version: "2.4"
networks:
  schweinshausen_10_v4:
    external: true
    name: schweinshausen_10_v4
services:
  watchtower:
    image: containrrr/watchtower
    container_name: watchtower
    hostname: watchtower
    networks:
      - schweinshausen_10_v4
    dns:
      - 192.168.1.5
    environment:
      - TZ=Europe/Berlin
      - WATCHTOWER_CLEANUP=true
      - WATCHTOWER_SCHEDULE=* 30 4 * * *
      - WATCHTOWER_DEBUG=true
      - WATCHTOWER_LABEL_ENABLE=true
      - WATCHTOWER_NOTIFICATIONS=email
      - WATCHTOWER_NOTIFICATION_EMAIL_FROM=****
      - WATCHTOWER_NOTIFICATION_EMAIL_TO==****
      - WATCHTOWER_NOTIFICATION_EMAIL_SERVER=smtp.gmail.com
      - WATCHTOWER_NOTIFICATION_EMAIL_SERVER_USER==****
      - WATCHTOWER_NOTIFICATION_EMAIL_SERVER_PASSWORD==****
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    restart: unless-stopped
  nginx-proxy-manager:
    image: jc21/nginx-proxy-manager:latest
    container_name: nginx-proxy-manager
    hostname: nginx-proxy-manager
    networks:
      - schweinshausen_10_v4
    dns:
      - 192.168.1.5
    volumes:
      - /Sonstiges/Docker/Daten/nginx-proxy-manager:/data
      - /Sonstiges/Docker/Daten/nginx-proxy-manager_letsencrypt:/etc/letsencrypt
    labels:
      - com.centurylinklabs.watchtower.enable=true
    healthcheck:
      test: ["CMD", "/bin/check-health"]
      interval: 10s
      timeout: 3s
    ports:
      - 443:443
      - 80:80
      - 81:81
    restart: unless-stopped
  nextcloud:
    image: lscr.io/linuxserver/nextcloud
    container_name: nextcloud
    hostname: nextcloud
    networks:
      - schweinshausen_10_v4
    dns:
      - 192.168.1.5
    depends_on:
      - mariadb_nextcloud
      - redis
    volumes:
      - /Sonstiges/Docker/Konfigurationen/Nextcloud:/config
      - /Sonstiges/Docker/Daten/Nextcloud:/data
      - /srv/mergerfs/Schweinshausen_Pool:/Schweinshausen_Pool
      - /etc/localtime:/etc/localtime
#    labels:
#      - com.centurylinklabs.watchtower.enable=true
    environment:
      - PUID=1000
      - PGID=100
      - TZ=Europe/Berlin
    expose:
      - "443"
#    ports:
#      - 8443:443
    restart: unless-stopped
  mariadb_nextcloud:
    image: mariadb
#    command: --innodb-read-only-compressed=OFF
    command: --transaction-isolation=READ-COMMITTED --binlog-format=ROW --innodb-file-per-table=1 --skip-innodb-read-only-compressed
    container_name: mariadb_nextcloud
    hostname: mariadb_nextcloud
    networks:
      - schweinshausen_10_v4
    dns:
      - 192.168.1.5
    volumes:
      - /Sonstiges/Docker/Daten/MariaDB_Nextcloud:/var/lib/mysql
      - /Sonstiges/Docker/Konfigurationen/MariaDB_Nextcloud:/etc/mysql/conf.d
      - /etc/localtime:/etc/localtime
#    labels:
#      - com.centurylinklabs.watchtower.enable=true
    environment:
      - MYSQL_ROOT_PASSWORD==****
      - MYSQL_USER=Nextcloud
      - MYSQL_PASSWORD==****
      - MYSQL_DATABASE=Nextcloud
    expose:
      - "3306"
#    ports:
#      - 3306:3306
    restart: unless-stopped
  plex:
    image: lscr.io/linuxserver/plex
    container_name: plex
    hostname: plex
    networks:
      - schweinshausen_10_v4
    dns:
      - 192.168.1.5
    devices:
      - "/dev/dri:/dev/dri"
      - "/dev/bus/usb:/dev/bus/usb"
    volumes:
      - /srv/mergerfs/Schweinshausen_Pool/Medien:/Medien
      - /Sonstiges/Docker/Konfigurationen/Plex:/config
      - /etc/localtime:/etc/localtime
      - /dev/shm:/transcode
    labels:
      - com.centurylinklabs.watchtower.enable=true
    environment:
      - TZ=Europe/Berlin
      - PLEX_CLAIM==****
      - PUID=1000
      - PGID=100
      - VERSION=docker
    expose:
      - "32400"
      - "33400"
      - "32410"
      - "32412-32414/udp"
    ports:
