updated files

Docker-Compose/ArrsStack/compose.yml

@@ -1,16 +1,5 @@
-# Tom Spark's ARR Stack — Automated Media Server
+# ARR Stack — Automated Media Server
 # https://github.com/loponai/arrstack
-#
-# Usage:
-#   1. Copy .env.example to .env and fill in your VPN credentials
-#   2. Run: bash setup-folders.sh
-#   3. Run: docker compose up -d
-#
-# All VPN-protected services (qBittorrent, Prowlarr, FlareSolverr) run
-# through Gluetun. If the VPN drops, traffic stops. Zero leaks.
-#
-# Radarr, Sonarr, Lidarr, Bazarr, Jellyfin, and Seerr do NOT run through
-# the VPN — they need direct network access for speed and local connectivity.
 
 networks:
   arrnetwork:
@@ -22,10 +11,7 @@ networks:
 services:
 
   # ============================================================
-  # GLUETUN — VPN Container (kill switch + tunnel)
-  # All VPN-protected services route through this container.
-  # Ports for those services are mapped HERE, not on the services themselves.
-  # Docs: https://github.com/qdm12/gluetun-wiki
+  # GLUETUN — VPN Container
   # ============================================================
   gluetun:
     image: qmcgaw/gluetun:latest
@@ -49,21 +35,12 @@ services:
     environment:
       - VPN_SERVICE_PROVIDER=${VPN_SERVICE_PROVIDER}
       - VPN_TYPE=${VPN_TYPE}
-      # --- WireGuard credentials (most providers) ---
       - WIREGUARD_PRIVATE_KEY=${WIREGUARD_PRIVATE_KEY}
       - WIREGUARD_ADDRESSES=${WIREGUARD_ADDRESSES}
-#      - WIREGUARD_PUBLIC_KEY=${WIREGUARD_PUBLIC_KEY}
       - WIREGUARD_PRESHARED_KEY=${WIREGUARD_PRESHARED_KEY}
-      # --- OpenVPN credentials (if using OpenVPN instead) ---
-#      - OPENVPN_USER=${OPENVPN_USER}
-#      - OPENVPN_PASSWORD=${OPENVPN_PASSWORD}
-      # --- Server selection ---
       - SERVER_COUNTRIES=${SERVER_COUNTRIES}
-      # --- Port forwarding (ProtonVPN, AirVPN, PIA) ---
-#      - VPN_PORT_FORWARDING=${VPN_PORT_FORWARDING}
       - FIREWALL_VPN_INPUT_PORTS=${FIREWALL_VPN_INPUT_PORTS}
       - FIREWALL_OUTBOUND_SUBNETS=192.168.0.0/22
-      # --- General ---
       - PUID=${PUID}
       - PGID=${PGID}
       - UMASK=002
@@ -80,8 +57,7 @@ services:
     restart: unless-stopped
 
   # ============================================================
-  # QBITTORRENT — Torrent Client (runs through Gluetun VPN)
-  # ALL traffic goes through the VPN tunnel. No direct internet.
+  # QBITTORRENT — Torrent Client
   # ============================================================
   qbittorrent:
     image: lscr.io/linuxserver/qbittorrent:latest
@@ -92,7 +68,7 @@ services:
         condition: service_healthy
         restart: true
     labels:
-      - deunhealth.restart.on.unhealthy=true  
+      - deunhealth.restart.on.unhealthy=true
     environment:
       - PUID=${PUID}
       - PGID=${PGID}
@@ -113,7 +89,6 @@ services:
 
   # ============================================================
   # DEUNHEALTH — Auto-restarts unhealthy containers
-  # If qBittorrent loses VPN connection, this restarts it automatically.
   # ============================================================
   deunhealth:
     image: qmcgaw/deunhealth
@@ -129,8 +104,7 @@ services:
     restart: always
 
   # ============================================================
-  # PROWLARR — Indexer Manager (runs through Gluetun VPN)
-  # Manages torrent/usenet indexers. Syncs to Radarr/Sonarr/Lidarr.
+  # PROWLARR — Indexer Manager
   # ============================================================
   prowlarr:
     image: lscr.io/linuxserver/prowlarr:latest
@@ -150,8 +124,7 @@ services:
     restart: unless-stopped
 
