Docker download stack

docker-compose.yaml

version: "3.9"
services:
  qbittorrent:
    image: lscr.io/linuxserver/qbittorrent:latest
    container_name: qbittorrent
    environment:
      - PUID=${PUID}
      - PGID=${PGID}
      - TZ=${TIMEZONE}
      - WEBUI_PORT=8080
    volumes:
      - /data/torrent/data/qb:/config
      - /Storage/hdd0/Downloads:/Storage/hdd0/Downloads
      - /Storage/hdd1/Downloads:/Storage/hdd1/Downloads
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    network_mode: "service:mullvad"
    depends_on:
      - mullvad
    restart: unless-stopped
    labels:
      - "com.centurylinklabs.watchtower.enable=true"

  sonarr:
    image: lscr.io/linuxserver/sonarr:latest
    container_name: sonarr
    environment:
      - PUID=${PUID}
      - PGID=${PGID}
      - TZ=${TIMEZONE}
    volumes:
      - /data/torrent/data/sonarr:/config
      - /Storage/hdd0/Downloads:/Storage/hdd0/Downloads
      - /Storage/hdd1/Downloads:/Storage/hdd1/Downloads
      - /Storage/hdd0/Series:/Storage/hdd0/Series
      - /Storage/hdd1/Series:/Storage/hdd1/Series
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    expose:
      - '8989'
    restart: unless-stopped
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.sonarr.rule=Host(`${SONARR_HOST}`)"
      - "traefik.http.routers.sonarr.middlewares=local@file"
      - "traefik.http.routers.sonarr.entrypoints=websecure"
      - "traefik.http.routers.sonarr.tls.certresolver=myresolver"
      - "com.centurylinklabs.watchtower.enable=true"

  radarr:
    image: lscr.io/linuxserver/radarr:latest
    container_name: radarr
    environment:
      - PUID=${PUID}
      - PGID=${PGID}
      - TZ=Europe/Amsterdam
    volumes:
      - /data/torrent/data/radarr:/config
      - /Storage/hdd0/Downloads:/Storage/hdd0/Downloads
      - /Storage/hdd1/Downloads:/Storage/hdd1/Downloads
      - /Storage/hdd0/Movies:/Storage/hdd0/Movies
      - /Storage/hdd1/Movies:/Storage/hdd1/Movies
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    expose:
      - '7878'
    restart: unless-stopped
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.radarr.rule=Host(`${RADARR_HOST}`)"
      - "traefik.http.routers.radarr.middlewares=local@file"
      - "traefik.http.routers.radarr.entrypoints=websecure"
      - "traefik.http.routers.radarr.tls.certresolver=myresolver"
      - "com.centurylinklabs.watchtower.enable=true"

  bazarr:
    image: lscr.io/linuxserver/bazarr:latest
    container_name: bazarr
    environment:
      - PUID=${PUID}
      - PGID=${PGID}
      - TZ=${TIMEZONE}
    volumes:
      - /data/torrent/data/bazarr:/config
      - /Storage/hdd0/Downloads:/Storage/hdd0/Downloads
      - /Storage/hdd1/Downloads:/Storage/hdd1/Downloads
      - /Storage/hdd0/Movies:/Storage/hdd0/Movies
      - /Storage/hdd0/Series:/Storage/hdd0/Series
      - /Storage/hdd1/Movies:/Storage/hdd1/Movies
      - /Storage/hdd1/Series:/Storage/hdd1/Series
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    expose:
      - '6767'
    restart: unless-stopped
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.bazarr.rule=Host(`${BAZARR_HOST}`)"
      - "traefik.http.routers.bazarr.middlewares=local@file"
      - "traefik.http.routers.bazarr.entrypoints=websecure"
      - "traefik.http.routers.bazarr.tls.certresolver=myresolver"
      - "com.centurylinklabs.watchtower.enable=true"

  jackett:
    image: lscr.io/linuxserver/jackett:latest
    container_name: jackett
    environment:
      - PUID=${PUID}
      - PGID=${PGID}
      - TZ=${TIMEZONE}
    volumes:
      - /data/torrent/data/jackett/config:/config
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    expose:
      - '9117'
    restart: unless-stopped
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.jackett.rule=Host(`${JACKETT_HOST}`)"
      - "traefik.http.routers.jackett.middlewares=local@file"
      - "traefik.http.routers.jackett.entrypoints=websecure"
      - "traefik.http.routers.jackett.tls.certresolver=myresolver"
      - "com.centurylinklabs.watchtower.enable=true"



  mullvad:
    image: lscr.io/linuxserver/wireguard:latest
    container_name: mullvad
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    security_opt:
      - label:disable
    ports:
      - 8080:8080
      - 55939:55939
      - 55939:55939/udp
    dns:
      - 1.1.1.1
      - 1.0.0.1
    sysctls:
      - net.ipv4.conf.all.src_valid_mark=1
      - net.ipv6.conf.all.disable_ipv6=1
    volumes:
      - /data/torrent/data/vpn/wg0.conf:/config/wg0.conf
      - /lib/modules:/lib/modules
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    restart: unless-stopped
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.qbit.rule=Host(`${QBIT_HOST}`)"
      - "traefik.http.routers.qbit.middlewares=local@file"
      - "traefik.http.routers.qbit.entrypoints=websecure"
      - "traefik.http.routers.qbit.tls.certresolver=myresolver"
      - "traefik.http.services.qbit.loadbalancer.server.port=8080"
      - "com.centurylinklabs.watchtower.enable=true"