docker-compose/theftstack/docker-compose.yml

---
x-common-env: &common-env
  PUID: ${UID}
  PGID: ${GID}
  TZ: America/New_York

services:
  sabnzbd:
    image: lscr.io/linuxserver/sabnzbd:latest
    container_name: sabnzbd
    environment:
      <<: *common-env
    volumes:
      - /config/sabnzbd/:/config
      - /storage/theft/usenet:/data/theft/usenet
    ports:
      - 8080:8080
    network_mode: "host"
    restart: unless-stopped

  prowlarr:
    image: lscr.io/linuxserver/prowlarr:develop
    container_name: prowlarr
    environment:
      <<: *common-env
    volumes:
      - /config/prowlarr:/config
    ports:
      - 9696:9696
    network_mode: "host"
    restart: unless-stopped

  radarr:
    image: lscr.io/linuxserver/radarr:latest
    container_name: radarr
    environment:
      <<: *common-env
    volumes:
      - /config/radarr:/config
      - /storage:/data
    ports:
      - 7878:7878
    network_mode: "host"
    restart: unless-stopped
    depends_on:
      - sabnzbd
      - prowlarr

  sonarr:
    image: lscr.io/linuxserver/sonarr:latest
    container_name: sonarr
    environment:
      <<: *common-env
    volumes:
      - /config/sonarr:/config
      - /storage:/data
    ports:
      - 8989:8989
    network_mode: "host"
    restart: unless-stopped
    depends_on:
      - sabnzbd
      - prowlarr

  lidarr:
    image: lscr.io/linuxserver/lidarr:latest
    container_name: lidarr
    environment:
      <<: *common-env
    volumes:
      - /config/lidarr:/config
      - /storage/theft/lidarr/MediaCover:/config/MediaCover
      - /storage:/data
    ports:
      - 8686:8686
    network_mode: "host"
    restart: unless-stopped
    depends_on:
      - sabnzbd
      - prowlarr

  readarr:
    image: lscr.io/linuxserver/readarr:develop
    container_name: readarr
    environment:
      <<: *common-env
    volumes:
      - /config/readarr:/config
      - /storage:/data
    ports:
      - 8787:8787
    network_mode: "host"
    restart: unless-stopped
    depends_on:
      - sabnzbd
      - prowlarr

  readarr_audio:
    image: lscr.io/linuxserver/readarr:develop
    container_name: readarr_audio
    environment:
      <<: *common-env
    volumes:
      - /config/readarr_audio:/config
      - /storage:/data
    ports:
      - 8888:8787
    network_mode: "bridge"
    restart: unless-stopped
    depends_on:
      - sabnzbd
      - prowlarr

  whisparr:
    container_name: whisparr
    image: ghcr.io/hotio/whisparr
    ports:
      - 6969:6969
    environment:
      <<: *common-env
      UMASK: 002
    volumes:
      - /config/whisparr:/config
      - /storage:/data
    network_mode: "host"
    restart: unless-stopped
    depends_on:
      - sabnzbd
      - prowlarr

  whisparrv1:
    container_name: whisparrv1
    image: docker.io/hotio/whisparr:v1
    ports:
      - 7069:6969
    environment:
      <<: *common-env
      UMASK: 002
    volumes:
      - /config/whisparrv1:/config
      - /storage:/data
    network_mode: "bridge"
    restart: unless-stopped
    depends_on:
      - sabnzbd
      - prowlarr

  deluge:
    container_name: deluge
    image: linuxserver/deluge:latest
    restart: unless-stopped
    network_mode: service:vpn
    environment:
      <<: *common-env
    volumes:
      - /storage/:/data
      - /config/deluge:/config
    depends_on:
      - vpn

  vpn:
    container_name: vpn
    image: dperson/openvpn-client:latest
    cap_add:
      - net_admin
    restart: unless-stopped
    volumes:
      - /dev/net:/dev/net:z
      - /config/vpn:/vpn
    security_opt:
      - label:disable
    ports:
      - 8112:8112
    command: "-r 10.0.11.0/24"

  metube:
    image: ghcr.io/alexta69/metube:latest
    container_name: metube
    restart: unless-stopped
    environment:
      <<: *common-env
    ports:
      - 8081:8081
    volumes:
      - /storage/media/video/youtube:/downloads