   # ============================================================
-  # FLARESOLVERR — Cloudflare Bypass (runs through Gluetun VPN)
-  # Some indexers use Cloudflare protection. This gets around it.
+  # FLARESOLVERR — Cloudflare Bypass
   # ============================================================
   flaresolverr:
     image: ghcr.io/flaresolverr/flaresolverr:latest
@@ -169,9 +142,7 @@ services:
     restart: unless-stopped
 
   # ============================================================
-  # RADARR — Movie Manager (NOT behind VPN)
-  # Searches via Prowlarr, sends downloads to qBittorrent,
-  # renames and hard-links completed files to media folder.
+  # RADARR — Movie Manager
   # ============================================================
   radarr:
     image: lscr.io/linuxserver/radarr:latest
@@ -192,8 +163,7 @@ services:
     restart: unless-stopped
 
   # ============================================================
-  # SONARR — TV Show Manager (NOT behind VPN)
-  # Same pattern as Radarr but for TV series.
+  # SONARR — TV Show Manager
   # ============================================================
   sonarr:
     image: lscr.io/linuxserver/sonarr:latest
@@ -214,8 +184,7 @@ services:
     restart: unless-stopped
 
   # ============================================================
-  # LIDARR — Music Manager (NOT behind VPN)
-  # Optional. Comment out if you don't need music automation.
+  # LIDARR — Music Manager
   # ============================================================
   lidarr:
     image: lscr.io/linuxserver/lidarr:latest
@@ -236,8 +205,7 @@ services:
     restart: unless-stopped
 
   # ============================================================
-  # BAZARR — Subtitle Manager (NOT behind VPN)
-  # Automatically downloads subtitles for movies and TV shows.
+  # BAZARR — Subtitle Manager
   # ============================================================
   bazarr:
     image: lscr.io/linuxserver/bazarr:latest
@@ -258,9 +226,7 @@ services:
     restart: unless-stopped
 
   # ============================================================
-  # JELLYFIN — Media Server (NOT behind VPN)
-  # Your personal streaming service. Plays movies, TV, music.
-  # Needs full bandwidth — never put this behind the VPN.
+  # JELLYFIN — Media Server
   # ============================================================
   jellyfin:
     image: lscr.io/linuxserver/jellyfin:latest
@@ -275,36 +241,16 @@ services:
       - /data/media:/data/media
     ports:
       - 8096:8096
-    # Uncomment the lines below to enable hardware transcoding (Intel Quick Sync / VAAPI).
-    # Only works if your system has Intel/AMD integrated graphics (/dev/dri must exist).
-    # If you get an error about /dev/dri not found, leave these commented out.
-    # devices:
-    #   - /dev/dri:/dev/dri
     networks:
       arrnetwork:
         ipv4_address: ${IP_JELLYFIN}
     restart: unless-stopped
 
   # ============================================================
-  # SEERR — Request System (NOT behind VPN)
-  # Netflix-like UI for requesting movies and TV shows.
-  # Share this with family — they never need to touch Radarr.
-  #
-  # Seerr is the unified successor to Overseerr and Jellyseerr
-  # (merged under seerr-team). Supports Plex, Jellyfin, and Emby.
-  #
-  # Config uses a NAMED Docker volume (not a bind mount). This is
-  # required: Seerr runs as the `node` user (UID 1000) and a
-  # bind-mounted host folder is created root-owned, causing a
-  # permission-denied crash loop. On Windows/WSL, bind mounts also
-  # corrupt the SQLite DB over SMB. Named volumes fix both cases
-  # (matches upstream Seerr docs).
-  #
-  # Migrating from ./jellyseerr or ./seerr bind mount? See README
-  # troubleshooting "Migrating Seerr config to a named volume".
+  # SEERR — Request System
   # ============================================================
   seerr:
-    image: ghcr.io/seerr-team/seerr:v3.0.1
+    image: ghcr.io/seerr-team/seerr:latest
     init: true
     container_name: seerr
     environment:
@@ -315,7 +261,7 @@ services:
       - TZ=${TZ}
       - PORT=5055
     volumes:
-      - seerr_volume:/app/config # <--- Needed or will cause a permissions issue. 
+      - seerr_volume:/app/config
     ports:
       - 5055:5055
     healthcheck:
@@ -329,6 +275,9 @@ services:
         ipv4_address: ${IP_SEERR}
     restart: unless-stopped
 
