update lables and add automation for dns / proxy

docker_compose/chromium/docker-compose.yaml

@@ -0,0 +1,18 @@
+# chromium - https://hub.docker.com/r/linuxserver/chromium
+---
+version: '3.8' # Using version 3.8 for shm_size and other modern features
+services:
+  chromium:
+    image: lscr.io/linuxserver/chromium:latest
+    container_name: chromium
+    environment:
+      - PUID=1000
+      - PGID=1000
+      - TZ=Etc/UTC
+      #- CHROME_CLI=https://www.linuxserver.io/ # optional
+    network_mode: "container:gluetun"
+    volumes:
+      - /path/to/chromium/config:/config # Adjust this path to your desired local config directory
+    shm_size: '1gb'
+    restart: unless-stopped
+

docker_compose/dozzel/docker-compose.yaml

@@ -8,3 +8,10 @@ services:
         ports:
             - ${DOZZEL_PORT}:8080
         restart: unless-stopped
+        labels:
+            # Nginx Proxy Manager Automation
+            - "npm.proxy.domains=dozzle"
+            - "npm.proxy.port=${DOZZEL_PORT}"
+            - "npm.proxy.scheme=http"
+            # Pi-hole Automation (Point to Docker Host/Proxy IP)
+            - "pihole.custom-record=[[\"dozzle\", \"${DOCKER_HOST_IP}\"]]"

docker_compose/gluetun/docker-compose.yaml

@@ -0,0 +1,42 @@
+# gluetun - https://github.com/qdm12/gluetun-wiki/blob/main/setup/providers/surfshark.md
+---
+version: "3.8"
+services:
+  gluetun:
+    container_name: gluetun
+    image: qmcgaw/gluetun
+    cap_add:
+      - NET_ADMIN
+    devices:
+      - /dev/net/tun:/dev/net/tun
+    environment:
+      - VPN_SERVICE_PROVIDER=${VPN_SERVICE_PROVIDER}
+      - VPN_TYPE=${VPN_TYPE}
+      - WIREGUARD_PRIVATE_KEY=${WIREGUARD_PRIVATE_KEY}
+      - WIREGUARD_ADDRESSES=${WIREGUARD_ADDRESSES}
+      - SERVER_COUNTRIES=${SERVER_COUNTRIES}
+      - FIREWALL_OUTBOUND_SUBNETS=${FIREWALL_OUTBOUND_SUBNETS}    
+    ports:
+      - '${CHROMIUM_HTTP}'
+      - '${CHROMIUM_HTTPS}'
+      - '${TORRENT_WEBUI_PORT}'
+      - '${TORRENT_INCOMMING_PORT}'
+      - '${TORRENT_INCOMMING_PORT_UDP}'
+      - '${NICOTINE_PORT}'
+      - '${NICOTINE_INCOMMING}'
+    restart: unless-stopped
+    labels:
+      # Nicotine Automation
+      - "npm.proxy.domains=nicotine"
+      - "npm.proxy.port=${NICOTINE_EXTERNAL_PORT}"
+      - "npm.proxy.scheme=http"
+      - "npm.proxy.websockets=true"
+      - "pihole.custom-record=[[\"nicotine\", \"${DOCKER_HOST_IP}\"]]"
+      # Torrent Automation
+      - "npm.proxy.1.domains=torrent"
+      - "npm.proxy.1.port=${TORRENT_EXTERNAL_PORT}"
+      - "npm.proxy.1.scheme=http"
+      - "npm.proxy.1.websockets=true"
+      - "pihole.custom-record.1=[[\"torrent\", \"${DOCKER_HOST_IP}\"]]"
+
+# for external containers use `network_mode: "container:gluetun"`

docker_compose/musicbrainz-picard/docker-compose.yaml

@@ -0,0 +1,24 @@
+# musicbrainz-picard - https://hub.docker.com/r/jlesage/musicbrainz-picard
+---
+services:
+  musicbrainz-picard:
+    image: jlesage/musicbrainz-picard:latest
+    container_name: musicbrainz_picard
+    environment:
+      - PUID=1000
+      - PGID=1000
+      - TZ=America/New_York
+    volumes:
+      - ${DATA_PATH}/config:/config:rw
+      - music_nfs:/storage:rw
+    ports:
+      - "${PICARD_PORT}:5800"
+    restart: unless-stopped
+
+volumes:
+  music_nfs:
+    name: music_nfs_picard
+    driver_opts:
+      type: nfs
+      o: addr=${NAS_ADDR},nolock,soft,rw
+      device: :${MUSIC_PATH}

docker_compose/navidrome/docker-compose.yaml

@@ -0,0 +1,22 @@
+# navidrome - https://www.navidrome.org/docs/installation/docker/
+---
+services:
+  navidrome:
+    container_name: navidrome
+    image: deluan/navidrome:latest
+    user: 1000:1000 # should be owner of volumes
+    ports:
+      - "${NAVIDROME_PORT}:4533"
+    restart: unless-stopped
+    volumes:
+      - ${DATA_PATH}:/data
+      - music_nfs:/music:ro
+
+volumes:
+    music_nfs:
+        name: music_nfs
+        driver_opts:
+            type: nfs
+            o: addr=${NAS_ADDR},nolock,soft,rw
+            device: :${MUSIC_PATH}
+

