version: "3.9"
services:
  vpn:
    image: ghcr.io/bubuntux/nordvpn
    hostname: nordvpnch
    container_name: nordvpnch
    cap_add:
      - NET_ADMIN
      - NET_RAW
      - SYS_MODULE
    ports:
      - 6881:6881
      - 6881:6881/udp
      - 5992:8081
    environment:
      - TOKEN=e9f2ab75cf15245acccf48938176063b7eda427acf5b76d45ccfa8b41da4bcb7
      - CONNECT=--group P2P Switzerland
      - TECHNOLOGY=NordLynx
      - NET_LOCAL=192.168.10.0/24,192.168.1.0/24  # So it can be accessed within the local network
      - DNS = 8.8.8.8,8.8.4.4
      - TZ=Europe/Paris
    sysctls:
      - net.ipv6.conf.all.disable_ipv6=1  # Recomended if using ipv4 only
  metube:
    container_name: MeTubeCh
    image: ghcr.io/alexta69/metube
    healthcheck:
      test: curl -f http://localhost:8081/ || exit 1
    deploy:
      resources:
        limits:
          memory: 6g
          cpus: '0.76'
    network_mode: service:vpn
    depends_on:
      - vpn
    security_opt:
      - no-new-privileges:true
    restart: on-failure:5
    volumes:
      - /var/lib/docker/volumes/metube:/downloads:rw
    environment:
      UID: 1000
      GID: 1000
      DELETE_FILE_ON_TRASHCAN: true
      YTDL_OPTIONS: "{allow_unplayable_formats:true}"