services:
  unshackle:
    build:
      context: .
      dockerfile: Dockerfile
      args:
        SHAKA_PACKAGER_URL: https://github.com/shaka-project/shaka-packager/releases/download/v2.6.1/packager-linux-x64
        UNSHACKLE_REPO_URL: https://oauth2:f8c4a9d0472d2b8d0170e78a76b57c62e97cd3bb@gitea.soay-dory.ts.net/unshackle-dl/unshackle.git
        UNSHACKLE_APP_DIR: /opt/unshackle
    container_name: unshackle
    hostname: unshackle
    network_mode: host
    restart: always
    working_dir: /opt/unshackle
    stdin_open: true
    tty: true
    environment:
      START_TAILSCALED: "1"
      START_RCLONE: "1"
      TS_STATE_DIR: /var/lib/tailscale
      TS_SOCKET: /var/run/tailscale/tailscaled.sock
      TS_AUTHKEY: tskey-auth-kjHgE6GKB611CNTRL-oK3BfNaC2FSDFkSERE2WFS4BPJngTVbv
      TS_EXTRA_ARGS: ${TS_EXTRA_ARGS:-}
      TS_UP_ARGS: "${TS_UP_ARGS:---ssh --accept-risk=lose-ssh}"
      RCLONE_CONFIG: /workspace/docker/rclone.conf
      RCLONE_REMOTE: "ketuakenzuya:"
      RCLONE_MOUNT_DIR: /mnt/ketuakenzuya
      RCLONE_CACHE_DIR: /tmp/rclone
      RCLONE_CACHE_MAX_SIZE: 4G
      RCLONE_EXTRA_ARGS: ${RCLONE_EXTRA_ARGS:-}
      UNSHACKLE_APP_DIR: /opt/unshackle
      DOCKER_HOST: ${DOCKER_HOST:-unix:///tmp/docker.sock}
    cap_add:
      - NET_ADMIN
      - NET_RAW
      - SYS_ADMIN
    devices:
      - /dev/net/tun:/dev/net/tun
      - /dev/fuse:/dev/fuse
    security_opt:
      - apparmor:unconfined
    volumes:
      - .:/workspace
      - /tmp:/tmp
      - tailscale-state:/var/lib/tailscale
    command: fish
  firefox:
    image: jlesage/firefox:latest
    container_name: firefox
    restart: always
    ports:
      - "5800:5800"
    volumes:
      - firefox-config:/config

volumes:
  firefox-config:
  tailscale-state: