networks:
  proxy:
    external: true
    name: ${TRAEFIK_DOCKER_NETWORK:-proxy}
  media:
    driver: bridge
    name: ${MEDIA_NETWORK_NAME:-media}

services:
  flaresolverr:
    image: ${FLARESOLVERR_IMAGE:-ghcr.io/flaresolverr/flaresolverr:latest}
    container_name: ${FLARESOLVERR_CONTAINER_NAME:-flaresolverr}
    environment:
      - LOG_LEVEL=${LOG_LEVEL:-info}
      - LOG_HTML=${LOG_HTML:-false}
      - CAPTCHA_SOLVER=${CAPTCHA_SOLVER:-none}
      - TZ=${TZ:-Europe/Madrid}
    restart: unless-stopped
    networks:
      - media
    shm_size: ${FLARESOLVERR_SHM_SIZE:-1gb}

  prowlarr:
    image: ${PROWLARR_IMAGE:-lscr.io/linuxserver/prowlarr:latest}
    container_name: ${PROWLARR_CONTAINER_NAME:-prowlarr}
    environment:
      - PUID=${PUID:-0}
      - PGID=${PGID:-0}
      - TZ=${TZ:-Europe/Madrid}
    volumes:
      - ${COMMON_PATH}/configs/prowlarr:/config:Z
    restart: unless-stopped
    networks:
      - media
      - proxy
    labels:
      - traefik.enable=${TRAEFIK_ENABLE:-true}
      - traefik.docker.network=${TRAEFIK_DOCKER_NETWORK:-proxy}
      - traefik.http.routers.prowlarr.rule=Host(`${PROWLARR_HOST}`)
      - traefik.http.routers.prowlarr.entrypoints=${TRAEFIK_ENTRYPOINTS:-websecure}
      - traefik.http.routers.prowlarr.tls=${TRAEFIK_TLS:-true}
      - traefik.http.routers.prowlarr.tls.certresolver=${TRAEFIK_CERTRESOLVER:-letsencrypt}
      - traefik.http.routers.prowlarr.middlewares=${AUTH_MIDDLEWARE:-authentik@docker}
      - traefik.http.services.prowlarr.loadbalancer.server.port=${PROWLARR_PORT:-9696}

  jackett:
    image: ${JACKETT_IMAGE:-lscr.io/linuxserver/jackett:latest}
    container_name: ${JACKETT_CONTAINER_NAME:-jackett}
    environment:
      - PUID=${PUID:-0}
      - PGID=${PGID:-0}
      - TZ=${TZ:-Europe/Madrid}
    volumes:
      - ${COMMON_PATH}/configs/jackett:/config:Z
    restart: unless-stopped
    networks:
      - media
      - proxy
    labels:
      - traefik.enable=${TRAEFIK_ENABLE:-true}
      - traefik.docker.network=${TRAEFIK_DOCKER_NETWORK:-proxy}
      - traefik.http.routers.jackett.rule=Host(`${JACKETT_HOST}`)
      - traefik.http.routers.jackett.entrypoints=${TRAEFIK_ENTRYPOINTS:-websecure}
      - traefik.http.routers.jackett.tls=${TRAEFIK_TLS:-true}
      - traefik.http.routers.jackett.tls.certresolver=${TRAEFIK_CERTRESOLVER:-letsencrypt}
      - traefik.http.routers.jackett.middlewares=${AUTH_MIDDLEWARE:-authentik@docker}
      - traefik.http.services.jackett.loadbalancer.server.port=${JACKETT_PORT:-9117}

  sonarr:
    image: ${SONARR_IMAGE:-lscr.io/linuxserver/sonarr:latest}
    container_name: ${SONARR_CONTAINER_NAME:-sonarr}
    environment:
      - PUID=${PUID:-0}
      - PGID=${PGID:-0}
      - TZ=${TZ:-Europe/Madrid}
    volumes:
      - ${COMMON_PATH}/configs/sonarr:/config:Z
      - ${MEDIA_TV:-/mnt/media/tv}:/tv
      - ${MEDIA_DOWNLOADS:-/mnt/media/downloads}:/downloads
    restart: unless-stopped
    networks:
      - media
      - proxy
    labels:
      - traefik.enable=${TRAEFIK_ENABLE:-true}
      - traefik.docker.network=${TRAEFIK_DOCKER_NETWORK:-proxy}
      - traefik.http.routers.sonarr.rule=Host(`${SONARR_HOST}`)
      - traefik.http.routers.sonarr.entrypoints=${TRAEFIK_ENTRYPOINTS:-websecure}
      - traefik.http.routers.sonarr.tls=${TRAEFIK_TLS:-true}
      - traefik.http.routers.sonarr.tls.certresolver=${TRAEFIK_CERTRESOLVER:-letsencrypt}
      - traefik.http.routers.sonarr.middlewares=${AUTH_MIDDLEWARE:-authentik@docker}
      - traefik.http.services.sonarr.loadbalancer.server.port=${SONARR_PORT:-8989}

