networks:
  media_network:
    name: media_network

services:
  wireguard:
    image: lscr.io/linuxserver/wireguard:latest
    container_name: wireguard
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Berlin
      - INTERNAL_CONTROL_MODS=true
      - NETWORK_INTERFACES=eth0
      - LOCAL_NETWORK=172.18.0.0/16,10.200.200.0/24,10.2.1.0/24
    volumes:
      - /app-config/wireguard/:/config
      - /lib/modules:/lib/modules # Notwendig für WireGuard im Kernel
    ports:
      - 0.0.0.0:7777:7777 # SABnzbd Web-UI Port wird hier nach außen gereicht
    sysctls:
      - net.ipv4.conf.all.src_valid_mark=1
    restart: unless-stopped

  sabnzbd:
    image: lscr.io/linuxserver/sabnzbd:latest
    container_name: sabnzbd
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Berlin
    depends_on:
      - wireguard
    network_mode: "service:wireguard" # Teilt sich das Netzwerk mit WireGuard
    volumes:
      - /app-config/sabnzbd/config:/config
      - usenet:/usenet
      - tdarr:/tdarr
      - chris:/chris
      - data:/data
    restart: unless-stopped

volumes:
  usenet:
    name: tdarr_usenet
    driver: local
    driver_opts:
      device: :/usenet
      o: addr=10.2.1.1,nolock,soft,rw
      type: nfs
  tdarr:
    name: tdarr
    driver: local
    driver_opts:
      device: :/tdarr
      o: addr=10.2.1.1,nolock,soft,rw
      type: nfs
  chris:
    name: chris_data
    driver: local
    driver_opts:
      device: :/volume1/chris
      o: addr=192.168.1.24,nolock,soft,rw
      type: nfs
  data:
    name: tdarr_data
    driver: local
    driver_opts:
      device: :/volume1/nas
      o: addr=192.168.1.24,nolock,soft,rw
      type: nfs