version: "3"

networks:
  traefik:
    external: true

services:
  gluetun:
    container_name: gluetun
    image: qmcgaw/gluetun
    restart: unless-stopped
    cap_add:
      - NET_ADMIN
    networks:
      - traefik
    ports:
      - 8888:8888 # HTTP Proxy
    devices:
      - /dev/net/tun:/dev/net/tun
    environment:
      VPN_TYPE: wireguard
      VPN_SERVICE_PROVIDER: custom
      WIREGUARD_PRIVATE_KEY: "{{ wireguard_private_key }}"
      WIREGUARD_PUBLIC_KEY: "h7l7Uw9Fhmsk5tUGdvL/FmI0ogEuJVsv/+wqu9pr1A8="
      WIREGUARD_ADDRESSES: "10.13.128.101/24"
      VPN_ENDPOINT_IP: "146.70.137.50"
      VPN_ENDPOINT_PORT: "1443"
      FIREWALL_VPN_INPUT_PORTS: "13221"
      DOT: "off"
      DNS_ADDRESS: "9.9.9.9"
      TZ: "{{ timezone }}"
      HTTPPROXY: "on"
      HTTPPROXY_USER: httpproxy
      HTTPPROXY_PASSWORD: httpproxy