  radarr:
    image: ${RADARR_IMAGE:-lscr.io/linuxserver/radarr:latest}
    container_name: ${RADARR_CONTAINER_NAME:-radarr}
    environment:
      - PUID=${PUID:-0}
      - PGID=${PGID:-0}
      - TZ=${TZ:-Europe/Madrid}
    volumes:
      - ${COMMON_PATH}/configs/radarr:/config:Z
      - ${MEDIA_MOVIES:-/mnt/media/movies}:/movies
      - ${MEDIA_DOWNLOADS:-/mnt/media/downloads}:/downloads
    restart: unless-stopped
    networks:
      - media
      - proxy
    labels:
      - traefik.enable=${TRAEFIK_ENABLE:-true}
      - traefik.docker.network=${TRAEFIK_DOCKER_NETWORK:-proxy}
      - traefik.http.routers.radarr.rule=Host(`${RADARR_HOST}`)
      - traefik.http.routers.radarr.entrypoints=${TRAEFIK_ENTRYPOINTS:-websecure}
      - traefik.http.routers.radarr.tls=${TRAEFIK_TLS:-true}
      - traefik.http.routers.radarr.tls.certresolver=${TRAEFIK_CERTRESOLVER:-letsencrypt}
      - traefik.http.routers.radarr.middlewares=${AUTH_MIDDLEWARE:-authentik@docker}
      - traefik.http.services.radarr.loadbalancer.server.port=${RADARR_PORT:-7878}

  jellyseerr:
    image: ${JELLYSEERR_IMAGE:-fallenbagel/jellyseerr:latest}
    container_name: ${JELLYSEERR_CONTAINER_NAME:-jellyseerr}
    environment:
      - LOG_LEVEL=${JELLYSEERR_LOG_LEVEL:-debug}
      - TZ=${TZ:-Europe/Madrid}
    volumes:
      - ${COMMON_PATH}/configs/jellyseerr:/app/config:Z
    restart: unless-stopped
    networks:
      - media
      - proxy
    labels:
      - traefik.enable=${TRAEFIK_ENABLE:-true}
      - traefik.docker.network=${TRAEFIK_DOCKER_NETWORK:-proxy}
      - traefik.http.routers.jellyseerr.rule=Host(`${JELLYSEERR_HOST}`)
      - traefik.http.routers.jellyseerr.entrypoints=${TRAEFIK_ENTRYPOINTS:-websecure}
      - traefik.http.routers.jellyseerr.tls=${TRAEFIK_TLS:-true}
      - traefik.http.routers.jellyseerr.tls.certresolver=${TRAEFIK_CERTRESOLVER:-letsencrypt}
      - traefik.http.routers.jellyseerr.middlewares=${AUTH_MIDDLEWARE:-authentik@docker}
      - traefik.http.services.jellyseerr.loadbalancer.server.port=${JELLYSEERR_PORT:-5055}

  jellyfin:
    image: ${JELLYFIN_IMAGE:-lscr.io/linuxserver/jellyfin:latest}
    container_name: ${JELLYFIN_CONTAINER_NAME:-jellyfin-vps}
    environment:
      - PUID=${PUID:-0}
      - PGID=${PGID:-0}
      - TZ=${TZ:-Europe/Madrid}
    volumes:
      - ${COMMON_PATH}/configs/jellyfin-vps:/config:Z
      - ${COMMON_PATH}/jellyfin/cache-vps:/cache:Z
      - ${MEDIA_TV:-/mnt/media/tv}:/data/tvshows
      - ${MEDIA_MOVIES:-/mnt/media/movies}:/data/movies
      - ${MEDIA_DOWNLOADS:-/mnt/media/downloads}:/data/media_downloads
    restart: unless-stopped
    networks:
      - media
      - proxy
    labels:
      - traefik.enable=${TRAEFIK_ENABLE:-true}
      - traefik.docker.network=${TRAEFIK_DOCKER_NETWORK:-proxy}
      - traefik.http.routers.jellyfin.rule=Host(`${JELLYFIN_HOST}`)
      - traefik.http.routers.jellyfin.entrypoints=${TRAEFIK_ENTRYPOINTS:-websecure}
      - traefik.http.routers.jellyfin.tls=${TRAEFIK_TLS:-true}
      - traefik.http.routers.jellyfin.tls.certresolver=${TRAEFIK_CERTRESOLVER:-letsencrypt}
      - traefik.http.routers.jellyfin.middlewares=${AUTH_MIDDLEWARE:-authentik@docker}
      - traefik.http.services.jellyfin.loadbalancer.server.port=${JELLYFIN_PORT:-8096}