services:
  goatmediastackarr:
    image: ghcr.io/bdlnaredi/goatmediastackarr:latest
    container_name: goatmediastackarr
    restart: unless-stopped
    ports:
      - "2806:2806"   # GoatMediaStackarr
      - "8096:8096"   # Jellyfin for TV and phone apps
      - "5055:5055"   # Seerr request page
      # - "32400:32400" # Plex, if you add plex to GOAT_ENGINES
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Asia/Kolkata
      - VPN_ENABLED=false          # true: download apps go through the VPN, with a kill switch
      - VPN_TYPE=wireguard         # or openvpn; put the provider's file in ./config/vpn
      # - VPN_USER=                # OpenVPN only
      # - VPN_PASS=
      # - VPN_PORT_FORWARD=natpmp  # ProtonVPN and other NAT-PMP providers
      # - GOAT_ENGINES=sonarr,radarr,lidarr,prowlarr,bazarr,qbittorrent,sabnzbd,jellyfin,seerr,plex,tautulli
      # - PLEX_CLAIM=claim-xxxx    # from https://plex.tv/claim, to link the built-in Plex to your account
    volumes:
      - ./config:/config           # every app's settings: back this up
      - ./media:/media             # library: tv, movies, music
      - ./downloads:/downloads     # torrents and usenet downloads
      # To let downloads be hardlinked into the library, map one folder instead and set:
      # - ./data:/data   with   MEDIA_DIR=/data/media  and  DOWNLOADS_DIR=/data/downloads
    cap_add:
      - NET_ADMIN                  # needed for the VPN and its kill switch
    devices:
      - /dev/net/tun:/dev/net/tun
    sysctls:
      - net.ipv4.conf.all.src_valid_mark=1
      - net.ipv4.conf.all.rp_filter=2