  tubearchivist:
    container_name: tubearchivist
    restart: unless-stopped
    image: bbilly1/tubearchivist
    ports:
      - 8000:8000
    volumes:
      - /storage/media/video/youtube:/youtube
      - cache:/cache
    environment:
      <<: *common-env
      ES_URL: http://archivist-es:9200
      REDIS_CON: redis://archivist-redis:6379
      HOST_UID: 1000
      HOST_GID: 1000
      TA_HOST: pirate.homelab.lan:8000
      TA_USERNAME: ${TA_USERNAME}
      TA_PASSWORD: ${TA_PASSWORD}
      ELASTIC_PASSWORD: ${ELASTIC_PASSWORD}
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8000/health"]
      interval: 2m
      timeout: 10s
      retries: 3
      start_period: 30s
    depends_on:
      - archivist-es
      - archivist-redis

  archivist-redis:
    image: redis
    container_name: archivist-redis
    restart: unless-stopped
    expose:
      - "6379"
    volumes:
      - redis:/data
    depends_on:
      - archivist-es

  archivist-es:
    image: bbilly1/tubearchivist-es
    container_name: archivist-es
    restart: unless-stopped
    environment:
      - "ELASTIC_PASSWORD=${ELASTIC_PASSWORD}"
      - "ES_JAVA_OPTS=-Xms512m -Xmx512m"
      - "xpack.security.enabled=true"
      - "discovery.type=single-node"
      - "path.repo=/usr/share/elasticsearch/data/snapshot"
    ulimits:
      memlock:
        soft: -1
        hard: -1
    volumes:
      - es:/usr/share/elasticsearch/data
    expose:
      - "9200"

  ytdl-sub:
    image: ghcr.io/jmbannon/ytdl-sub-gui:latest
    container_name: ytdl-sub
    environment:
      <<: *common-env
    volumes:
      - /config/ytdl-sub:/config
    ports:
      - 8443:8443
    restart: unless-stopped

  sabnzbd-exporter:
    image: msroest/sabnzbd_exporter
    container_name: sabnzbd-exporter
    environment:
      <<: *common-env
      SABNZBD_BASEURLS: http://dl.homelab.lan:8080/sabnzbd/
      SABNZBD_APIKEYS: ${SABNZBD_APIKEY}
    ports:
      - 9387:9387
    restart: always
    depends_on:
      - sabnzbd

  sonarr-exporter:
    image: ghcr.io/onedr0p/exportarr:latest
    command: ["sonarr"]
    environment:
      <<: *common-env
      PORT: 9707
      URL: "http://dl.homelab.lan:8989"
      APIKEY: ${SONARR_APIKEY}
    ports:
      - 9707:9707
    restart: always
    depends_on:
      - sonarr

  radarr-exporter:
    image: ghcr.io/onedr0p/exportarr:latest
    command: ["radarr"]
    environment:
      <<: *common-env
      PORT: 9708
      URL: "http://dl.homelab.lan:7878"
      APIKEY: ${RADARR_APIKEY}
    ports:
      - 9708:9708
    restart: always
    depends_on:
      - radarr

  lidarr-exporter:
    image: ghcr.io/onedr0p/exportarr:latest
    command: ["lidarr"]
    environment:
      <<: *common-env
      PORT: 9709
      URL: "http://dl.homelab.lan:8686"
      APIKEY: ${LIDARR_APIKEY}
    ports:
      - 9709:9709
    restart: always
    depends_on:
      - lidarr

  prowlarr-exporter:
    image: ghcr.io/onedr0p/exportarr:latest
    command: ["prowlarr"]
    environment:
      <<: *common-env
      PORT: 9710
      URL: "http://dl.homelab.lan:9696"
      APIKEY: ${PROWLARR_APIKEY}
    ports:
      - 9710:9710
    restart: always
    depends_on:
      - prowlarr

  readarr-exporter:
    image: ghcr.io/onedr0p/exportarr:latest
    command: ["readarr"]
    environment:
      <<: *common-env
      PORT: 9711
      URL: "http://dl.homelab.lan:8787"
      APIKEY: ${READARR_APIKEY}
    ports:
      - 9711:9711
    restart: always
    depends_on:
      - readarr

  pirate-watchtower:
    image: containrrr/watchtower
    container_name: watchtower
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    restart: always
    environment:
      <<: *common-env
      WATCHTOWER_CLEANUP: "true"

volumes:
  es:
  redis:
  cache: