Drop-Shielded/docker-compose.yaml

services:
  gluetun:
    image: qmcgaw/gluetun
    container_name: gluetun-shielded
    restart: unless-stopped
    networks:
      gluetun-drop-network:
        ipv4_address: 172.20.0.20
    cap_add:
      - NET_ADMIN
      - NET_RAW
    devices:
      - /dev/net/tun:/dev/net/tun
    ports:
      - "${DROP_AIRVPN_PORT}:${DROP_AIRVPN_PORT}"
    volumes:
      - ./gluetun:/gluetun
    environment:
      - HOSTNAME=gluetun-shielded
      - VPN_SERVICE_PROVIDER=airvpn
      - VPN_TYPE=wireguard
      - WIREGUARD_PRIVATE_KEY=${WIREGUARD_PRIVATE_KEY}
      - WIREGUARD_PRESHARED_KEY=${WIREGUARD_PRESHARED_KEY}
      - WIREGUARD_ADDRESSES=${WIREGUARD_ADDRESSES}
      - FIREWALL_VPN_INPUT_PORTS=${DROP_AIRVPN_PORT}
  postgres:
    image: postgres:14-alpine
    container_name: postgres-shielded
    network_mode: "service:gluetun"
    restart: unless-stopped
    healthcheck:
      test: pg_isready -d ${POSTGRES_DB_DROP} -U ${POSTGRES_USER}
      interval: 30s
      timeout: 60s
      retries: 5
      start_period: 10s
    security_opt:
      - "label=disable"
    volumes:
      - ./db:/var/lib/postgresql/data
    environment:
      - HOSTNAME=postgres-shielded
      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
      - POSTGRES_USER=${POSTGRES_USER}
      - POSTGRES_DB=${POSTGRES_DB_DROP}
  nginx:
    image: nginx:alpine
    container_name: nginx-shielded
    network_mode: "service:gluetun"
    restart: unless-stopped
    volumes:
      - ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro
      - ./nginx/certs:/etc/nginx/certs:ro
    security_opt:
      - "label=disable"
    depends_on:
      - drop
  drop:
    image: ghcr.io/drop-oss/drop:latest
    container_name: drop
    network_mode: "service:gluetun"
    restart: unless-stopped
    depends_on:
      postgres:
        condition: service_healthy
    security_opt:
      - "label=disable"
    volumes:
      - ${LIBRARY_PATH}:/library/
      #For Multi Library
      #- ${LIBRARY_PATH_1}:/library/1
      #- ${LIBRARY_PATH_2}:/library/2
      - ${DROP_DATA_PATH}:/data
    environment:
      - HOSTNAME=drop-shielded
      - DATABASE_URL=postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@postgres-shielded:5432/${POSTGRES_DB_DROP}
      - EXTERNAL_URL=http://${DROP_DDNS}:${DROP_AIRVPN_PORT}
  gamevault-backend:
    image: phalcode/gamevault-backend:latest
    container_name: gamevault-backend
    network_mode: "service:gluetun"
    restart: unless-stopped
    depends_on:
      postgres:
        condition: service_healthy
    env_file:
    - .env
    environment:
      - DB_HOST=postgres-shielded
      - DB_PORT=5432
      - DB_DATABASE=${POSTGRES_DB_GAMEVAULT}
      - DB_USERNAME=${POSTGRES_USER}
      - DB_PASSWORD=${POSTGRES_PASSWORD}
    security_opt:
      - "label=disable"
    volumes:
      # Mount the folder where your games are
      - ${LIBRARY_PATH}:/files
      # Mount the folder where GameVault should store its media
      - ./gamevault-media:/media
    #ports:
    #  - 8080:8080/tcp
networks:
  gluetun-drop-network:
    driver: bridge
    name: gluetun-drop-network
    ipam:
      config:
        - subnet: 172.20.0.0/16