+  # ============================================================
+  # LISTENARR — Audiobooks & Podcasts
+  # ============================================================
   listenarr:
     image: ghcr.io/listenarrs/listenarr:canary
     container_name: listenarr
@@ -348,6 +297,9 @@ services:
       arrnetwork:
         ipv4_address: ${IP_LIST}
 
+  # ============================================================
+  # AUDIOBOOKSHELF — Audiobook / Podcast Server
+  # ============================================================
   audiobookshelf:
     image: ghcr.io/advplyr/audiobookshelf:latest
     container_name: audiobookshelf
@@ -367,6 +319,10 @@ services:
     networks:
       arrnetwork:
         ipv4_address: ${IP_AUDIO}
+
+  # ============================================================
+  # NAVIDROME — Music Streaming
+  # ============================================================
   navidrome:
     image: deluan/navidrome:latest
     container_name: navidrome
@@ -387,17 +343,19 @@ services:
     networks:
       arrnetwork:
         ipv4_address: ${IP_NAVI}
-      
+
+  # ============================================================
+  # WATCHTOWER — Automatic Image Updates
+  # ============================================================
   watchtower:
-    image: containrrr/watchtower
+    image: nickfedor/watchtower:latest
     container_name: watchtower
     restart: unless-stopped
-    env_file: .env
     environment:
       - DOCKER_API_VERSION=1.44
       - TZ=${TZ}
-      - PUID:=${PUID} # Reference PUID from .env
-      - PGID=${PGID} # Reference PGID from .env
+      - PUID=${PUID}
+      - PGID=${PGID}
       - WATCHTOWER_CLEANUP=${WATCHTOWER_CLEANUP}
       - WATCHTOWER_INCLUDE_RESTARTING=${WATCHTOWER_INCLUDE_RESTARTING}
       - WATCHTOWER_ROLLING_RESTARTING=${WATCHTOWER_ROLLING_RESTARTING}
@@ -411,6 +369,7 @@ services:
       - WATCHTOWER_NOTIFICATION_EMAIL_SERVER_PORT=${WATCHTOWER_NOTIFICATION_EMAIL_SERVER_PORT}
       - WATCHTOWER_NOTIFICATION_EMAIL_SERVER_USER=${WATCHTOWER_NOTIFICATION_EMAIL_SERVER_USER}
       - WATCHTOWER_NOTIFICATION_EMAIL_SERVER_PASSWORD=${WATCHTOWER_NOTIFICATION_EMAIL_SERVER_PASSWORD}
+      - WATCHTOWER_NOTIFICATION_EMAIL_DELAY=${WATCHTOWER_NOTIFICATION_EMAIL_DELAY}
     security_opt:
       - no-new-privileges:true
     volumes:
@@ -421,7 +380,22 @@ services:
     networks:
       arrnetwork:
         ipv4_address: ${IP_WATCH}
-# Go to the VERY BOTTOM of your file (outside of services) and add this:
+
+  sencho:
+    image: saelix/sencho:latest
+    container_name: sencho
+    restart: unless-stopped
+    ports:
+      - "1852:1852"
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+      - /opt/Docker-Deployments/Sencho/data:/app/data
+      # Change this line so the container path matches the host path.
+      - /opt/Docker-Deployments:/opt/Docker-Deployments
+    environment:
+      - COMPOSE_DIR=/opt/Docker-Deployments
+      - DATA_DIR=/app/data
+
 volumes:
   gluetun_volume:
   qbittorrent_volume:
@@ -437,4 +411,4 @@ volumes:
   listenarr_volume:
   audiobookshelf_volume:
   navidrome_volume:
-  watchtower_volume:
+  watchtower_volume: