adc/ansible/roles/mediaserver/templates/mediaserver-compose.yml

---
version: '3.7'
services:
  traefik:
    image: traefik
    networks:
      - pubnet    
    command: --web --docker --docker.swarmmode --docker.watch --docker.domain="hatchery.home.jowj.net" --logLevel=DEBUG
    ports:
      - 80:80
      - 443:443
      - 8080:8080        
    volumes:
      - /home/josiah/apps/traefik/acme.json:/acme.json        
      - traefik_logs:/var/log/access.log
      - /var/run/docker.sock:/var/run/docker.sock
      - /home/josiah/apps/traefik/traefik.toml:/traefik.toml
    deploy:
      mode: global      
      placement:
        constraints:
          - node.role == manager
    environment:
      DO_AUTH_TOKEN: "{{  DO_AUTH_TOKEN  }}"
    labels:
      # dashboards
      - "traefik.enable=true"    
      - "traefik.http.routers.mediaserver-traefik-api.tls.certResolver=mediaserver-resolver"
      - "traefik.http.routers.mediaserver-traefik-api.rule=Host(`hatchery.home.jowj.net`)&&(PathPrefix(`/api`)||PathPrefix(`/dashboard`)||PathPrefix(`/debug`))"
      - "traefik.http.routers.mediaserver-traefik-api.service=api@internal"
      - "traefik.http.services.mediaserver-traefik-api.loadbalancer.server.port=8080"      
      # - "traefik.http.routers.mediaserver-traefik-api.entrypoints=http"
      - "traefik.http.routers.mediaserver-traefik-api.entrypoints=https"      
      # middleware redirect
      - "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"
      # global redirect to https
      - "traefik.http.routers.http-catchall.rule=hostregexp(`{host:.+}`)"
      - "traefik.http.routers.http-catchall.entrypoints=http"
      - "traefik.http.routers.http-catchall.middlewares=redirect-to-https"
        

  hydra2:
    image: linuxserver/hydra2:latest
    networks:
      - pubnet
    volumes:
      - /home/josiah/apps/hydra2/:/config
      - /home/josiah/Downloads/usenet-complete/:/downloads
    environment:
      PGID: 1000
      PUID: 1000
      TZ: American/Chicago
    labels:
      - "traefik.enable=true"
      - "traefik.http.services.mediaserver-hydra2.loadbalancer.server.port=5076"
      - "traefik.http.routers.mediaserver-hydra2.service=mediaserver-hydra2"
      - "traefik.http.routers.mediaserver-hydra2.rule=Host(`hatchery.home.jowj.net`) && PathPrefix(`/hydra2`)"
      - "traefik.http.routers.mediaserver-hydra2.tls.certResolver=mediaserver-resolver"        
      - "traefik.http.routers.mediaserver-hydra2.tls=true"

  sabnzb:
    image: "linuxserver/sabnzbd"
    networks:
      - pubnet    
    environment:
      PUID: 1000
      PGID: 1000
      TZ: America/Chicago
    volumes:
      - "/home/josiah/apps/sabnzbd:/config"
      - "/home/josiah/Downloads/usenet-complete/:/downloads"
      - "/home/josiah/Downloads/usenet-incomplete/:/incomplete-downloads"
      - "/home/josiah/Downloads/usenet-watched/:/watched-folder"      
      - "/media/usenet/tv:/tv"
      - "/media/usenet/audio/:/music"
      - "/media/usenet/movies/:/movies"
      - "/media/usenet/itunes-synology/iTunes Media/Automatically Add to iTunes.localized/:/itunes"
      - "/media/usenet/book-library/books/:/books"
    labels:
      - "traefik.enable=true"
      - "traefik.http.services.mediaserver-sabnzbd.loadbalancer.server.port=8080"
      - "traefik.http.routers.mediaserver-sabnzbd.service=mediaserver-sabnzbd"
      - "traefik.http.routers.mediaserver-sabnzbd.rule=Host(`hatchery.home.jowj.net`) && PathPrefix(`/sabnzbd`)"
      - "traefik.http.routers.mediaserver-sabnzbd.tls.certResolver=mediaserver-resolver"
      - "traefik.http.routers.mediaserver-sabnzbd.tls=true"

  sonarr:
    image: "linuxserver/sonarr"
    environment:
      PUID: 1000
      PGID: 1000
      TZ: America/Chicago
    volumes:
      - "/home/josiah/apps/sonarr:/config"
      - "/home/josiah/Downloads/usenet-complete/:/downloads"
      - "/media/usenet/tv/:/tv"
    labels:
      - "traefik.enable=true"
      - "traefik.http.services.mediaserver-sonarr.loadbalancer.server.port=8989"
      - "traefik.http.routers.mediaserver-sonarr.service=mediaserver-sonarr"
      - "traefik.http.routers.mediaserver-sonarr.rule=Host(`hatchery.home.jowj.net`) && PathPrefix(`/sonarr`)"
      - "traefik.http.routers.mediaserver-sonarr.tls.certResolver=mediaserver-resolver"
      - "traefik.http.routers.mediaserver-sonarr.tls=true"        
    networks:
      - pubnet
      
