From b7befa98865a3f3f7b126e14a31e53f3c7b7eb8f Mon Sep 17 00:00:00 2001
From: fkrebs <fkrebs@nucli.de>
Date: Tue, 2 Jun 2026 03:15:08 +0200
Subject: [PATCH] auto: sync 2026-06-02

---
 stremio/docker-compose.yml | 26 +++++++++++++++++++++
 vpn/docker-compose.yml     | 46 ++++++++++++++++++++++++++++++--------
 2 files changed, 63 insertions(+), 9 deletions(-)
 create mode 100644 stremio/docker-compose.yml

diff --git a/stremio/docker-compose.yml b/stremio/docker-compose.yml
new file mode 100644
index 0000000..4c35a1f
--- /dev/null
+++ b/stremio/docker-compose.yml
@@ -0,0 +1,26 @@
+services:
+  stremio:
+    image: tsaridas/stremio-docker:latest
+    restart: unless-stopped
+    deploy:
+      resources:
+        limits:
+          cpus: "1.0"
+          memory: 2G
+        reservations:
+          cpus: "0.5"
+          memory: 1G
+    container_name: streamio
+    network_mode: container:vpn_gluetun
+    labels:
+      - "homepage.group=media"
+      - "homepage.name=Stremio"
+      - "homepage.icon=stremio.png"
+    environment:
+      NO_CORS: 1
+    volumes:
+      - /mnt/pve/unas/services/stremio/:/root/.stremio-server
+    devices:
+      - /dev/dri/card1:/dev/dri/card1
+      - /dev/dri/renderD128:/dev/dri/renderD128
+
diff --git a/vpn/docker-compose.yml b/vpn/docker-compose.yml
index c22fdec..f8dccd8 100644
--- a/vpn/docker-compose.yml
+++ b/vpn/docker-compose.yml
@@ -25,22 +25,50 @@ services:
       - /dev/net/tun:/dev/net/tun
     volumes:
       - /mnt/pve/unas/services/gluetun/data:/gluetun
+      - ./gluetun_port:/tmp/gluetun # Shares the port file
     environment:
       - PUID=977
       - PGID=988
-      - VPN_SERVICE_PROVIDER=nordvpn
-      - SERVER_COUNTRIES=Germany
-      - VPN_TYPE=wireguard
-      - WIREGUARD_MTU=1420
-      - WIREGUARD_PERSISTENT_KEEPALIVE_INTERVAL=25s
       - FIREWALL_OUTBOUND_SUBNETS=192.168.1.0/24
       - UPDATER_PERIOD=24h
       - TZ=Europe/Berlin
-      - OPENVPN_USER=BNDz2XmPPbgWxoPe1XQcWT1v
-      - OPENVPN_PASSWORD=kqbaBsuvVP4gcvqfv3bC8BHe
-      - WIREGUARD_PRIVATE_KEY=70dYZGDAUkXDjeCEFVJJMMbbso/jGnuk10HoInKHF+w=
-      - HTTP_CONTROL_SERVER_AUTH_DEFAULT_ROLE='{"auth":"none"}'
+      - VPN_SERVICE_PROVIDER=protonvpn
+      - VPN_TYPE=wireguard
+      - WIREGUARD_PRIVATE_KEY=mLRtJ4p1bhJtHvYMvR4KdraLPHQfFg8eAEfAMz00BHk=
+      - SERVER_COUNTRIES=Netherlands
+      - FREE_ONLY=on
+      - VPN_PORT_FORWARDING=off
+#      - VPN_PORT_FORWARDING_PROVIDER=protonvpn
+
+
+
+      # - VPN_SERVICE_PROVIDER=nordvpn
+      # - SERVER_COUNTRIES=Germany
+      # - VPN_TYPE=wireguard
+      # - WIREGUARD_MTU=1420
+      # - WIREGUARD_PERSISTENT_KEEPALIVE_INTERVAL=25s
+
+      # - OPENVPN_USER=BNDz2XmPPbgWxoPe1XQcWT1v
+      # - OPENVPN_PASSWORD=kqbaBsuvVP4gcvqfv3bC8BHe
+      # - WIREGUARD_PRIVATE_KEY=70dYZGDAUkXDjeCEFVJJMMbbso/jGnuk10HoInKHF+w=
+      # - HTTP_CONTROL_SERVER_AUTH_DEFAULT_ROLE='{"auth":"none"}'
     # No custom healthcheck: gluetun ships a built-in healthcheck (queries
     # 127.0.0.1:9999 in healthcheck mode and verifies the VPN tunnel/DNS).
     # Overriding it with wget against the :8000 control server gives false
     # "unhealthy" (that endpoint 404s). Let the image's own healthcheck run.
+  # port-updater:
+  #   image: technosam/qbittorrent-gluetun-port-update:1.1
+  #   container_name: port-updater
+  #   network_mode: "service:gluetun" # Must be on Gluetun's network to talk to qBit
+  #   volumes:
+  #     - ./gluetun_port:/tmp/gluetun:ro # Reads the port file natively
+  #   environment:
+  #     - QBITTORRENT_SERVER=192.168.1.40
+  #     - QBITTORRENT_PORT=13001
+  #     - QBITTORRENT_USER=fkrebs
+  #     - QBITTORRENT_PASS=tapirnase1
+  #     - PORT_FILE=/tmp/gluetun/forwarded_port
+  #     - LOOP_INTERVAL=300 # Checks every 5 minutes if the port changed
+  #   # depends_on:
+  #   #   - rdtclient
+  #   restart: always