      - 32401:32400
#      - 33400:33400
#      - 32410:32410/udp
#      - 32412:32412/udp
#      - 32413:32413/udp
#      - 32414:32414/udp
    restart: unless-stopped
  tautulli:
    image: tautulli/tautulli
    container_name: tautulli
    hostname: tautulli
    networks:
      - schweinshausen_10_v4
    dns:
      - 192.168.1.5
    volumes:
      - /Sonstiges/Docker/Konfigurationen/Tautulli:/config
      - /etc/localtime:/etc/localtime
    labels:
      - com.centurylinklabs.watchtower.enable=true
    environment:
      - TZ=Europe/Berlin
      - PUID=1000
      - PGID=100
    expose:
      - "8181"
#    ports:
#      - 8181:8181
    restart: unless-stopped
  sonarr:
    image: lscr.io/linuxserver/sonarr
    container_name: sonarr
    hostname: sonarr
    networks:
      - schweinshausen_10_v4
    dns:
      - 192.168.1.5
    volumes:
      - /Sonstiges/Docker/Konfigurationen/Sonarr:/config
      - /srv/mergerfs/Schweinshausen_Pool//Download/Sonarr:/downloads
      - /srv/mergerfs/Schweinshausen_Pool/Medien:/tv
      - /etc/localtime:/etc/localtime
    labels:
      - com.centurylinklabs.watchtower.enable=true
    environment:
      - TZ=Europe/Berlin
      - PUID=1000
      - PGID=100
    expose:
      - "8989"
#    ports:
#      - 8989:8989
    restart: unless-stopped
  redis:
    image: redis
    container_name: redis
    hostname: redis
    networks:
      - schweinshausen_10_v4
    dns:
      - 192.168.1.5
    command: redis-server --save 20 1
    volumes:
      - /Sonstiges/Docker/Daten/Redis:/data
      - /etc/localtime:/etc/localtime
    labels:
      - com.centurylinklabs.watchtower.enable=true
    expose:
      - "6379"
#    ports:
#      - 6379:6379
    restart: unless-stopped
  handbrake:
    image: jlesage/handbrake
    container_name: handbrake
    hostname: handbrake
    networks:
      - schweinshausen_10_v4
    dns:
      - 192.168.1.5
    devices:
      - "/dev/dri:/dev/dri"
    volumes:
      - /Sonstiges/Docker/Konfigurationen/Handbrake:/config
      - /srv/mergerfs/Schweinshausen_Pool//Download/jDownloader 2:/watch
      - /srv/mergerfs/Schweinshausen_Pool//Download/Konvertiert:/output
      - /Sonstiges/Docker/Daten/Handbrake:/storage
      - /etc/localtime:/etc/localtime
#    labels:
#      - com.centurylinklabs.watchtower.enable=true
    environment:
      - TZ=Europe/Berlin
      - USER_ID=1000
      - GROUP_ID=100
      - AUTOMATED_CONVERSION_PRESET=Custom/H.265 MKV Passthrough_Intel
      - AUTOMATED_CONVERSION_FORMAT=mkv
      - AUTOMATED_CONVERSION_KEEP_SOURCE=0
      - AUTOMATED_CONVERSION_NON_VIDEO_FILE_ACTION=copy
      - AUTOMATED_CONVERSION_SOURCE_STABLE_TIME=5
      - AUTOMATED_CONVERSION_CHECK_INTERVAL=5
      - AUTOMATED_CONVERSION_OUTPUT_SUBDIR=SAME_AS_SRC
    expose:
      - "5800"
#    ports:
#      - 5800:5800
    restart: unless-stopped
  bitwarden:
    image: vaultwarden/server
    container_name: bitwarden
    hostname: bitwarden
    networks:
      - schweinshausen_10_v4
    dns:
      - 192.168.1.5
    volumes:
      - /Sonstiges/Docker/Daten/Vaultwarden:/data/
      - /etc/localtime:/etc/localtime
    labels:
      - com.centurylinklabs.watchtower.enable=true
    environment:
      - LOG_FILE=/data/vaultwarden.log
      - LOG_LEVEL=info
      - EXTENDED_LOGGING=true
      - WEBSOCKET_ENABLED=true
    expose:
      - "80"
#    ports:
#      - 8002:80
    restart: unless-stopped
  duplicati:
    image: lscr.io/linuxserver/duplicati
    container_name: duplicati
    hostname: duplicati
    networks:
      - schweinshausen_10_v4
    dns:
      - 192.168.1.5
    volumes:
      - /Sonstiges/Docker/Konfigurationen/duplicati:/config
      - /Sonstiges/Docker/Daten/duplicati/backups:/backups
