networks:
  emby_chris_network:
    enable_ipv6: false
    name: emby_chris_network

services:
  wireguard:
    image: lscr.io/linuxserver/wireguard:latest
    container_name: wireguard
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Berlin
      - LOCAL_NETWORK=10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,172.18.0.0/16
    volumes:
      - /app-config/wireguard/:/config
      - /lib/modules:/lib/modules
    ports:
      - 0.0.0.0:8096:8096  # Emby erbt diesen Port über network_mode
    sysctls:
      - net.ipv4.conf.all.src_valid_mark=1
      - net.ipv4.ip_forward=1        # ← NEU: Forwarding im Container
    networks:
      - emby_chris_network          # ← NEU: Netzwerk zuweisen
    restart: unless-stopped

  emby:
    image: lscr.io/linuxserver/emby:latest
    container_name: emby
    volumes:
      - /app-config/emby:/config
      - /app-config/emby_backup:/backup
      - data:/data
    tmpfs:
      - /tmp:size=8G,mode=1777
    environment:
      - TZ=Europe/Berlin
      - PUID=1000
      - PGID=1000
      - NVIDIA_DRIVER_CAPABILITIES=all
      - NVIDIA_VISIBLE_DEVICES=all
    restart: unless-stopped
    devices:
      - /dev/nvidia0:/dev/nvidia0
      - /dev/nvidiactl:/dev/nvidiactl
      - /dev/nvidia-uvm:/dev/nvidia-uvm
      - /dev/nvidia-uvm-tools:/dev/nvidia-uvm-tools
      - /dev/dri/renderD128:/dev/dri/renderD128
    deploy:
      resources:
        reservations:
          devices:
            - driver: nvidia
              count: all
              capabilities: [gpu]
    network_mode: "service:wireguard"  # Emby nutzt WireGuard-Netzwerk
    depends_on:
      - wireguard                      # ← NEU: Startreihenfolge sichern

volumes:
  data:
    name: emby_data
    driver: local
    driver_opts:
      device: :/volume1/nas
      o: addr=192.168.5.100,nolock,soft,rw
      type: nfs
  chris:
    name: chris_data
    driver: local
    driver_opts:
      device: :/volume1/chris
      o: addr=192.168.5.100,nolock,soft,rw
      type: nfs