services:
  gluetun:
    image: qmcgaw/gluetun
    container_name: gluetun-IRC-shielded
    restart: unless-stopped
    networks:
      gluetun-IRC-network:
        ipv4_address: 172.21.0.20
    security_opt:
      - "label=disable"
    cap_add:
      - NET_ADMIN
      - NET_RAW
    devices:
      - /dev/net/tun:/dev/net/tun
    volumes:
      - ./gluetun:/gluetun
    environment:
      - HOSTNAME=gluetun-IRC-shielded
      - VPN_SERVICE_PROVIDER=airvpn
      - VPN_TYPE=wireguard
      - WIREGUARD_PRIVATE_KEY=${WIREGUARD_PRIVATE_KEY}
      - WIREGUARD_PRESHARED_KEY=${WIREGUARD_PRESHARED_KEY}
      - WIREGUARD_ADDRESSES=${WIREGUARD_ADDRESSES}
      - FIREWALL_VPN_INPUT_PORTS=${IRC_AIRVPN_PORT}
  nginx:
    image: nginx:alpine
    container_name: nginx-IRC-shielded
    network_mode: "service:gluetun"
    restart: unless-stopped
    environment:
      - HOSTNAME=nginx-IRC-shielded
      - IRC_AIRVPN_PORT=${IRC_AIRVPN_PORT}
    volumes:
      - ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro
      - ./nginx/certs:/etc/nginx/certs:ro
    security_opt:
      - "label=disable"
    depends_on:
      - thelounge
  thelounge:
    image: ghcr.io/thelounge/thelounge:latest
    container_name: thelounge
    network_mode: "service:gluetun"
    environment:
      - HOSTNAME=thelounge-IRC-shielded
    volumes:
      - ./thelounge:/var/opt/thelounge
    restart: always
    security_opt:
      - "label=disable"

networks:
  gluetun-IRC-network:
    driver: bridge
    name: gluetun-IRC-network
    ipam:
      config:
        - subnet: 172.21.0.0/16