services:
  rego-tunnel:
    image: git.alexzaw.dev/alexz/linux-vm:latest
    restart: unless-stopped
    networks:
      rego-tunnel_runtipi_network:
        gw_priority: 0
      tipi_main_network:
        gw_priority: 1
    environment:
      VM_RAM: ${WINDOWS_RAM_GB}G
      VM_CPUS: ${WINDOWS_CPU_CORES}
      BRIDGE_NAME: ${BRIDGE_NAME}
      TAP_NAME: ${TAP_NAME}
      TAP2_NAME: ${TAP2_NAME}
      BRIDGE_CIDR: ${BRIDGE_CIDR}
      VM_NET_IP: ${VM_NET_IP}
      VM_SUBNET: ${VM_SUBNET}
      TARGET_IP: ${TARGET_IP}
      VM_MAC: ${VM_MAC}
      VM_MAC2: ${VM_MAC2}
      DNS_SERVERS: ${DNS_SERVERS}
      LEASE_TIME: ${LEASE_TIME}
      HOSTSHARE_DIR: ${HOSTSHARE_DIR}
      BRIDGE2_NAME: ${BRIDGE2_NAME}
      BRIDGE2_CIDR: ${BRIDGE2_CIDR}
      BRIDGE2_UPLINK_IF: ${BRIDGE2_UPLINK_IF}
      QEMU_BIN: ${QEMU_BIN}
    ports:
      - ${APP_PORT}:8006
    volumes:
      - /etc/runtipi/user-config/runtipi/rego-tunnel/storage/linux-vm.qcow2:/vm/linux-vm.qcow2
      - /etc/runtipi/user-config/runtipi/rego-tunnel/shared:/shared
      - ${HOSTSHARE_DIR}:/hostshare
    labels:
      generated: true
      traefik.enable: true
      traefik.docker.network: runtipi_tipi_main_network
      traefik.http.middlewares.rego-tunnel-runtipi-web-redirect.redirectscheme.scheme: https
      traefik.http.services.rego-tunnel-runtipi.loadbalancer.server.port: "8006"
      traefik.http.routers.rego-tunnel-runtipi-insecure.rule: Host(`${APP_DOMAIN}`)
      traefik.http.routers.rego-tunnel-runtipi-insecure.entrypoints: web
      traefik.http.routers.rego-tunnel-runtipi-insecure.service: rego-tunnel-runtipi
      traefik.http.routers.rego-tunnel-runtipi-insecure.middlewares: rego-tunnel-runtipi-web-redirect
      traefik.http.middlewares.rego-tunnel-runtipi-auth.basicauth.users: "alexz:$$2y$$05$$nv5ygL66/LEYut3RBuslFuXBwHIDg1yKFmhB8B4Nyqd8GJnN4gy5u"
      traefik.http.routers.rego-tunnel-runtipi.rule: Host(`${APP_DOMAIN}`)
      traefik.http.routers.rego-tunnel-runtipi.entrypoints: websecure
      traefik.http.routers.rego-tunnel-runtipi.service: rego-tunnel-runtipi
      traefik.http.routers.rego-tunnel-runtipi.tls.certresolver: myresolver
      traefik.http.routers.rego-tunnel-runtipi.middlewares: rego-tunnel-runtipi-auth
      runtipi.managed: true
      runtipi.appurn: rego-tunnel:runtipi
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/kvm
      - /dev/net/tun
    privileged: true
    stop_grace_period: 2m
    sysctls: {}