      - /:/source
      - /etc/localtime:/etc/localtime
    labels:
      - com.centurylinklabs.watchtower.enable=true
    environment:
      - LOG_FILE=/data/vaultwarden.log
      - LOG_LEVEL=warn
      - EXTENDED_LOGGING=true
      - WEBSOCKET_ENABLED=true
      - PUID=1000
      - PGID=100
      - TZ=Europe/Berlin
    expose:
      - "8200"
#    ports:
#      - 8200:8200
    restart: unless-stopped
  fail2ban:
    image: ghcr.io/crazy-max/fail2ban
    container_name: fail2ban
    hostname: fail2ban
#    networks:
#      - schweinshausen_10_v4
#    dns:
#      - 192.168.1.5    
    network_mode: "host"
    privileged: true
    cap_add:
      - NET_ADMIN
      - NET_RAW
    volumes:
      - /Sonstiges/Docker/Daten/fail2ban:/data
      - /Sonstiges/Docker/Daten/Vaultwarden/vaultwarden.log:/vaultwarden/vaultwarden.log:ro
      - /var/log:/var/log:ro
    labels:
      - com.centurylinklabs.watchtower.enable=true
    environment:
      - TZ=Europe/Berlin
      - F2B_DB_PURGE_AGE=999d
      - F2B_LOG_TARGET=/data/fail2ban.log
      - F2B_LOG_LEVEL=INFO
      - SSMTP_HOST=smtp.gmail.com
      - SSMTP_PORT=587
      - SSMTP_HOSTNAME==****
      - SSMTP_USER==****
      - SSMTP_PASSWORD==****
      - SSMTP_TLS=YES
      - SSMTP_STARTTLS=YES
    restart: unless-stopped
  influxdb:
    image: influxdb
    container_name: influxdb
    hostname: influxdb
    networks:
      - schweinshausen_10_v4
    dns:
      - 192.168.1.5
    volumes:
      - /Sonstiges/Docker/Daten/influxdb:/var/lib/influxdb2
      - /Sonstiges/Docker/Konfigurationen/influxdb:/etc/influxdb2
      - /etc/localtime:/etc/localtime:ro
      - /etc/timezone:/etc/timezone:ro
    labels:
      - com.centurylinklabs.watchtower.enable=true
    environment:
      - TZ=Europe/Berlin
      - INFLUXDB_HTTP_AUTH_ENABLED=true
      - DOCKER_INFLUXDB_INIT_MODE=setup
      - DOCKER_INFLUXDB_INIT_USERNAME==****
      - DOCKER_INFLUXDB_INIT_PASSWORD==****
      - DOCKER_INFLUXDB_INIT_ORG==****
      - DOCKER_INFLUXDB_INIT_BUCKET==****
#      - DOCKER_INFLUXDB_INIT_RETENTION="1w"
      - DOCKER_INFLUXDB_INIT_ADMIN_TOKEN==****
    expose:
      - "8086"
    ports:
      - 8086:8086
    restart: unless-stopped
  kodi:
    image: matthuisman/kodi-headless:Matrix
    container_name: kodi
    hostname: kodi
    networks:
      - schweinshausen_10_v4
    dns:
      - 192.168.1.5
    volumes:
      - /Sonstiges/Docker/Konfigurationen/Kodi:/config/.kodi
      - /etc/localtime:/etc/localtime
    labels:
      - com.centurylinklabs.watchtower.enable=true
    environment:
      - PGID=100
      - PUID=1000
      - TZ=Europe/Berlin
    expose:
      - "8080"
      - "9090"
      - "9777/udp"
    ports:
      - "8080:8080"
      - "9090:9090"
      - "9777:9777/udp"
    restart: unless-stopped
  vaultwarden-backup:
    image: ttionya/vaultwarden-backup
    container_name: vaultwarden-backup
    hostname: vaultwarden-backup
    networks:
      - schweinshausen_10_v4
    dns:
      - 192.168.1.5
    volumes:
      - /Sonstiges/Docker/Daten/Vaultwarden:/bitwarden/data/
      - /Sonstiges/Docker/Konfigurationen/Vaultwarden-Backup:/config/
    #  - /path/to/env:/.env
    labels:
      - com.centurylinklabs.watchtower.enable=true
    environment:
      - RCLONE_REMOTE_NAME=Vaultwarden_Schweinshausen
      - RCLONE_REMOTE_DIR=Vaultwarden Backup/
      - CRON="0 6 * * 6"
      - ZIP_ENABLE=TRUE
      - ZIP_PASSWORD==****
      - ZIP_TYPE=7z
    #  - BACKUP_FILE_DATE_SUFFIX=""
      - BACKUP_KEEP_DAYS=180
    #  - PING_URL=""
    #  - MAIL_SMTP_ENABLE="FALSE"
    #  - MAIL_SMTP_VARIABLES=""
      - MAIL_TO==****
      - MAIL_WHEN_SUCCESS=TRUE
      - MAIL_WHEN_FAILURE=TRUE
      - TIMEZONE="Europe/Berlin"
    restart: unless-stopped