[Unit]
Description=Gluetun VPN Client
Requires=homelab-network.service
After=network-online.target homelab-network.service
Wants=network-online.target

[Container]
Image=docker.io/qmcgaw/gluetun:latest
ContainerName=gluetun

AddCapability=NET_ADMIN
AddCapability=NET_RAW
AddDevice=/dev/net/tun:/dev/net/tun

# Port Mappings:
# 6767 Bazarr
# 7878 Radarr
# 8080 qBittorrent
# 8191 Byparr
# 8989 Sonarr
# 9696 Prowlarr

PublishPort=6767:6767
PublishPort=7878:7878
PublishPort=8080:8080
PublishPort=8191:8191
PublishPort=8989:8989
PublishPort=9696:9696

Environment=VPN_SERVICE_PROVIDER=mullvad
Environment=VPN_TYPE=wireguard
Environment=SERVER_COUNTRIES={{ vpn_countries }}
Environment=WIREGUARD_PRIVATE_KEY={{ vault_vpn_private_key }}
Environment=WIREGUARD_ADDRESSES={{ vpn_addresses }}

Environment=FIREWALL_ENABLED=on
Environment=DNS_ENABLED=false
Environment=FIREWALL_INPUT_PORTS=6767,7878,8080,8191,8989,9696

Network=homelab
NetworkAlias=gluetun

[Install]
WantedBy=default.target