docker_compose/nginx-proxy-manager/docker-compose.yaml

@@ -17,3 +17,15 @@ services:
     volumes:
       - /app/nginxproxy/data:/data
       - /app/nginxproxy/letsencrypt:/etc/letsencrypt
+
+  npm-sync:
+    container_name: npm-sync
+    image: ghcr.io/redth/npm-docker-sync:latest
+    restart: unless-stopped
+    environment:
+      - NPM_URL=http://nginx:81
+      - NPM_EMAIL=${NPM_EMAIL}
+      - NPM_PASSWORD=${NPM_PASSWORD}
+      - DOCKER_HOST=unix:///var/run/docker.sock
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock:ro

docker_compose/nicotine/docker-compose.yaml

@@ -0,0 +1,54 @@
+# nicotine - https://github.com/sirjmann92/nicotineplus-proper
+---
+services: 
+ nicotineplus-proper:
+   image: 'ghcr.io/sirjmann92/nicotineplus-proper:latest' # Or pull from GitHub: 'ghcr.io/sirjmann92/nicotineplus-proper:latest'
+   container_name: nicotine
+   network_mode: "container:gluetun" # Comment this line out if you're NOT using a VPN container
+   #ports: # Comment this line out if you're NOT using a VPN container (line above)
+     #- '${NICOTINE_PORT}:${NICOTINE_PORT}'
+     #- '2234:2234'
+   #env_file: .env # Optionally use a .env file to store environment variables and login credentials
+   environment: # All environment variables are optional, defaults are listed (TZ, LANG, UMASK, and FORWARD_PORT have no default)
+     - TZ=Your/Timezone
+     - LOGIN=${SOUL_SEEK_USERNAME}
+     - PASSW=${SOUL_SEEK_PASSWORD}
+  #   - PUID=1000
+  #   - PGID=1000
+     - DARKMODE=True
+  #   - LANG=C.UTF-8
+  #   - UMASK=022
+  #   - UPNP=False 
+  #   - AUTO_CONNECT=True
+  #   - TRAY_ICON=False
+  #   - NOTIFY_FILE=False
+  #   - NOTIFY_FOLDER=False
+  #   - NOTIFY_TITLE=False
+  #   - NOTIFY_PM=False
+  #   - NOTIFY_CHATROOM=False
+  #   - NOTIFY_MENTION=False
+  #   - FORWARD_PORT=12345 # Useful for dynamic port forwarding
+  #   - WEB_UI_PORT=${NICOTINE_PORT} # for custom webUI port assignment. Should match 'port' env variable or VPN webUI port
+  #   - WEB_UI_USER=YourWebUIUsername # for custom webUI basic auth username
+  #   - WEB_UI_PASSWORD=YourWebUIPassword # for custom webUI basic auth password
+  #   - HEALTHCHECK_ENABLED=false # Set to false to disable Docker healthcheck (default: true/enabled)
+   volumes:
+     - nicotine_downloads:/downloads
+     #- nicotine_shared:/shared
+     - ${DATA_PATH}/config:/config # Save your config persistently
+     - ${DATA_PATH}/data:/data # Store your logs, database, and history
+   restart: unless-stopped
+
+volumes:
+    nicotine_downloads:
+        name: nicotine_downloads
+        driver_opts:
+            type: nfs
+            o: addr=${NAS_ADDR},nolock,soft,rw
+            device: :${DOWNLOADS_PATH}
+    # nicotine_shared:
+    #     name: nicotine_shared
+    #     driver_opts:
+    #         type: nfs
+    #         o: addr=${NAS_ADDR},nolock,soft,rw
+    #         device: :${DOWNLOADS_PATH}/shared

docker_compose/pihole-external-dns/docker-compose.yaml

@@ -0,0 +1,13 @@
+# docker-pihole-dns-shim -- https://github.com/theonlysinjin/docker-pihole-dns-shim
+---
+services:
+  pihole-dns-shim:
+    image: theonlysinjin/docker-pihole-dns-shim:latest
+    container_name: pihole-dns-shim
+    environment:
+      - PIHOLE_API=http://10.0.0.11:80/api
+      - PIHOLE_TOKEN=${PIHOLE_TOKEN} # Generate in Pi-hole Settings > API
+      - INTERVAL_SECONDS=10
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+    restart: unless-stopped

docker_compose/qbittorrentvpn/docker-compose.yaml

@@ -8,35 +8,25 @@ services:
     qbittorrentvpn:
         container_name: torrent
         privileged: true
-        image: dyonr/qbittorrentvpn
+        image: lscr.io/linuxserver/qbittorrent:latest
         environment:
-            - VPN_ENABLED=true
-            - VPN_USERNAME=${VPN_USERNAME}
-            - VPN_PASSWORD=${VPN_PASSWORD}
-            - LAN_NETWORK=10.0.0.0/24
-            - WEBUI_PORT_ENV=8080
-            - INCOMING_PORT_ENV=8999
+            - PUID=1000
+            - PGID=1000
+            - VPN_ENABLED=false
+            - WEBUI_PORT=8080
             - TZ=America/New_York
-        ports:
-            - 8181:8080
-            - 8999:8999
-            - 8999:8999/udp
         volumes:
             - ${QBITTORRENT_DATA}/config:/config
             - ${QBITTORRENT_DATA}/theme:/theme
             - downloads_nfs:/downloads
         restart: unless-stopped
-        networks:
-            - frontend
-
-networks:
-    frontend:
-        external: true # Or define it if it's not external
+        network_mode: "container:gluetun"
 
 volumes:
     downloads_nfs:
         name: downloads_nfs
         driver_opts:
             type: nfs
-            o: addr=truenas,nolock,soft,rw
-            device: :/mnt/store/vault/MediaServer/downloads
+            o: addr=${NAS_ADDR},nolock,soft,rw
+            device: :${DOWNLOADS_PATH}
+