Summary

services:
  tailscale_full:
    image: tailscale/tailscale:latest
    env_file: .env
    privileged: true
    environment:
      - TS_AUTHKEY=${TS_AUTHKEY} 
      - TS_STATE_DIR=/var/lib/tailscale
      - TS_USERSPACE=false
      - TS_DEST_IP=${DMZ_NETWORK_ROUTE}
    volumes:
      - ./config/tailscale/state:/var/lib/tailscale
      - /dev/net/tun:/dev/net/tun
    cap_add:
      - net_admin
      - sys_module
    networks:
      - ${DMZ_NETWORK}
    restart: unless-stopped

  nginx_proxy_manager:
    image: 'docker.io/jc21/nginx-proxy-manager:latest'
    restart: unless-stopped
    env_file: .env
    ports:
      - ${HOST_IP}:80:80
      - ${HOST_IP}:443:443
      - ${DMZ_NETWORK_ROUTE}:81:81
      - ${DMZ_NETWORK_ROUTE}:80:80
      - ${DMZ_NETWORK_ROUTE}:443:443
    privileged: true
    volumes:
      - ./config/nginx_proxy_manager/data:/data
      - ./config/nginx_proxy_manager/letsencrypt:/etc/letsencrypt
    networks:
      - ${DMZ_NETWORK}
    environment:
      - VIRTUAL_HOST=proxymanager.admin.${TLD}
      - VIRTUAL_PORT=81
    healthcheck:
      test: ["CMD", "/usr/bin/check-health"]
      interval: 60s
      timeout: 30s


  internal_proxy:
    image: nginxproxy/nginx-proxy:latest
    container_name: internal_proxy
    volumes:
      - /var/run/docker.sock:/tmp/docker.sock
      - /var/run/fcgiwrap.socket:/var/run/fcgiwrap.socket
      - /var/run/php-fpm.sock:/var/run/php-fpm.sock
    networks:
      dmz:
      public:
      secure:
      admin:
    environment:
      - TRUST_DOWNSTREAM_PROXY=true
  sso:
    env_file: .env
    image: drkno/plexsso:latest
    networks:
      public:
    volumes:
      - /etc/docker/config/sso:/config
    environment:
      - VIRTUAL_HOST=sso.${TLD}
      - VIRTUAL_PORT=4200
    deploy:
      resources:
        limits:
          cpus: "1"
          memory: 200M

  portainer:
    env_file: .env
    image: portainer/portainer-ce:latest
    privileged: true
    networks:
      - admin
    volumes:
      - ./config/portainer:/data
      - /var/run/docker.sock:/var/run/docker.sock
    environment:
      - VIRTUAL_HOST=portainer.admin.${TLD}
      - VIRTUAL_PORT=9000