  lidarr:
    image: "linuxserver/lidarr"
    environment:
      PUID: 1000
      PGID: 1000
      TZ: America/Chicago
    volumes:
      - "/home/josiah/apps/lidarr:/config"
      - "/home/josiah/Downloads/usenet-complete/:/downloads"
      - "/media/usenet/audio/:/music"
    labels:
      - "traefik.enable=true"
      - "traefik.http.services.mediaserver-lidarr.loadbalancer.server.port=8686"
      - "traefik.http.routers.mediaserver-lidarr.service=mediaserver-lidarr"
      - "traefik.http.routers.mediaserver-lidarr.rule=Host(`hatchery.home.jowj.net`) && PathPrefix(`/lidarr`)"
      - "traefik.http.routers.mediaserver-lidarr.tls.certResolver=mediaserver-resolver"
      - "traefik.http.routers.mediaserver-lidarr.tls=true"                
    networks:
      - pubnet

  radarr:
    image: "linuxserver/radarr"
    environment:
      PUID: 1000
      PGID: 1000
      TZ: America/Chicago
    volumes:
      - "/home/josiah/apps/radarr:/config"
      - "/home/josiah/Downloads/usenet-complete/:/downloads"
      - "/media/usenet/movies/:/movies"
    labels:
      - "traefik.enable=true"
      - "traefik.http.services.mediaserver-radarr.loadbalancer.server.port=7878"
      - "traefik.http.routers.mediaserver-radarr.service=mediaserver-radarr"
      - "traefik.http.routers.mediaserver-radarr.rule=Host(`hatchery.home.jowj.net`) && PathPrefix(`/radarr`)"
      - "traefik.http.routers.mediaserver-radarr.tls.certResolver=mediaserver-resolver"
      - "traefik.http.routers.mediaserver-radarr.tls=true"                        
    networks:
      - pubnet

  whoami:
    image: containous/whoami:latest
    networks:
      - pubnet
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.mediaserver-whoami.rule=Host(`hatchery.home.jowj.net`) && PathPrefix(`/whoami`)"
      - "traefik.http.routers.mediaserver-whoami.service=mediaserver-whoami"
      - "traefik.http.services.mediaserver-whoami.loadbalancer.server.port=80"
      - "traefik.http.routers.mediaserver-whoami.tls.certResolver=mediaserver-resolver"        
      - "traefik.http.routers.mediaserver-whoami.tls=true"        
  watchtower:
    # https://hub.docker.com/r/centurylink/watchtower/
    image: v2tec/watchtower:latest
    # https://github.com/v2tec/watchtower#options
    # This schedule applies updates (if available) at midnight.
    command: --cleanup --schedule "0 0 0 * * *"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    networks:
      - pubnet
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.mediaserver-watchtower.rule=Host(`hatchery.home.jowj.net`) && PathPrefix(`/watchtower`)"
      - "traefik.http.routers.mediaserver-watchtower.service=mediaserver-watchtower"
      - "traefik.http.services.mediaserver-watchtower.loadbalancer.server.port=80"
      - "traefik.http.routers.mediaserver-watchtower.tls.certResolver=mediaserver-resolver"
      - "traefik.http.routers.mediaserver-watchtower.tls=true"                              

  # The main WebDAV container.
  webdav:
    # https://hub.docker.com/r/bytemark/webdav/    
    image: jlj-webdav:latest
    networks:
      - pubnet
    volumes:
      # - /home/josiah/apps/webdav/user.passwd:/user.passwd
      - /home/josiah/webdav/:/var/lib/dav/
    environment:
      SERVER_NAMES: "hatchery.home.jowj.net"
      LOCATION: "/webdav"
      USERNAME: josiah
      PASSWORD: "{{ vault_mediaserver_webdav_password }}" 
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.mediaserver-webdav.rule=Host(`hatchery.home.jowj.net`) && PathPrefix(`/webdav`)"
      - "traefik.http.routers.mediaserver-webdav.service=mediaserver-webdav"
      - "traefik.http.services.mediaserver-webdav.loadbalancer.server.port=80"
      - "traefik.http.routers.mediaserver-webdav.tls.certResolver=mediaserver-resolver"
      - "traefik.http.routers.mediaserver-webdav.tls=true"
        
volumes:
  traefik_acme:
  traefik_logs:
  vol-webdav:

networks:
  pubnet:
    driver: overlay