version: "3.9"

services:
  # request:
  #   build:
  #     context: ./request
  #   depends_on:
  #     - "database"
  #     - "torrent_client"
  #   env_file:
  #     - ./request/.env
  #   links:
  #     - "database"
  #     - "torrent_client"
  #   ports:
  #     - 3200:3200
  #   restart: unless-stopped
  #   secrets:
  #     - app_key
  #     - discord_bot_key
  #     - mysql_root_password
  #     - plex_token
  #     - tmdb_key
  #     - tvdb_key
  #     - tvdb_pin
  #   user: ${UID}:${GID}
  #   volumes:
  #     - var:/var/autoplex

  # seeker:
  #   build:
  #     context: ./seeker
  #   depends_on:
  #     - "database"
  #     - "torrent_client"
  #   env_file:
  #     - ./seeker/.env
  #   links:
  #     - "database"
  #     - "torrent_client"
  #   restart: unless-stopped
  #   secrets:
  #     - mysql_root_password
  #   user: ${UID}:${GID}
  #   volumes:
  #     - var:/var/autoplex

  # torrent_webui:
  #   build:
  #     context: ./torrent-webui
  #   depends_on:
  #     - "database"
  #     - "torrent_client"
  #   env_file:
  #     - ./torrent-webui/.env
  #   links:
  #     - "database"
  #     - "torrent_client"
  #   ports:
  #     - 3300:3300
  #   secrets:
  #     - mysql_root_password
  #   user: ${UID}:${GID}
  #   volumes:
  #     - var:/var/autoplex

  torrent_client:
    build:
      context: .
      args:
        BASE: base-slim
        SERVICE: torrent-client
    depends_on:
      - "database"
      - "vpn"
    env_file:
      - ./services/torrent-client/.env
    healthcheck:
      test: ["CMD", "ping", "-q", "-c1", "google.com"]
      interval: 5m
      timeout: 10s
      retries: 3
      start_period: 5m
    network_mode: service:vpn
    restart: unless-stopped
    secrets:
      - mysql_root_password
    user: ${UID}:${GID}
    volumes:
      - var:/var/autoplex

  database:
    image: mysql
    command: --default-authentication-plugin=mysql_native_password
    environment:
      MYSQL_ROOT_PASSWORD_FILE: /run/secrets/mysql_root_password
    ports:
      - 33061:3306
    restart: unless-stopped
    security_opt:
      - seccomp=unconfined
    secrets:
      - mysql_root_password
    volumes:
      - ./bootstrap/database/init:/docker-entrypoint-initdb.d
      - mysql:/var/lib/mysql

  vpn:
    build:
      context: ./utils/vpn
    cap_add:
      - net_admin
    command:
      - '-f ""'
    environment:
      TZ: "CST6CDT"
    links:
      - "database"
    networks:
      - default
    read_only: true
    tmpfs:
      - /run
      - /tmp
    restart: unless-stopped
    secrets:
      - vpn_auth
    security_opt:
      - label:disable
    stdin_open: true
    tty: true
    volumes:
      - /dev/net:/dev/net:z
      - ./.volumes/vpn:/vpn

secrets:
  app_key:
    file: ./.secrets/app_key
  discord_bot_key:
    file: ./.secrets/discord_bot_key
  mysql_root_password:
    file: ./.secrets/mysql_root_password
  plex_token:
    file: ./.secrets/plex_token
  tmdb_key:
    file: ./.secrets/tmdb_key
  tvdb_key:
    file: ./.secrets/tvdb_key
  tvdb_pin:
    file: ./.secrets/tvdb_pin
  vpn_auth:
    file: ./.secrets/vpn_auth

volumes:
  mysql:
  var: