utils) - immich: 1 stack (utils)
65 lines
1.6 KiB
YAML
65 lines
1.6 KiB
YAML
services:
|
|
gluetun:
|
|
image: qmcgaw/gluetun:v3
|
|
environment:
|
|
# Core VPN Configuration - WireGuard (faster)
|
|
#- VPN_SERVICE_PROVIDER=protonvpn
|
|
#- VPN_TYPE=wireguard
|
|
#- WIREGUARD_PRIVATE_KEY=MDzSV32z3GxR5VPtmtVfDR8Vkw00irXJQqyye+8sg3o=
|
|
|
|
# Core VPN Configuration - OpenVPN (fallback - uncomment if WireGuard issues)
|
|
- VPN_SERVICE_PROVIDER=protonvpn
|
|
- VPN_TYPE=openvpn
|
|
- OPENVPN_USER=LKXaFJ0HOa6RbySE+pmp
|
|
- OPENVPN_PASSWORD=6fISYNXVzWrgzUskzsAbVF3MjYYqJ8JV
|
|
|
|
# Server Selection
|
|
- SERVER_COUNTRIES=United States
|
|
- SERVER_CITIES=Secaucus,Chicago,New York
|
|
|
|
# Basic Settings
|
|
- TZ=America/New_York
|
|
- PUID=1000
|
|
- PGID=1000
|
|
|
|
# Proxy Configuration
|
|
- HTTPPROXY=on
|
|
- HTTPPROXY_LISTENING_ADDRESS=:38888
|
|
- HTTPPROXY_STEALTH=on
|
|
|
|
# Security Features
|
|
- BLOCK_ADS=on
|
|
- BLOCK_MALICIOUS=on
|
|
|
|
# Control Server
|
|
- HTTP_CONTROL_SERVER_ADDRESS=:8000
|
|
|
|
|
|
ports:
|
|
- 38888:38888 # Gluetun HTTP proxy server
|
|
- 38443:443 # HTTPS/SSL traffic passthrough
|
|
- 8999:80 # HTTP traffic/alternative web interface port
|
|
- 8898:8000
|
|
- 21080:1080
|
|
|
|
labels:
|
|
- "autoheal=true"
|
|
- "com.centurylinklabs.watchtower.enable=true"
|
|
container_name: gluetun
|
|
devices:
|
|
- /dev/net/tun:/dev/net/tun
|
|
cap_add:
|
|
- NET_ADMIN
|
|
restart: unless-stopped
|
|
volumes:
|
|
- ./:/gluetun
|
|
|
|
socks5:
|
|
image: serjs/go-socks5-proxy:latest
|
|
container_name: gluetun-socks5
|
|
network_mode: "service:gluetun"
|
|
environment:
|
|
- REQUIRE_AUTH=false
|
|
depends_on:
|
|
- gluetun
|
|
restart: unless-stopped
|